Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9666Xgzymu3dIae-ruvlI4pohzc.roa
File: 9666Xgzymu3dIae-ruvlI4pohzc.roa (raw, json)
Hash identifier: WWsiKrhVvlK5HOoPUwheGMA4jbWiEDfySrZrsuQw7ys=
Subject key identifier: F7:AE:BA:5E:0C:F2:9A:ED:DD:21:A7:BE:AE:EB:E5:23:8A:68:87:37
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01863BA6BB7A1D7124FA96B6FD37CEA1BADD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9666Xgzymu3dIae-ruvlI4pohzc.roa
Signing time: Fri 10 Feb 2023 14:07:08 +0000
ROA not before: Fri 10 Feb 2023 14:07:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.80.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.214.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:a6:bb:7a:1d:71:24:fa:96:b6:fd:37:ce:a1:ba:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 10 14:07:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7aeba5e0cf29aeddd21a7beaeebe5238a688737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:64:ea:58:c3:1d:58:b1:31:af:fc:6e:26:cb:
1f:33:de:89:62:6d:5a:e0:1d:7b:d6:20:3d:5c:d9:
3c:02:a7:f9:50:af:1a:c9:e9:bd:9a:1a:d1:a3:a8:
1b:fb:5a:50:4d:43:05:28:2e:2a:1f:51:9d:24:db:
83:7c:f3:68:91:d6:43:dd:02:16:af:b8:c3:9e:81:
89:12:35:1c:2d:71:fd:eb:20:3c:44:f3:db:a5:f1:
d7:e2:81:3f:d0:dd:d1:a2:b1:f6:2f:4b:f3:9b:40:
0f:36:43:2c:6b:fc:ea:23:c1:e2:2a:aa:13:9b:04:
9f:06:c0:90:37:b1:ed:a3:ef:f4:bb:f2:5d:39:1f:
9d:81:ca:ea:9e:87:13:9f:0c:f1:8e:63:bb:9d:7d:
cf:d9:a7:bc:75:94:7f:25:da:80:de:29:f6:f9:d9:
fc:a3:58:3e:7b:c6:89:4e:12:04:97:fd:17:82:c8:
eb:58:3d:d6:e1:0e:7f:1a:bd:2e:f6:d4:73:94:40:
a7:14:6a:fd:c3:33:30:7e:bb:5c:59:05:b5:5f:76:
90:fb:94:88:0d:2a:d4:65:70:9c:58:7b:c1:2f:d1:
8f:0d:18:50:b7:5d:c5:c6:c0:96:8f:e7:ef:ab:5e:
58:7c:93:e2:96:36:55:a0:ff:93:41:80:83:cd:b3:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:BA:5E:0C:F2:9A:ED:DD:21:A7:BE:AE:EB:E5:23:8A:68:87:37
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/9666Xgzymu3dIae-ruvlI4pohzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.80.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.156.0/23
5.105.168.0/24
5.105.197.0/24
5.105.214.0/24
5.105.216.0/24
Signature Algorithm: sha256WithRSAEncryption
90:33:79:72:34:e7:31:2c:fc:64:c0:0b:aa:72:a1:c1:8b:3f:
c2:e8:f5:41:bc:00:bf:75:57:ec:69:f3:e9:af:70:bd:83:a2:
ab:8f:0c:97:bc:af:72:f0:0e:6b:1b:2e:5c:d2:f1:a1:22:54:
66:75:1d:ff:98:4d:c4:be:e0:89:2a:b9:a9:84:48:62:39:61:
69:75:4e:29:43:a9:28:8f:08:e8:fc:a0:9f:56:83:20:ec:50:
71:94:7c:e7:3c:23:e6:f8:bb:f2:f5:7f:36:86:08:54:a6:3b:
27:45:34:bb:64:7a:e3:a4:6d:d7:6b:22:ea:af:d3:b9:03:4a:
62:e0:27:3b:ce:22:45:01:8d:22:89:24:0f:6e:0b:34:c2:99:
93:d2:cc:51:92:29:24:6a:b4:00:3d:e0:b5:ed:d3:27:3e:78:
13:7e:4c:18:3b:9a:7a:7a:7c:ac:2b:7a:bf:f9:e2:03:36:19:
62:49:ee:3b:97:27:fd:4a:89:f1:46:8e:36:d1:c7:f6:46:d7:
be:44:92:33:39:7b:09:fd:1f:1b:ae:df:3f:fe:3a:cc:b3:12:
8d:b3:2c:6b:f5:24:38:33:d7:b6:7f:5a:54:b2:51:7c:49:b3:
63:1b:f0:d4:ea:27:a0:31:33:ad:ab:d3:07:c7:8e:1c:f9:b7:
3c:43:73:97
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYY7prt6HXEk+pa2/TfOobrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjEwMTQwNzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2FlYmE1ZTBjZjI5YWVkZGQyMWE3YmVhZWViZTUyMzhhNjg4NzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmTqWMMdWLExr/xuJssfM96JYm1a
4B171iA9XNk8Aqf5UK8ayem9mhrRo6gb+1pQTUMFKC4qH1GdJNuDfPNokdZD3QIW
r7jDnoGJEjUcLXH96yA8RPPbpfHX4oE/0N3RorH2L0vzm0APNkMsa/zqI8HiKqoT
mwSfBsCQN7Hto+/0u/JdOR+dgcrqnocTnwzxjmO7nX3P2ae8dZR/JdqA3in2+dn8
o1g+e8aJThIEl/0XgsjrWD3W4Q5/Gr0u9tRzlECnFGr9wzMwfrtcWQW1X3aQ+5SI
DSrUZXCcWHvBL9GPDRhQt13FxsCWj+fvq15YfJPiljZVoP+TQYCDzbOViQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFPeuul4M8prt3SGnvq7r5SOKaIc3MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvOTY2NlhnenltdTNkSWFlLXJ1dmxJNHBvaHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABWkdAwQA
BWlQAwQABWl/AwQABWmDAwQABWmGAwQBBWmcAwQABWmoAwQABWnFAwQABWnWAwQA
BWnYMA0GCSqGSIb3DQEBCwUAA4IBAQCQM3lyNOcxLPxkwAuqcqHBiz/C6PVBvAC/
dVfsafPpr3C9g6KrjwyXvK9y8A5rGy5c0vGhIlRmdR3/mE3EvuCJKrmphEhiOWFp
dU4pQ6kojwjo/KCfVoMg7FBxlHznPCPm+Lvy9X82hghUpjsnRTS7ZHrjpG3XayLq
r9O5A0pi4Cc7ziJFAY0iiSQPbgs0wpmT0sxRkikkarQAPeC17dMnPngTfkwYO5p6
enysK3q/+eIDNhliSe47lyf9SonxRo420cf2Rte+RJIzOXsJ/R8brt8//jrMsxKN
syxr9SQ4M9e2f1pUslF8SbNjG/DU6iegMTOtq9MHx44c+bc8Q3OX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org