Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AvoGS0HMxlyJyeQCgnP5uMVrKgs.roa
File: AvoGS0HMxlyJyeQCgnP5uMVrKgs.roa (raw, json)
Hash identifier: 232RxMTA8eqDUdsmbfOQjnXVQ0lvOZAbk3duaDIyUSM=
Subject key identifier: 02:FA:06:4B:41:CC:C6:5C:89:C9:E4:02:82:73:F9:B8:C5:6B:2A:0B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186F3992DBCCEB4985C3D309B72792E34CC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AvoGS0HMxlyJyeQCgnP5uMVrKgs.roa
Signing time: Sat 18 Mar 2023 07:22:27 +0000
ROA not before: Sat 18 Mar 2023 07:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.59.0/24 maxlen: 24
5.105.75.0/24 maxlen: 24
5.105.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f3:99:2d:bc:ce:b4:98:5c:3d:30:9b:72:79:2e:34:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 18 07:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=02fa064b41ccc65c89c9e4028273f9b8c56b2a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e8:f5:54:38:e9:b6:33:56:77:72:e5:2b:af:
10:17:a3:c6:c3:7e:58:a5:99:bf:0b:79:78:d2:13:
3d:63:33:7d:83:5e:73:26:eb:d7:f2:b8:d1:a9:c5:
17:55:b1:c1:18:a0:5a:e9:ef:d5:46:01:ba:87:40:
59:85:5e:dc:01:ee:46:9d:3b:62:87:9b:a3:fe:ca:
b1:14:a9:a3:f2:8f:b5:28:41:04:af:b3:10:2b:b8:
bf:f7:49:1d:1c:e6:b0:c8:32:5f:29:94:29:95:54:
ee:ef:6c:1a:5f:7e:51:de:ef:8b:4b:00:53:47:09:
29:cd:41:76:6b:d2:fc:fb:12:24:da:31:c6:eb:2f:
2b:18:63:76:8c:c4:19:bc:1c:d4:6a:64:49:20:e2:
76:75:82:4c:29:93:9b:b3:82:a2:92:70:fb:57:b4:
a6:15:fd:a4:2c:2f:21:fc:72:cf:43:0f:58:0f:a2:
b0:6a:b4:f7:5c:01:a7:b4:99:24:23:d8:b3:1d:62:
4c:6f:7c:8c:ef:a1:13:2c:c2:af:d4:23:5a:62:08:
d5:0a:ce:02:de:08:5c:9a:6e:79:f7:60:e4:46:26:
21:36:c3:63:67:3d:9a:ba:11:c1:07:b6:d0:4e:4c:
06:5d:0c:4e:27:be:d1:cb:1d:e4:35:46:53:b6:6e:
4c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FA:06:4B:41:CC:C6:5C:89:C9:E4:02:82:73:F9:B8:C5:6B:2A:0B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/AvoGS0HMxlyJyeQCgnP5uMVrKgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.5.0/24
5.105.26.0/24
5.105.59.0/24
5.105.75.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7e:86:50:e7:b0:57:17:9f:3f:b9:f6:a9:e8:50:1e:97:5f:
e1:a6:56:bb:85:f7:32:ef:2a:26:7c:7e:36:20:9c:14:e9:c8:
d2:3e:f7:b1:dd:09:c6:a3:9c:98:22:ed:ee:43:c9:d4:20:dd:
12:bd:f7:43:8b:8b:27:55:26:c8:42:6d:7b:dc:65:a1:5c:7c:
d5:41:fe:47:31:74:80:3e:f0:ba:b0:69:34:b5:5f:6a:79:4a:
a0:a4:12:b7:f1:3b:1f:b0:58:46:65:91:a7:98:bc:a0:77:e2:
fb:39:14:b7:8e:dc:eb:73:54:8d:bc:14:8e:89:57:1e:d7:a2:
b8:51:ef:ad:b2:78:9f:59:47:fc:a9:2f:95:2d:53:c4:e6:e0:
c6:87:3a:39:4e:90:29:ae:a8:e3:cd:f5:3c:89:fb:f4:2a:b4:
d5:29:91:b4:f5:51:4b:ba:1c:9b:0a:1f:2a:ad:c0:3a:5d:02:
b7:93:9b:72:79:e6:79:d2:56:ec:95:d3:df:b9:8f:e0:ef:a1:
84:03:05:d4:f2:91:20:8b:aa:ca:2e:57:70:dc:23:36:ea:7f:
20:04:22:1b:3c:59:01:10:19:15:f3:9e:ad:5b:df:24:b4:35:
a6:51:a1:6b:b7:05:9c:1b:b0:20:f1:15:95:68:ae:4b:72:53:
56:14:a4:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYbzmS28zrSYXD0wm3J5LjTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzE4MDcyMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmZhMDY0YjQxY2NjNjVjODljOWU0MDI4MjczZjliOGM1NmIyYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+j1VDjptjNWd3LlK68QF6PGw35Y
pZm/C3l40hM9YzN9g15zJuvX8rjRqcUXVbHBGKBa6e/VRgG6h0BZhV7cAe5GnTti
h5uj/sqxFKmj8o+1KEEEr7MQK7i/90kdHOawyDJfKZQplVTu72waX35R3u+LSwBT
RwkpzUF2a9L8+xIk2jHG6y8rGGN2jMQZvBzUamRJIOJ2dYJMKZObs4KiknD7V7Sm
Ff2kLC8h/HLPQw9YD6KwarT3XAGntJkkI9izHWJMb3yM76ETLMKv1CNaYgjVCs4C
3ghcmm5592DkRiYhNsNjZz2auhHBB7bQTkwGXQxOJ77Ryx3kNUZTtm5MhwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAL6BktBzMZcicnkAoJz+bjFayoLMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvQXZvR1MwSE14bHlKeWVRQ2duUDV1TVZyS2dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABWkFAwQA
BWkaAwQABWk7AwQABWlLMA0GCSqGSIb3DQEBCwUAA4IBAQBofoZQ57BXF58/ufap
6FAel1/hpla7hfcy7yomfH42IJwU6cjSPvex3QnGo5yYIu3uQ8nUIN0SvfdDi4sn
VSbIQm173GWhXHzVQf5HMXSAPvC6sGk0tV9qeUqgpBK38TsfsFhGZZGnmLygd+L7
ORS3jtzrc1SNvBSOiVce16K4Ue+tsnifWUf8qS+VLVPE5uDGhzo5TpAprqjjzfU8
ifv0KrTVKZG09VFLuhybCh8qrcA6XQK3k5tyeeZ50lbsldPfuY/g76GEAwXU8pEg
i6rKLldw3CM26n8gBCIbPFkBEBkV856tW98ktDWmUaFrtwWcG7Ag8RWVaK5LclNW
FKSf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org