Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C3OKUKoOabACk-QS3DKsfospE0k.roa
File: C3OKUKoOabACk-QS3DKsfospE0k.roa (raw, json)
Hash identifier: 2PMnwlowIS8hg9LpdPmxPGwTl88jfLP/cpQbQQ0+QRI=
Subject key identifier: 0B:73:8A:50:AA:0E:69:B0:02:93:E4:12:DC:32:AC:7E:8B:29:13:49
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187800BFB9D97FA4BBD6B39F4179ED233FA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C3OKUKoOabACk-QS3DKsfospE0k.roa
Signing time: Fri 14 Apr 2023 13:54:41 +0000
ROA not before: Fri 14 Apr 2023 13:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 5.105.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:0b:fb:9d:97:fa:4b:bd:6b:39:f4:17:9e:d2:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 14 13:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b738a50aa0e69b00293e412dc32ac7e8b291349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:88:12:9c:86:f7:6e:31:7d:bb:77:b1:34:
26:56:ff:87:a4:69:22:c6:f7:12:12:10:2c:ee:51:
b3:2d:c4:65:7e:2b:0c:19:13:3d:f7:a2:2e:ef:9a:
63:d5:20:ca:4f:11:6a:ee:cd:80:55:57:48:d0:a0:
33:03:a9:57:8b:55:8b:33:31:89:26:56:75:86:d6:
b7:5c:2e:0c:aa:1f:57:67:5d:73:39:22:5a:72:c7:
09:e3:e5:64:22:e8:b6:36:09:45:00:df:f4:f3:3b:
d8:2a:d3:7b:2d:6d:c4:32:1c:d3:de:f7:89:38:ed:
b3:9c:4c:61:90:18:5c:82:1d:df:40:43:4c:68:dd:
d0:c6:63:9c:ec:23:6d:a6:24:49:28:0c:cc:8c:57:
80:c3:b3:3d:a4:de:25:af:31:08:e5:cb:04:fa:fb:
96:2b:ea:62:6b:f2:9b:6a:bc:79:3e:74:10:49:80:
90:ab:2b:22:9b:85:4e:76:78:07:62:4d:e6:ca:be:
06:4a:5c:62:25:ce:ac:41:23:5f:a9:64:ab:eb:32:
2e:36:1a:a1:08:e5:a2:3a:95:1f:16:c3:75:3d:28:
35:bd:6f:75:1e:b1:d8:a3:c4:1d:4f:22:f9:72:ba:
80:27:33:bc:01:df:ff:3e:e5:34:c2:ff:68:bc:b2:
02:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:8A:50:AA:0E:69:B0:02:93:E4:12:DC:32:AC:7E:8B:29:13:49
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/C3OKUKoOabACk-QS3DKsfospE0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3b:31:e2:70:51:86:94:bc:56:31:da:02:9f:10:bf:31:ff:
27:62:72:62:a9:6c:65:2d:90:02:4f:e0:8c:d8:14:90:13:46:
a2:f5:38:a7:98:1f:ef:fa:58:68:e1:5d:f8:f7:31:75:9e:b1:
b9:b4:b0:92:16:6f:f4:c6:c5:c9:8e:bf:2c:06:35:cb:23:c6:
53:56:ee:f5:e6:2d:ad:81:cb:c4:85:37:35:ef:d0:dc:ea:0f:
dc:0f:dc:1f:3c:77:83:e2:c1:ea:e2:32:21:0c:83:50:49:b2:
f2:64:16:31:7c:ff:d2:4c:2b:e4:bf:96:55:eb:18:86:b4:c5:
58:e3:d1:45:ca:8d:7a:bb:32:4d:5c:ee:62:24:49:7e:96:b9:
4a:de:4f:32:78:db:e6:23:46:8d:79:a8:84:cb:97:a7:71:02:
0a:b2:bc:f5:08:dc:b6:68:71:7c:fb:ce:21:91:ec:ba:a6:c9:
52:3b:a0:03:d3:9b:59:da:f3:f6:af:6e:3c:84:ac:d7:e4:62:
e6:92:2f:44:a1:32:98:62:c1:e2:2e:79:68:6d:ee:36:92:2c:
1a:41:3a:da:f5:5c:e8:f0:09:70:46:f2:73:a3:90:10:14:65:
d7:3c:9e:1a:b0:1e:64:ee:42:e9:aa:b7:f9:2c:7b:99:a7:60:
9b:b6:f0:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeAC/udl/pLvWs59Bee0jP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDE0MTM1NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjczOGE1MGFhMGU2OWIwMDI5M2U0MTJkYzMyYWM3ZThiMjkxMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgKIEpyG924xfbt3sTQmVv+HpGki
xvcSEhAs7lGzLcRlfisMGRM996Iu75pj1SDKTxFq7s2AVVdI0KAzA6lXi1WLMzGJ
JlZ1hta3XC4Mqh9XZ11zOSJacscJ4+VkIui2NglFAN/08zvYKtN7LW3EMhzT3veJ
OO2znExhkBhcgh3fQENMaN3QxmOc7CNtpiRJKAzMjFeAw7M9pN4lrzEI5csE+vuW
K+pia/Kbarx5PnQQSYCQqysim4VOdngHYk3myr4GSlxiJc6sQSNfqWSr6zIuNhqh
COWiOpUfFsN1PSg1vW91HrHYo8QdTyL5crqAJzO8Ad//PuU0wv9ovLICZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAtzilCqDmmwApPkEtwyrH6LKRNJMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvQzNPS1VLb09hYkFDay1RUzNES3Nmb3NwRTBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWmGMA0G
CSqGSIb3DQEBCwUAA4IBAQCLOzHicFGGlLxWMdoCnxC/Mf8nYnJiqWxlLZACT+CM
2BSQE0ai9TinmB/v+lho4V349zF1nrG5tLCSFm/0xsXJjr8sBjXLI8ZTVu715i2t
gcvEhTc179Dc6g/cD9wfPHeD4sHq4jIhDINQSbLyZBYxfP/STCvkv5ZV6xiGtMVY
49FFyo16uzJNXO5iJEl+lrlK3k8yeNvmI0aNeaiEy5encQIKsrz1CNy2aHF8+84h
key6pslSO6AD05tZ2vP2r248hKzX5GLmki9EoTKYYsHiLnlobe42kiwaQTra9Vzo
8AlwRvJzo5AQFGXXPJ4asB5k7kLpqrf5LHuZp2CbtvBB
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org