Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DWa5iVUwq5XXuXXsnyzBLWQ9f1c.roa
File: DWa5iVUwq5XXuXXsnyzBLWQ9f1c.roa (raw, json)
Hash identifier: c/fbaW7BioVSTgArIkte2kWFiCmp7bGDN4PSXGKBxgs=
Subject key identifier: 0D:66:B9:89:55:30:AB:95:D7:B9:75:EC:9F:2C:C1:2D:64:3D:7F:57
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187FA610EBC34D50F55FBA8F43B2601D52D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DWa5iVUwq5XXuXXsnyzBLWQ9f1c.roa
Signing time: Mon 08 May 2023 08:01:17 +0000
ROA not before: Mon 08 May 2023 08:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:61:0e:bc:34:d5:0f:55:fb:a8:f4:3b:26:01:d5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 8 08:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d66b9895530ab95d7b975ec9f2cc12d643d7f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:d0:73:47:af:da:3f:d7:cb:f8:ba:be:57:
2b:1a:e7:54:a2:6e:3a:43:6f:96:7b:ec:54:a9:fe:
9a:51:04:4f:2d:6c:8a:39:eb:b3:c1:57:06:89:c5:
f5:b1:d8:99:bf:0b:95:4f:cb:b6:c0:c9:bf:67:05:
8c:ae:7d:9b:39:68:d4:e6:55:51:31:2d:81:b0:81:
70:53:e4:94:d8:09:ad:8f:ce:8b:5e:0a:80:1e:ce:
f2:92:75:21:31:c2:ae:16:8a:15:38:7a:d7:9b:f8:
98:bb:3d:99:d3:d5:87:f6:b9:52:ae:33:51:10:dc:
14:0c:3d:da:00:f5:76:d6:99:1f:d0:68:94:ea:14:
ca:16:41:77:27:5c:b0:4c:1a:ae:29:ba:ed:48:12:
ee:c8:e0:99:a0:5c:3f:d0:41:0f:8e:46:32:e3:8f:
44:d3:cb:e0:e5:c8:34:41:3f:4e:48:2d:c4:86:76:
18:46:a1:b4:b3:4e:20:b3:0e:36:31:0b:04:58:6b:
a8:ce:11:09:8f:ce:16:0b:c9:9e:6b:71:8c:c0:04:
ce:c9:cc:3d:4e:0f:cb:2b:e9:a9:32:61:ff:e4:24:
df:2a:60:78:71:46:5d:41:3e:52:61:3f:da:3d:ee:
d2:4f:53:a4:7e:23:43:83:d3:cb:2d:ce:2a:da:e6:
b1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:66:B9:89:55:30:AB:95:D7:B9:75:EC:9F:2C:C1:2D:64:3D:7F:57
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/DWa5iVUwq5XXuXXsnyzBLWQ9f1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.34.0/24
5.105.39.0/24
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.142.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.216.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:ec:10:ae:02:6c:55:c6:e2:9d:6f:50:cc:a7:16:c0:30:9a:
e9:06:01:27:e5:49:cc:80:90:3e:70:91:d4:0b:21:db:27:7c:
a5:b7:a1:81:67:5a:b2:30:6a:34:45:74:47:bb:58:9f:f1:8f:
d2:e4:fe:fe:90:d6:55:eb:3e:b3:a9:8e:43:32:c2:b0:8b:ca:
f1:8e:ec:1c:c5:6c:04:7a:3d:27:26:72:bc:df:0a:f2:6c:bc:
95:76:11:17:79:24:8d:91:1b:c8:81:73:1b:e4:db:0b:8a:4f:
ab:49:a7:a8:5b:bb:c4:64:e3:68:1a:1b:38:d9:e3:0c:e8:03:
11:e3:57:6f:a7:08:9c:a7:87:f1:bc:ab:e6:95:40:5f:4f:b7:
93:c5:34:05:a3:30:eb:ce:4d:92:ac:1e:2e:8d:a4:03:52:4b:
be:24:df:b8:09:10:39:36:a7:94:04:15:85:db:b9:22:4e:6f:
7b:a7:f0:85:92:e1:63:f1:23:03:81:c5:db:85:63:f1:d4:48:
01:82:47:25:f5:61:c1:67:86:4d:9b:f6:fc:f7:bf:de:48:e9:
86:68:b5:fb:bd:26:d7:7a:eb:61:91:a6:a7:49:26:9b:4e:6d:
e6:e6:53:8a:e6:aa:a1:8c:6c:02:a3:67:93:21:aa:c1:4b:e9:
e7:6d:52:da
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYf6YQ68NNUPVfuo9DsmAdUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNTA4MDgwMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDY2Yjk4OTU1MzBhYjk1ZDdiOTc1ZWM5ZjJjYzEyZDY0M2Q3ZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgfQc0ev2j/Xy/i6vlcrGudUom46
Q2+We+xUqf6aUQRPLWyKOeuzwVcGicX1sdiZvwuVT8u2wMm/ZwWMrn2bOWjU5lVR
MS2BsIFwU+SU2Amtj86LXgqAHs7yknUhMcKuFooVOHrXm/iYuz2Z09WH9rlSrjNR
ENwUDD3aAPV21pkf0GiU6hTKFkF3J1ywTBquKbrtSBLuyOCZoFw/0EEPjkYy449E
08vg5cg0QT9OSC3EhnYYRqG0s04gsw42MQsEWGuozhEJj84WC8mea3GMwATOycw9
Tg/LK+mpMmH/5CTfKmB4cUZdQT5SYT/aPe7ST1OkfiNDg9PLLc4q2uaxWwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFA1muYlVMKuV17l17J8swS1kPX9XMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvRFdhNWlWVXdxNVhYdVhYc255ekJMV1E5ZjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQABWkdAwQA
BWkiAwQABWknAwQABWl8AwQABWl/AwQABWmLAwQABWmOAwQABWmdAwQABWnIAwQA
BWnPAwQABWnYAwQABWn5MA0GCSqGSIb3DQEBCwUAA4IBAQCr7BCuAmxVxuKdb1DM
pxbAMJrpBgEn5UnMgJA+cJHUCyHbJ3ylt6GBZ1qyMGo0RXRHu1if8Y/S5P7+kNZV
6z6zqY5DMsKwi8rxjuwcxWwEej0nJnK83wrybLyVdhEXeSSNkRvIgXMb5NsLik+r
SaeoW7vEZONoGhs42eMM6AMR41dvpwicp4fxvKvmlUBfT7eTxTQFozDrzk2SrB4u
jaQDUku+JN+4CRA5NqeUBBWF27kiTm97p/CFkuFj8SMDgcXbhWPx1EgBgkcl9WHB
Z4ZNm/b897/eSOmGaLX7vSbXeuthkaanSSabTm3m5lOK5qqhjGwCo2eTIarBS+nn
bVLa
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org