Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ek0_NthHQSGcwG5N_CPQTNOI5j4.roa
File: Ek0_NthHQSGcwG5N_CPQTNOI5j4.roa (raw, json)
Hash identifier: hJ+EfZsS0SlUIUiWfRLc04bfg73WHfWBx/7BS7LqQMA=
Subject key identifier: 12:4D:3F:36:D8:47:41:21:9C:C0:6E:4D:FC:23:D0:4C:D3:88:E6:3E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189C74ADAD979F57CE2FDCEADEBE5E1303C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ek0_NthHQSGcwG5N_CPQTNOI5j4.roa
Signing time: Sat 05 Aug 2023 20:01:58 +0000
ROA not before: Sat 05 Aug 2023 20:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.186.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:4a:da:d9:79:f5:7c:e2:fd:ce:ad:eb:e5:e1:30:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 5 20:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=124d3f36d84741219cc06e4dfc23d04cd388e63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:82:8b:29:a9:6a:ac:69:6d:b9:11:86:89:eb:
5e:8c:8f:98:45:83:fd:22:d5:d2:cd:43:02:3f:11:
6e:ed:2d:6c:0b:51:99:2b:ba:86:d5:62:86:33:ea:
c8:14:75:29:d9:95:27:77:69:4a:f3:da:79:a2:6b:
a1:9e:21:37:8a:bf:ad:81:c7:03:7f:cf:28:ea:a4:
77:f5:a1:f4:69:ea:b6:23:06:24:18:2f:e7:77:c0:
2c:37:84:e6:e9:f2:b2:05:31:81:f4:75:9f:aa:38:
4a:fa:c3:dc:30:d3:e6:ac:87:a5:59:56:52:7c:7e:
e5:7a:bd:e5:36:e7:2f:ef:b4:cf:9a:3a:53:30:60:
38:dd:7b:b3:a4:6b:b3:37:7d:61:fe:ee:62:f6:c3:
9c:f9:aa:dd:ef:24:eb:44:02:eb:16:c0:d2:80:9a:
d5:16:97:cc:72:c6:d6:e4:af:5e:63:55:d5:90:40:
ca:f4:25:ae:37:0d:3c:06:c3:2f:3a:e0:9e:29:15:
65:e6:0b:fe:79:c7:f2:a4:46:51:6c:2c:45:3d:22:
56:f1:16:43:7a:e0:be:24:d8:bd:f6:bc:bb:16:47:
2e:db:4a:ed:42:84:87:33:df:27:14:10:e7:d5:fb:
a0:24:a5:b1:a6:bf:7c:8a:cc:b1:e7:66:8b:63:ab:
b9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4D:3F:36:D8:47:41:21:9C:C0:6E:4D:FC:23:D0:4C:D3:88:E6:3E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ek0_NthHQSGcwG5N_CPQTNOI5j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.107.0/24
5.105.186.0/23
5.105.202.0/24
5.105.205.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:e3:f7:da:bc:18:94:c4:07:3d:8e:54:19:8c:2f:5d:03:d2:
a9:a0:91:ba:70:74:72:69:11:2d:b0:1f:ab:ef:74:6b:a9:1e:
e4:79:e8:29:17:3a:46:a1:67:49:e3:e0:7b:cd:ec:57:fa:d9:
fe:76:53:1d:5a:84:66:1a:62:68:99:ec:6a:34:c0:4a:ce:c9:
24:3e:d5:1c:be:97:aa:14:25:06:08:1e:ed:fa:de:cc:3b:97:
da:31:0c:8c:cd:bf:78:ed:f0:02:6f:50:ad:8a:45:e6:4b:07:
aa:8b:95:50:d6:16:ca:2d:c7:bf:cb:3a:fd:a3:13:6e:57:bb:
f3:de:ff:47:e2:af:0f:1a:d1:c4:9b:76:dc:be:e3:e8:d6:2f:
3a:17:fd:e3:c2:e8:4b:2f:46:eb:b5:97:b5:02:08:ba:a2:97:
6f:f6:25:e7:07:24:3b:3a:51:1d:09:21:cf:33:b1:0b:ee:15:
93:3e:9c:45:44:8d:d2:21:e1:4b:05:df:af:04:09:89:af:46:
dd:ef:6c:28:d5:63:bb:4a:57:43:49:fa:4f:4b:9f:5f:47:37:
90:0c:b0:8b:e8:5e:20:4e:f5:d5:6d:b5:78:66:37:ac:11:7d:
e0:f7:08:1c:bd:3d:c9:4e:03:d8:90:47:48:1c:04:e9:9b:7c:
fe:b7:38:8b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYnHStrZefV84v3Orevl4TA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODA1MjAwMTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjRkM2YzNmQ4NDc0MTIxOWNjMDZlNGRmYzIzZDA0Y2QzODhlNjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioKLKalqrGltuRGGietejI+YRYP9
ItXSzUMCPxFu7S1sC1GZK7qG1WKGM+rIFHUp2ZUnd2lK89p5omuhniE3ir+tgccD
f88o6qR39aH0aeq2IwYkGC/nd8AsN4Tm6fKyBTGB9HWfqjhK+sPcMNPmrIelWVZS
fH7ler3lNucv77TPmjpTMGA43XuzpGuzN31h/u5i9sOc+ard7yTrRALrFsDSgJrV
FpfMcsbW5K9eY1XVkEDK9CWuNw08BsMvOuCeKRVl5gv+ecfypEZRbCxFPSJW8RZD
euC+JNi99ry7Fkcu20rtQoSHM98nFBDn1fugJKWxpr98isyx52aLY6u5FwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBJNPzbYR0EhnMBuTfwj0EzTiOY+MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvRWswX050aEhRU0djd0c1Tl9DUFFUTk9JNWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABWlrAwQB
BWm6AwQABWnKAwQABWnNMA0GCSqGSIb3DQEBCwUAA4IBAQDP4/favBiUxAc9jlQZ
jC9dA9KpoJG6cHRyaREtsB+r73RrqR7keegpFzpGoWdJ4+B7zexX+tn+dlMdWoRm
GmJomexqNMBKzskkPtUcvpeqFCUGCB7t+t7MO5faMQyMzb947fACb1CtikXmSweq
i5VQ1hbKLce/yzr9oxNuV7vz3v9H4q8PGtHEm3bcvuPo1i86F/3jwuhLL0brtZe1
Agi6opdv9iXnByQ7OlEdCSHPM7EL7hWTPpxFRI3SIeFLBd+vBAmJr0bd72wo1WO7
SldDSfpPS59fRzeQDLCL6F4gTvXVbbV4ZjesEX3g9wgcvT3JTgPYkEdIHATpm3z+
tziL
-----END CERTIFICATE-----
Generated at Fri Sep 1 08:25:17 2023 by rpki-client on console-ams.rpki-client.org