Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Eym0MkbzOwrjqJqr3l055UIQfsI.roa
File: Eym0MkbzOwrjqJqr3l055UIQfsI.roa (raw, json)
Hash identifier: xb8c28idNGUYBKvzwACo6MkP6TEE+zos6OESwzgQCRI=
Subject key identifier: 13:29:B4:32:46:F3:3B:0A:E3:A8:9A:AB:DE:5D:39:E5:42:10:7E:C2
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189AD69A1C96553423F269CDB4BC8812B31
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Eym0MkbzOwrjqJqr3l055UIQfsI.roa
Signing time: Mon 31 Jul 2023 19:25:28 +0000
ROA not before: Mon 31 Jul 2023 19:25:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43072
IP address blocks: 5.105.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:69:a1:c9:65:53:42:3f:26:9c:db:4b:c8:81:2b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 31 19:25:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1329b43246f33b0ae3a89aabde5d39e542107ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:c2:e9:48:10:3d:48:11:56:d5:79:87:74:
2c:1c:28:fd:2b:db:87:00:ea:b7:66:7b:cd:a0:8c:
ae:b6:62:d5:30:b8:e4:c6:93:6a:43:38:c3:7c:7c:
3d:3e:ac:af:fa:24:57:14:44:0c:73:d5:2e:a9:75:
a4:0b:ee:2f:9a:b6:32:42:e5:76:b2:29:c7:34:60:
3b:53:35:d4:26:ad:c2:a4:bc:71:9e:d6:f4:2a:54:
24:c2:8f:c1:ba:76:4b:5e:d8:dc:81:ac:e6:5b:64:
83:77:b3:bc:c6:75:2c:9a:29:5d:98:93:97:de:68:
62:ad:7e:fa:ed:ee:3c:4e:58:6a:96:29:0c:ea:0a:
74:c9:42:a6:2f:1a:02:cd:a0:25:03:37:3a:0e:05:
dd:3a:a6:27:eb:7d:46:6e:1c:d4:11:cb:08:f6:3c:
0b:4b:c1:ff:8c:8a:0b:6c:8b:df:78:1b:3f:62:ac:
f4:3c:8e:dd:9e:fb:7f:66:cb:c1:54:66:d5:8d:3c:
1f:56:39:ea:da:83:3d:d6:28:ca:46:1f:a6:b7:4a:
3c:fe:cb:05:7f:ed:db:c3:a5:12:ce:c4:a9:25:4d:
17:f6:8b:89:05:96:93:dd:5b:ca:10:44:41:13:b3:
40:e9:5a:26:95:08:b6:d4:f5:d4:7e:ef:82:b1:5f:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:29:B4:32:46:F3:3B:0A:E3:A8:9A:AB:DE:5D:39:E5:42:10:7E:C2
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Eym0MkbzOwrjqJqr3l055UIQfsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.113.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:77:ec:6e:9f:2e:6e:40:b3:ad:a0:99:55:76:f6:29:5d:d5:
a8:b6:95:fb:51:88:1e:57:41:13:b6:0b:cf:c7:e9:ac:0b:ec:
79:91:14:ed:22:45:83:f9:4b:c4:2d:f2:50:ea:22:cd:a9:90:
0a:2f:a9:7d:32:48:d9:47:d8:7b:69:00:4d:72:b0:78:d7:40:
af:fe:a4:0f:b8:3f:e9:c9:d2:16:cf:9f:d6:41:61:25:15:dc:
9a:09:3c:d3:43:4b:b2:1e:39:e5:f3:6b:fd:04:8c:f9:3e:ae:
ca:f9:f6:87:54:bd:74:4b:27:cf:b7:b8:30:30:c4:27:b1:3e:
d8:3b:85:57:b2:0d:3e:eb:65:fe:01:47:c5:ec:12:c3:b6:f8:
31:46:b9:75:20:d1:96:e9:4f:65:b2:c9:25:b2:18:bc:ea:64:
ee:52:1d:2b:9e:4d:f7:ed:85:41:9d:23:43:46:fd:d4:a3:3a:
49:f3:9a:d4:e5:86:fd:6c:a3:b5:7c:08:b4:5e:bd:e0:54:4f:
3b:74:94:74:27:9e:fc:ca:9b:31:37:67:12:4d:37:bb:2e:79:
0c:2b:ef:bf:24:00:77:cb:fb:f5:54:19:5c:eb:f7:6a:68:3b:
86:de:42:ed:0c:cd:84:80:f0:89:1e:b6:1c:6c:4b:f3:38:73:
7c:7a:80:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmtaaHJZVNCPyac20vIgSsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzMxMTkyNTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzI5YjQzMjQ2ZjMzYjBhZTNhODlhYWJkZTVkMzllNTQyMTA3ZWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyXC6UgQPUgRVtV5h3QsHCj9K9uH
AOq3ZnvNoIyutmLVMLjkxpNqQzjDfHw9Pqyv+iRXFEQMc9UuqXWkC+4vmrYyQuV2
sinHNGA7UzXUJq3CpLxxntb0KlQkwo/BunZLXtjcgazmW2SDd7O8xnUsmildmJOX
3mhirX767e48TlhqlikM6gp0yUKmLxoCzaAlAzc6DgXdOqYn631GbhzUEcsI9jwL
S8H/jIoLbIvfeBs/Yqz0PI7dnvt/ZsvBVGbVjTwfVjnq2oM91ijKRh+mt0o8/ssF
f+3bw6USzsSpJU0X9ouJBZaT3VvKEERBE7NA6VomlQi21PXUfu+CsV8LSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBMptDJG8zsK46iaq95dOeVCEH7CMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvRXltME1rYnpPd3JqcUpxcjNsMDU1VUlRZnNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWlxMA0G
CSqGSIb3DQEBCwUAA4IBAQCod+xuny5uQLOtoJlVdvYpXdWotpX7UYgeV0ETtgvP
x+msC+x5kRTtIkWD+UvELfJQ6iLNqZAKL6l9MkjZR9h7aQBNcrB410Cv/qQPuD/p
ydIWz5/WQWElFdyaCTzTQ0uyHjnl82v9BIz5Pq7K+faHVL10SyfPt7gwMMQnsT7Y
O4VXsg0+62X+AUfF7BLDtvgxRrl1INGW6U9lssklshi86mTuUh0rnk337YVBnSND
Rv3UozpJ85rU5Yb9bKO1fAi0Xr3gVE87dJR0J578ypsxN2cSTTe7LnkMK++/JAB3
y/v1VBlc6/dqaDuG3kLtDM2EgPCJHrYcbEvzOHN8eoD9
-----END CERTIFICATE-----
Generated at Tue Aug 8 05:57:18 2023 by rpki-client on console-fra.rpki-client.org