Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/G8-w6oJXs-vJsi5ybF2FagV-erk.roa
File: G8-w6oJXs-vJsi5ybF2FagV-erk.roa (raw, json)
Hash identifier: 3ImnUcyjCM8cN6jm0iMfZdokMoGDW/I4FSguW2MfXIw=
Subject key identifier: 1B:CF:B0:EA:82:57:B3:EB:C9:B2:2E:72:6C:5D:85:6A:05:7E:7A:B9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C8575E8652659B73891C532690833919
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/G8-w6oJXs-vJsi5ybF2FagV-erk.roa
Signing time: Fri 28 Apr 2023 14:49:41 +0000
ROA not before: Fri 28 Apr 2023 14:49:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:57:5e:86:52:65:9b:73:89:1c:53:26:90:83:39:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 28 14:49:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bcfb0ea8257b3ebc9b22e726c5d856a057e7ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:ac:c9:16:9a:53:a3:c6:72:d6:13:a6:59:
7a:0a:f3:ef:3d:76:ec:26:2f:a9:47:ae:bd:4d:59:
96:ee:57:7c:1f:5d:9a:51:0b:cd:38:32:31:2f:3c:
65:1b:3b:e2:26:24:42:3f:bd:52:50:1b:c8:9a:b7:
78:d9:1d:67:17:9c:7d:11:be:03:c8:48:39:76:9c:
b1:e2:e4:1e:49:04:a6:f9:6b:15:ab:53:c7:48:2f:
9e:86:9f:d6:92:07:15:3e:24:97:7c:1a:27:45:56:
84:8e:38:dd:cc:2b:f2:54:b8:df:cc:f3:60:a8:68:
f2:1e:e8:a6:77:92:9d:76:cc:4d:8c:63:87:b0:67:
7a:24:29:ac:25:ff:3e:e9:96:82:71:69:6c:8c:11:
fc:d6:21:30:73:e4:fc:ef:18:16:19:e2:ce:bc:4c:
c9:f8:72:33:bd:94:e6:5b:4c:2a:c9:7b:2a:28:04:
2f:55:98:aa:49:4a:92:9e:64:9a:07:03:e2:5a:93:
76:77:31:5e:06:46:ab:e3:85:96:ba:2c:27:28:68:
36:48:99:00:2c:ee:2b:bb:27:a6:4d:50:ad:c0:3b:
17:07:47:12:f3:6e:9e:7d:9b:6e:f7:1e:5e:a3:f9:
98:00:9e:11:4e:97:dd:d7:b5:d1:bc:54:f9:d3:23:
83:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CF:B0:EA:82:57:B3:EB:C9:B2:2E:72:6C:5D:85:6A:05:7E:7A:B9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/G8-w6oJXs-vJsi5ybF2FagV-erk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
5.105.63.0/24
5.105.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:35:a9:b3:e8:69:57:93:01:45:6b:a6:46:80:ad:9c:48:80:
b1:82:a4:3c:ae:d6:65:df:92:0a:72:d7:b5:8f:f0:aa:5e:4c:
e6:ed:c7:81:6f:2a:70:43:ee:53:2c:1b:26:19:4a:3f:a4:70:
8e:a3:a5:21:03:d8:6b:4d:eb:7b:db:a8:15:1e:6e:a6:21:10:
e9:81:d0:72:a3:b1:ba:cc:d6:4b:99:c0:07:3b:4b:b8:2b:81:
78:15:b1:65:aa:01:39:3a:d6:c4:76:f0:ff:6c:07:ce:8d:95:
2f:66:cd:ac:88:13:cf:0d:19:96:f1:fd:f9:d7:6f:2e:f5:2f:
66:5e:a0:9b:86:9d:8c:91:55:cb:ff:50:d3:30:a7:9e:e0:fe:
a8:d7:b3:ba:56:db:2a:eb:fb:30:06:b3:48:d2:67:9d:7a:62:
10:57:5a:d5:38:b6:73:40:ac:f1:fd:a7:89:c7:a3:e3:24:37:
ef:cd:33:d8:5f:46:a1:1d:43:ee:00:49:38:04:f2:61:b0:35:
4b:c6:fd:8d:d0:bb:30:9d:80:85:68:ef:fa:6a:4d:c0:66:29:
af:b7:b8:a3:ab:4d:09:16:15:90:f3:ec:de:ed:51:3d:75:c5:
d9:1c:32:04:c3:f3:60:a8:75:b8:41:74:09:ec:95:f2:b1:33:
33:cb:c6:aa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYfIV16GUmWbc4kcUyaQgzkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDI4MTQ0OTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmNmYjBlYTgyNTdiM2ViYzliMjJlNzI2YzVkODU2YTA1N2U3YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuGsyRaaU6PGctYTpll6CvPvPXbs
Ji+pR669TVmW7ld8H12aUQvNODIxLzxlGzviJiRCP71SUBvImrd42R1nF5x9Eb4D
yEg5dpyx4uQeSQSm+WsVq1PHSC+ehp/WkgcVPiSXfBonRVaEjjjdzCvyVLjfzPNg
qGjyHuimd5KddsxNjGOHsGd6JCmsJf8+6ZaCcWlsjBH81iEwc+T87xgWGeLOvEzJ
+HIzvZTmW0wqyXsqKAQvVZiqSUqSnmSaBwPiWpN2dzFeBkar44WWuiwnKGg2SJkA
LO4ruyemTVCtwDsXB0cS826efZtu9x5eo/mYAJ4RTpfd17XRvFT50yODKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBvPsOqCV7PrybIucmxdhWoFfnq5MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvRzgtdzZvSlhzLXZKc2k1eWJGMkZhZ1YtZXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABWkeAwQA
BWk/AwQABWlVMA0GCSqGSIb3DQEBCwUAA4IBAQCjNamz6GlXkwFFa6ZGgK2cSICx
gqQ8rtZl35IKcte1j/CqXkzm7ceBbypwQ+5TLBsmGUo/pHCOo6UhA9hrTet726gV
Hm6mIRDpgdByo7G6zNZLmcAHO0u4K4F4FbFlqgE5OtbEdvD/bAfOjZUvZs2siBPP
DRmW8f35128u9S9mXqCbhp2MkVXL/1DTMKee4P6o17O6Vtsq6/swBrNI0medemIQ
V1rVOLZzQKzx/aeJx6PjJDfvzTPYX0ahHUPuAEk4BPJhsDVLxv2N0LswnYCFaO/6
ak3AZimvt7ijq00JFhWQ8+ze7VE9dcXZHDIEw/NgqHW4QXQJ7JXysTMzy8aq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:59 2023 by rpki-client on console-ams.rpki-client.org