Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GWZT20wuA_fCKv8kMxnH2ztQm4A.roa
File: GWZT20wuA_fCKv8kMxnH2ztQm4A.roa (raw, json)
Hash identifier: Mxj12Bo+uWxlxDLvTA/7ZfzGu4fWtCOkfn6R4BuMlFE=
Subject key identifier: 19:66:53:DB:4C:2E:03:F7:C2:2A:FF:24:33:19:C7:DB:3B:50:9B:80
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B6C6EC1C70F28FF9A4B755E52CF5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GWZT20wuA_fCKv8kMxnH2ztQm4A.roa
Signing time: Sun 01 Jan 2023 05:54:54 +0000
ROA not before: Sun 01 Jan 2023 05:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 5.105.48.0/23 maxlen: 24
5.105.48.0/24 maxlen: 24
5.105.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b6:c6:ec:1c:70:f2:8f:f9:a4:b7:55:e5:2c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196653db4c2e03f7c22aff243319c7db3b509b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:06:f6:07:0a:e4:10:41:f7:3c:d3:d1:0a:
aa:00:7d:8f:51:79:16:f1:33:57:06:25:dc:40:49:
7f:92:78:43:5a:d9:1b:1b:4c:20:6c:9a:d7:f2:e2:
8f:0d:1c:0b:d0:74:96:a4:b4:5b:c7:03:2e:c0:6d:
7e:86:70:fa:ef:48:7f:2f:7d:22:af:88:52:60:31:
20:d2:bd:89:71:1a:86:b4:6c:ea:bf:bb:c4:55:3c:
92:fb:56:19:8c:57:a2:09:a1:66:19:93:14:52:0e:
d2:82:a1:d9:4c:d3:92:66:49:fd:85:cb:80:5b:9e:
b6:56:bb:41:94:d1:f2:4a:10:2a:30:a3:7c:44:1e:
99:00:08:8d:ad:1c:8d:bd:b3:31:95:c0:4b:dc:66:
d6:df:c8:7d:6d:9e:96:33:a1:27:66:81:4a:31:61:
be:87:56:48:f1:27:4d:e5:c4:35:ee:ef:00:c7:1c:
36:14:da:a6:30:2c:ef:5c:e1:d3:11:89:a2:b3:1b:
ab:8f:ff:26:84:32:f5:77:ce:9a:c9:50:d5:1d:c8:
34:c1:1e:e7:9c:a8:e6:4e:ed:4a:19:c2:e7:74:ef:
cf:6c:73:42:5b:19:b1:9b:df:01:3f:8e:c3:9d:f5:
3a:17:d4:9d:98:a7:f8:3c:0d:e7:33:87:54:cf:43:
a7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:66:53:DB:4C:2E:03:F7:C2:2A:FF:24:33:19:C7:DB:3B:50:9B:80
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/GWZT20wuA_fCKv8kMxnH2ztQm4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:84:9d:f5:24:a8:83:d7:ef:89:33:94:f5:ab:2a:29:12:8d:
12:ee:da:46:64:38:3f:bb:ca:a6:28:f8:3b:d4:c9:e0:00:ae:
d8:a9:64:ef:f8:67:c5:a1:e1:4d:1d:61:2d:a8:89:2b:56:7f:
42:11:7b:16:34:2a:2d:a9:40:0e:ff:bf:b0:7d:ba:1e:4a:40:
68:29:c3:50:5e:a7:1c:96:50:9b:e0:9b:a0:a3:98:ee:32:77:
fe:a9:5c:f2:8f:0d:29:1e:87:a5:12:6d:ec:b9:a9:fb:47:a7:
3c:a2:72:d3:bb:26:ab:2c:62:ca:4e:7e:86:78:df:5e:ca:d8:
48:6d:0e:9e:2f:8e:86:31:97:c4:e9:5f:0f:fa:14:ae:3e:df:
2e:f9:77:78:b6:65:3d:2d:8d:8b:cc:98:42:a8:b4:56:04:4a:
6b:9f:3a:eb:31:b1:98:bb:bb:2d:76:0e:b3:58:43:70:9c:54:
ce:f5:3d:0b:eb:e4:e7:4d:95:51:a1:9f:6b:25:05:22:16:2e:
d7:7a:c6:d1:df:77:3c:77:da:90:7b:aa:5a:40:d6:8c:a2:9a:
da:93:73:1b:24:8e:61:12:70:6e:31:49:9f:1b:05:3e:2d:2c:
f2:5f:8d:98:b8:e0:5f:7f:5d:a4:ec:f8:92:30:e6:18:ae:a5:
07:18:16:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr5bbG7Bxw8o/5pLdV5Sz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTAxMDU1NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTY2NTNkYjRjMmUwM2Y3YzIyYWZmMjQzMzE5YzdkYjNiNTA5YjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EEG9gcK5BBB9zzT0QqqAH2PUXkW
8TNXBiXcQEl/knhDWtkbG0wgbJrX8uKPDRwL0HSWpLRbxwMuwG1+hnD670h/L30i
r4hSYDEg0r2JcRqGtGzqv7vEVTyS+1YZjFeiCaFmGZMUUg7SgqHZTNOSZkn9hcuA
W562VrtBlNHyShAqMKN8RB6ZAAiNrRyNvbMxlcBL3GbW38h9bZ6WM6EnZoFKMWG+
h1ZI8SdN5cQ17u8Axxw2FNqmMCzvXOHTEYmisxurj/8mhDL1d86ayVDVHcg0wR7n
nKjmTu1KGcLndO/PbHNCWxmxm98BP47DnfU6F9SdmKf4PA3nM4dUz0OnywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlmU9tMLgP3wir/JDMZx9s7UJuAMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvR1daVDIwd3VBX2ZDS3Y4a014bkgyenRRbTRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBWkwMA0G
CSqGSIb3DQEBCwUAA4IBAQA8hJ31JKiD1++JM5T1qyopEo0S7tpGZDg/u8qmKPg7
1MngAK7YqWTv+GfFoeFNHWEtqIkrVn9CEXsWNCotqUAO/7+wfboeSkBoKcNQXqcc
llCb4Jugo5juMnf+qVzyjw0pHoelEm3suan7R6c8onLTuyarLGLKTn6GeN9eythI
bQ6eL46GMZfE6V8P+hSuPt8u+Xd4tmU9LY2LzJhCqLRWBEprnzrrMbGYu7stdg6z
WENwnFTO9T0L6+TnTZVRoZ9rJQUiFi7XesbR33c8d9qQe6paQNaMoprak3MbJI5h
EnBuMUmfGwU+LSzyX42YuOBff12k7PiSMOYYrqUHGBYT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org