Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa
File: H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa (raw, json)
Hash identifier: SRJrQfaJ+iRAkwLTPWbk6hbBPQni36Ee8ohpYU3Djx4=
Subject key identifier: 1F:FD:05:8E:19:FD:49:14:AD:D8:CA:0B:40:4E:B6:2A:60:AB:74:50
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01899C35EFC81E8AC9BDE2E926A5B94B1511
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa
Signing time: Fri 28 Jul 2023 11:15:27 +0000
ROA not before: Fri 28 Jul 2023 11:15:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 5.105.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9c:35:ef:c8:1e:8a:c9:bd:e2:e9:26:a5:b9:4b:15:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 28 11:15:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ffd058e19fd4914add8ca0b404eb62a60ab7450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:db:e4:cd:42:3c:37:7f:df:b5:05:80:37:
75:bd:b0:a0:bd:45:6e:bf:6a:7a:72:15:ad:17:c4:
ae:fe:de:ed:ca:fe:ad:b9:fd:e9:e9:d0:96:79:bc:
a6:2a:a2:03:5e:8f:7d:38:b1:8f:1e:29:85:69:46:
8c:4a:70:66:e3:f2:ff:a2:0c:a0:52:55:25:99:9f:
31:62:9e:0a:f7:7e:8f:48:5d:bf:2e:f2:bf:16:f4:
43:3a:c1:8a:68:3a:2a:0f:1a:40:cd:c9:57:ca:3e:
93:b0:e4:9c:9c:3f:ae:5f:67:3b:ae:54:96:ee:2c:
f9:78:0e:8a:c1:c5:0e:33:9b:2d:13:e0:e1:6b:e1:
77:de:62:71:22:40:df:07:c4:66:29:9f:07:e3:ac:
31:7d:c5:40:9f:f2:8f:97:44:32:a6:13:e7:5f:35:
62:68:98:22:72:e3:04:e0:8b:25:44:28:2b:e0:76:
9e:c7:50:ac:86:25:d5:1c:a2:0d:f4:bb:fe:79:2a:
b9:5b:fa:12:cd:0e:98:24:2e:d1:e9:c6:22:32:65:
3f:cb:63:e7:cc:b9:6c:f2:d0:89:5e:eb:43:ca:66:
08:b0:6d:8c:4c:c1:d1:b6:52:27:fd:56:1b:d8:7c:
bb:12:6f:b2:5b:bf:18:46:b1:c1:e1:4d:41:e6:a5:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FD:05:8E:19:FD:49:14:AD:D8:CA:0B:40:4E:B6:2A:60:AB:74:50
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/H_0Fjhn9SRSt2MoLQE62KmCrdFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.62.0/24
Signature Algorithm: sha256WithRSAEncryption
56:21:ba:c4:4c:56:65:24:5c:a9:6a:b6:a6:64:e8:74:5b:84:
36:cf:3c:7d:cf:3e:af:39:8f:8f:75:db:78:9c:4a:9a:7f:6c:
db:3f:97:c2:48:34:1b:91:c8:5d:d9:7d:b7:be:ba:40:0b:9a:
6c:9c:b3:0c:34:1d:f6:17:6c:62:b2:95:01:bb:8e:21:5e:5d:
94:b4:c3:d2:6d:83:de:41:b5:cf:c1:fc:d9:fb:39:58:fc:d6:
bf:e1:34:be:26:87:dc:66:0b:75:9c:d3:20:5e:e2:ef:fd:b4:
bb:eb:04:c7:29:66:6c:60:66:f4:bf:3c:56:69:27:a8:3d:67:
6b:4e:ab:e4:be:15:e6:12:cf:66:a9:0e:e4:2a:6e:97:53:65:
76:2a:86:59:45:d3:96:52:1c:f0:0e:0c:56:81:7a:99:81:ff:
41:86:57:cb:58:df:cb:ae:19:f3:43:69:4e:09:a3:89:31:c5:
b1:a9:27:f0:de:cc:d8:62:8f:92:89:db:ff:d2:c4:87:0b:ba:
10:50:2a:e9:09:bc:a7:91:7c:fc:71:36:98:28:40:5e:c5:29:
e6:39:c3:45:54:b9:61:42:96:0f:cb:38:82:67:4e:f5:5d:e8:
48:b9:95:45:74:e1:29:31:21:1c:ed:a2:e1:81:3a:03:b9:37:
9a:6a:7d:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmcNe/IHorJveLpJqW5SxURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzI4MTExNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmZkMDU4ZTE5ZmQ0OTE0YWRkOGNhMGI0MDRlYjYyYTYwYWI3NDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnjb5M1CPDd/37UFgDd1vbCgvUVu
v2p6chWtF8Su/t7tyv6tuf3p6dCWebymKqIDXo99OLGPHimFaUaMSnBm4/L/ogyg
UlUlmZ8xYp4K936PSF2/LvK/FvRDOsGKaDoqDxpAzclXyj6TsOScnD+uX2c7rlSW
7iz5eA6KwcUOM5stE+Dha+F33mJxIkDfB8RmKZ8H46wxfcVAn/KPl0QyphPnXzVi
aJgicuME4IslRCgr4Haex1CshiXVHKIN9Lv+eSq5W/oSzQ6YJC7R6cYiMmU/y2Pn
zLls8tCJXutDymYIsG2MTMHRtlIn/VYb2Hy7Em+yW78YRrHB4U1B5qXmiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/9BY4Z/UkUrdjKC0BOtipgq3RQMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvSF8wRmpobjlTUlN0Mk1vTFFFNjJLbUNyZEZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWk+MA0G
CSqGSIb3DQEBCwUAA4IBAQBWIbrETFZlJFyparamZOh0W4Q2zzx9zz6vOY+Pddt4
nEqaf2zbP5fCSDQbkchd2X23vrpAC5psnLMMNB32F2xispUBu44hXl2UtMPSbYPe
QbXPwfzZ+zlY/Na/4TS+JofcZgt1nNMgXuLv/bS76wTHKWZsYGb0vzxWaSeoPWdr
TqvkvhXmEs9mqQ7kKm6XU2V2KoZZRdOWUhzwDgxWgXqZgf9BhlfLWN/LrhnzQ2lO
CaOJMcWxqSfw3szYYo+Sidv/0sSHC7oQUCrpCbynkXz8cTaYKEBexSnmOcNFVLlh
QpYPyziCZ071XehIuZVFdOEpMSEc7aLhgToDuTeaan1l
-----END CERTIFICATE-----
Generated at Tue Aug 8 05:57:18 2023 by rpki-client on console-fra.rpki-client.org