Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JJuu0L8hS7eaKfzXDyVm2uWVrTk.roa
File: JJuu0L8hS7eaKfzXDyVm2uWVrTk.roa (raw, json)
Hash identifier: 5k3XPypHnunBGLVb1TGZ465J1cvtJSxhkoimWZ8xK2M=
Subject key identifier: 24:9B:AE:D0:BF:21:4B:B7:9A:29:FC:D7:0F:25:66:DA:E5:95:AD:39
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018892872F25897D8ABCA7B21E8CBBE29547
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JJuu0L8hS7eaKfzXDyVm2uWVrTk.roa
Signing time: Tue 06 Jun 2023 21:05:12 +0000
ROA not before: Tue 06 Jun 2023 21:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 5.105.242.0/24 maxlen: 24
5.105.156.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:87:2f:25:89:7d:8a:bc:a7:b2:1e:8c:bb:e2:95:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 6 21:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=249baed0bf214bb79a29fcd70f2566dae595ad39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:2b:15:83:9a:eb:78:88:6a:1c:2e:e1:b2:
fb:d6:4e:6d:c6:1c:4e:d3:b5:6d:04:8a:1b:e5:a6:
ad:1a:82:b9:b7:b4:c5:7f:5a:9c:dc:41:52:d7:3b:
89:d0:19:2b:11:d4:21:a4:e0:8b:d5:11:63:6b:85:
85:a2:8b:32:fe:cb:ea:0c:aa:c1:c9:7e:29:1c:5a:
47:ee:a6:10:0e:22:0f:d8:c7:9c:ca:90:1d:c9:e1:
31:e4:57:b9:47:26:4d:f7:76:aa:ec:95:02:06:4a:
66:f1:d6:5f:93:3f:e1:85:61:e6:5c:b2:f3:5c:36:
d3:a5:73:a6:90:57:89:12:15:17:75:ef:51:80:b2:
0f:69:d9:a9:1d:44:fe:aa:30:50:6c:8b:e6:74:4a:
00:16:cc:d6:5b:e2:f6:1e:ea:89:c2:49:6c:1b:d7:
99:08:aa:5c:e2:d0:08:00:1c:03:23:6b:38:d1:75:
fc:42:9f:de:90:fe:30:bb:50:7d:b3:d2:1a:7c:7e:
6d:c7:1a:2a:f5:47:dc:a9:5b:23:80:25:17:1e:7f:
f0:02:67:a0:b6:60:b6:9b:73:1c:d3:84:48:70:9e:
d1:a0:d9:f8:fa:d9:ef:03:70:8a:55:2f:9c:82:8d:
b5:23:a8:cf:a7:f1:5e:42:71:70:f2:85:4c:c2:87:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:9B:AE:D0:BF:21:4B:B7:9A:29:FC:D7:0F:25:66:DA:E5:95:AD:39
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/JJuu0L8hS7eaKfzXDyVm2uWVrTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.76.0/23
5.105.156.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:68:cb:79:f8:eb:a5:4d:43:e3:4b:03:71:df:36:fe:63:d2:
b0:78:79:03:3c:a1:89:ce:f0:72:c8:10:90:30:f1:e2:01:23:
d7:2e:e2:8e:4d:98:a1:51:b7:0c:84:94:2e:71:b9:f9:87:0d:
8a:37:61:33:69:70:d4:a5:1d:04:e9:29:6e:33:61:c9:f1:50:
66:0e:79:5f:bf:13:5e:7a:21:58:bf:a1:94:74:82:dd:55:8e:
24:2a:5b:b4:5a:ab:87:38:13:b5:22:a8:be:0f:bc:c5:a4:ef:
30:ae:51:de:d2:f3:a5:2f:de:9e:e4:79:9a:fc:9d:f8:01:aa:
0f:b0:49:cb:b0:ab:4d:32:54:76:75:a4:f1:f5:66:66:70:49:
8a:5e:61:cc:0c:ae:bb:2e:38:8c:0f:53:28:25:f8:f1:ec:6d:
57:e0:a8:d9:6d:17:c2:0d:7e:52:59:d9:dd:1c:63:c6:72:f2:
30:ad:7c:76:af:d5:da:2a:1f:58:9b:ce:83:f7:77:3b:62:37:
30:1c:89:11:42:93:f4:9a:b6:3e:c2:ac:ba:0b:35:c3:6b:d5:
8f:d8:61:58:b0:8c:e0:24:4d:9b:dc:2d:12:7f:03:96:6a:92:
16:be:c8:e2:db:eb:8a:b9:7f:35:15:f7:e0:b4:47:cb:f3:a3:
5d:b3:33:60
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYiShy8liX2KvKeyHoy74pVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjA2MjEwNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDliYWVkMGJmMjE0YmI3OWEyOWZjZDcwZjI1NjZkYWU1OTVhZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvUrFYOa63iIahwu4bL71k5txhxO
07VtBIob5aatGoK5t7TFf1qc3EFS1zuJ0BkrEdQhpOCL1RFja4WFoosy/svqDKrB
yX4pHFpH7qYQDiIP2MecypAdyeEx5Fe5RyZN93aq7JUCBkpm8dZfkz/hhWHmXLLz
XDbTpXOmkFeJEhUXde9RgLIPadmpHUT+qjBQbIvmdEoAFszWW+L2HuqJwklsG9eZ
CKpc4tAIABwDI2s40XX8Qp/ekP4wu1B9s9IafH5txxoq9UfcqVsjgCUXHn/wAmeg
tmC2m3Mc04RIcJ7RoNn4+tnvA3CKVS+cgo21I6jPp/FeQnFw8oVMwofYxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCSbrtC/IUu3min81w8lZtrlla05MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvSkp1dTBMOGhTN2VhS2Z6WER5Vm0ydVdWclRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBWlMAwQA
BWmcAwQABWnyMA0GCSqGSIb3DQEBCwUAA4IBAQB8aMt5+OulTUPjSwNx3zb+Y9Kw
eHkDPKGJzvByyBCQMPHiASPXLuKOTZihUbcMhJQucbn5hw2KN2EzaXDUpR0E6Slu
M2HJ8VBmDnlfvxNeeiFYv6GUdILdVY4kKlu0WquHOBO1Iqi+D7zFpO8wrlHe0vOl
L96e5Hma/J34AaoPsEnLsKtNMlR2daTx9WZmcEmKXmHMDK67LjiMD1MoJfjx7G1X
4KjZbRfCDX5SWdndHGPGcvIwrXx2r9XaKh9Ym86D93c7YjcwHIkRQpP0mrY+wqy6
CzXDa9WP2GFYsIzgJE2b3C0SfwOWapIWvsji2+uKuX81FffgtEfL86NdszNg
-----END CERTIFICATE-----
Generated at Mon Oct 9 18:33:32 2023 by rpki-client on console-fra.rpki-client.org