Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KuTUEBpp3ZcDg8Og8z58-0q9suY.roa
File: KuTUEBpp3ZcDg8Og8z58-0q9suY.roa (raw, json)
Hash identifier: ZwzqvuYpK3eKfJbrQlbn+ets72/cs1kPzvk6xxtVoZc=
Subject key identifier: 2A:E4:D4:10:1A:69:DD:97:03:83:C3:A0:F3:3E:7C:FB:4A:BD:B2:E6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018AC3268A23A7D3DA9D85F1AFECC1B89C7B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KuTUEBpp3ZcDg8Og8z58-0q9suY.roa
Signing time: Sat 23 Sep 2023 17:46:37 +0000
ROA not before: Sat 23 Sep 2023 17:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:26:8a:23:a7:d3:da:9d:85:f1:af:ec:c1:b8:9c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 23 17:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ae4d4101a69dd970383c3a0f33e7cfb4abdb2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:5c:62:6a:f3:fa:26:38:65:a4:5e:e3:f9:
24:33:68:d9:96:c6:00:52:cd:1f:1b:0a:8f:5c:dd:
2f:8e:53:31:8b:b5:ab:2c:91:4b:7c:ec:2a:82:aa:
f6:20:96:30:c2:f0:85:c8:02:42:da:07:5b:64:aa:
36:8d:a1:fd:10:64:b9:79:94:22:d3:42:1a:17:94:
d4:d5:4f:a9:68:1b:e2:a8:19:8a:ba:2e:f1:42:91:
6c:98:54:ff:fe:0b:6f:85:0e:3a:08:ef:16:0e:4e:
38:f4:f7:4f:ea:ca:fe:dd:03:d9:69:6c:30:c2:42:
b4:87:6b:f7:f4:7a:6b:32:57:90:0c:a3:19:8f:76:
49:c0:e9:25:21:31:81:40:d9:96:44:96:b9:70:a6:
8c:ed:78:7b:98:31:f8:a6:d2:47:43:a7:7e:42:a3:
9e:bb:68:f8:90:f1:20:54:73:24:b3:bf:6e:af:53:
ba:b1:c9:65:3d:f2:09:5b:1e:0c:54:fe:7c:9d:73:
86:c5:c4:8c:3b:e7:e7:31:92:3f:1d:00:1c:3f:df:
97:5d:0e:2a:16:22:57:59:d1:0d:18:c0:29:29:8d:
c0:07:a8:8d:b3:2a:08:b5:00:50:03:73:66:2f:50:
98:f6:ce:91:2d:24:ca:f2:7a:3f:e8:99:82:4d:74:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E4:D4:10:1A:69:DD:97:03:83:C3:A0:F3:3E:7C:FB:4A:BD:B2:E6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/KuTUEBpp3ZcDg8Og8z58-0q9suY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:78:ec:15:3b:5d:c2:0c:e1:1d:35:0f:45:46:c0:8e:1f:08:
2a:67:9d:2d:48:b7:03:2c:3e:da:97:aa:08:96:c0:4a:45:36:
7e:fd:ba:cb:ac:22:3b:44:3c:a4:3d:f2:75:f1:12:9b:71:22:
a0:cb:f0:9b:ef:f3:10:11:ac:cb:2d:af:6c:80:35:61:30:b6:
c7:83:2f:aa:f8:08:5b:b3:6a:55:f7:01:0e:54:75:48:d8:72:
be:6e:12:3e:55:ff:4e:0b:1d:19:79:77:ad:f1:53:f8:01:b7:
b3:72:32:80:f2:dc:03:fa:78:e3:27:72:08:29:41:60:ec:7b:
2a:06:df:e3:9d:4a:53:30:7c:41:d2:a3:85:04:5f:7c:2d:13:
7c:cf:50:8c:57:7f:46:95:5e:b6:e1:6b:1b:7f:28:2b:20:ac:
74:a4:19:f2:07:26:f4:9b:bd:98:c3:a6:99:46:ab:da:3b:b0:
09:93:78:ff:9c:7f:16:6e:90:68:4a:54:31:c2:68:ad:f2:db:
55:f3:e7:78:45:fe:5e:a8:84:51:18:fe:40:85:85:17:f3:f8:
22:6b:d3:b8:5c:23:00:89:2d:b3:72:84:be:9f:34:a0:ec:b9:
83:1a:27:1b:b4:e9:64:a7:c3:23:08:33:21:fe:4d:68:59:50:
fe:cc:a8:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrDJoojp9PanYXxr+zBuJx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTIzMTc0NjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWU0ZDQxMDFhNjlkZDk3MDM4M2MzYTBmMzNlN2NmYjRhYmRiMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmZcYmrz+iY4ZaRe4/kkM2jZlsYA
Us0fGwqPXN0vjlMxi7WrLJFLfOwqgqr2IJYwwvCFyAJC2gdbZKo2jaH9EGS5eZQi
00IaF5TU1U+paBviqBmKui7xQpFsmFT//gtvhQ46CO8WDk449PdP6sr+3QPZaWww
wkK0h2v39HprMleQDKMZj3ZJwOklITGBQNmWRJa5cKaM7Xh7mDH4ptJHQ6d+QqOe
u2j4kPEgVHMks79ur1O6scllPfIJWx4MVP58nXOGxcSMO+fnMZI/HQAcP9+XXQ4q
FiJXWdENGMApKY3AB6iNsyoItQBQA3NmL1CY9s6RLSTK8no/6JmCTXST9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCrk1BAaad2XA4PDoPM+fPtKvbLmMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvS3VUVUVCcHAzWmNEZzhPZzh6NTgtMHE5c3VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBWkYMA0G
CSqGSIb3DQEBCwUAA4IBAQBKeOwVO13CDOEdNQ9FRsCOHwgqZ50tSLcDLD7al6oI
lsBKRTZ+/brLrCI7RDykPfJ18RKbcSKgy/Cb7/MQEazLLa9sgDVhMLbHgy+q+Ahb
s2pV9wEOVHVI2HK+bhI+Vf9OCx0ZeXet8VP4AbezcjKA8twD+njjJ3IIKUFg7Hsq
Bt/jnUpTMHxB0qOFBF98LRN8z1CMV39GlV624WsbfygrIKx0pBnyByb0m72Yw6aZ
RqvaO7AJk3j/nH8WbpBoSlQxwmit8ttV8+d4Rf5eqIRRGP5AhYUX8/gia9O4XCMA
iS2zcoS+nzSg7LmDGicbtOlkp8MjCDMh/k1oWVD+zKgk
-----END CERTIFICATE-----
Generated at Wed Oct 4 18:24:17 2023 by rpki-client on console-ams.rpki-client.org