Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NJcPl33YK_Zlcj9FgqFuiTujtMA.roa
File: NJcPl33YK_Zlcj9FgqFuiTujtMA.roa (raw, json)
Hash identifier: KXyELW+s0qyipY16TFCqhGdWbBAO8nG1mxJHHjCmalA=
Subject key identifier: 34:97:0F:97:7D:D8:2B:F6:65:72:3F:45:82:A1:6E:89:3B:A3:B4:C0
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A3C2D5CEF0B85081DD3732A5634101506
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NJcPl33YK_Zlcj9FgqFuiTujtMA.roa
Signing time: Mon 28 Aug 2023 12:45:20 +0000
ROA not before: Mon 28 Aug 2023 12:45:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:2d:5c:ef:0b:85:08:1d:d3:73:2a:56:34:10:15:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 28 12:45:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34970f977dd82bf665723f4582a16e893ba3b4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:e5:9b:93:f2:a4:95:57:b5:7e:8a:6a:f7:
7d:de:6d:07:5a:32:b9:d7:2f:7c:8a:78:93:17:f2:
02:ce:3a:79:4f:0f:59:d4:8b:6a:ff:21:0c:aa:f6:
1f:c1:36:83:8e:7a:1f:85:1d:b3:34:f7:ff:71:13:
be:f0:34:52:73:d6:e1:4c:ec:b2:ff:8b:a7:c5:f2:
c7:e8:7a:4a:43:ff:85:23:6a:ea:5c:ac:88:e7:a1:
17:a8:a7:15:dd:b2:51:ad:3c:52:3a:61:b4:71:3a:
ca:91:89:ac:99:83:d4:c7:14:b7:a3:1e:53:0c:52:
ea:1d:3f:a4:58:21:56:18:31:2e:cd:97:8c:2e:18:
1e:00:e2:70:e2:ff:01:ad:2b:2b:77:35:7e:da:c7:
7b:da:d8:e2:d5:85:2b:2a:06:63:a5:11:ec:0c:1b:
08:ca:1a:48:1e:df:ba:de:5c:dc:2d:7c:1a:0f:b9:
d3:98:74:87:bb:30:71:87:d0:e1:d8:74:b2:37:9e:
13:74:9a:d0:c5:ac:56:5d:54:fb:15:34:e7:df:ed:
f6:c1:72:6b:16:ea:61:96:fa:cb:e5:b2:8c:f1:ac:
62:22:a0:c4:64:0a:43:c2:31:da:15:45:fc:3c:49:
be:35:81:e8:09:e4:10:cf:1e:b5:a7:1a:e6:36:9a:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:97:0F:97:7D:D8:2B:F6:65:72:3F:45:82:A1:6E:89:3B:A3:B4:C0
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NJcPl33YK_Zlcj9FgqFuiTujtMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.81.0/24
5.105.96.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:10:b6:e1:a9:cc:a7:59:33:28:bd:0a:9a:ad:81:61:43:f6:
18:89:54:7b:2b:1c:02:00:f3:83:d5:65:9f:f0:92:50:ff:cd:
b8:dc:9a:31:da:26:b6:f9:b1:dc:81:ad:14:0f:46:2c:bc:83:
58:8a:d9:84:d2:87:58:44:cc:31:bc:1c:fc:1d:2c:90:c5:0a:
57:c9:0e:76:54:86:10:02:4a:da:e9:a6:23:d9:4d:af:0a:81:
82:14:2f:04:cf:63:f0:f1:ff:26:5b:ef:ae:ee:47:4a:e7:f6:
32:e3:c6:40:f2:eb:ef:62:77:2c:c5:ed:6f:44:09:cb:a1:d7:
39:79:c2:d9:25:cc:e1:d7:8b:10:46:00:50:a1:6a:f1:ab:eb:
9c:fa:eb:86:29:84:1c:5b:21:af:50:b5:bc:c2:bb:d7:08:1d:
82:c5:65:15:7e:10:36:e6:ae:c5:95:c9:54:25:88:fd:95:ec:
6b:97:a1:16:c8:5c:db:9d:12:51:ca:88:9a:18:f0:a6:43:84:
9d:f8:fa:36:39:47:1f:51:c6:de:c1:9e:f4:8f:12:01:77:b7:
9b:1d:34:33:88:4a:70:21:e4:a9:1c:2e:a3:70:a0:ef:2f:9e:
34:1b:ac:d8:d0:92:af:bc:f0:05:e7:dc:55:d4:a5:22:97:ae:
56:f0:21:86
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYo8LVzvC4UIHdNzKlY0EBUGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODI4MTI0NTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDk3MGY5NzdkZDgyYmY2NjU3MjNmNDU4MmExNmU4OTNiYTNiNGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwXlm5PypJVXtX6Kavd93m0HWjK5
1y98iniTF/ICzjp5Tw9Z1Itq/yEMqvYfwTaDjnofhR2zNPf/cRO+8DRSc9bhTOyy
/4unxfLH6HpKQ/+FI2rqXKyI56EXqKcV3bJRrTxSOmG0cTrKkYmsmYPUxxS3ox5T
DFLqHT+kWCFWGDEuzZeMLhgeAOJw4v8BrSsrdzV+2sd72tji1YUrKgZjpRHsDBsI
yhpIHt+63lzcLXwaD7nTmHSHuzBxh9Dh2HSyN54TdJrQxaxWXVT7FTTn3+32wXJr
FuphlvrL5bKM8axiIqDEZApDwjHaFUX8PEm+NYHoCeQQzx61pxrmNpqPNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDSXD5d92Cv2ZXI/RYKhbok7o7TAMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvTkpjUGwzM1lLX1psY2o5RmdxRnVpVHVqdE1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBWkYAwQA
BWlRAwQABWlgMA0GCSqGSIb3DQEBCwUAA4IBAQCfELbhqcynWTMovQqarYFhQ/YY
iVR7KxwCAPOD1WWf8JJQ/8243Jox2ia2+bHcga0UD0YsvINYitmE0odYRMwxvBz8
HSyQxQpXyQ52VIYQAkra6aYj2U2vCoGCFC8Ez2Pw8f8mW++u7kdK5/Yy48ZA8uvv
Yncsxe1vRAnLodc5ecLZJczh14sQRgBQoWrxq+uc+uuGKYQcWyGvULW8wrvXCB2C
xWUVfhA25q7FlclUJYj9lexrl6EWyFzbnRJRyoiaGPCmQ4Sd+Po2OUcfUcbewZ70
jxIBd7ebHTQziEpwIeSpHC6jcKDvL540G6zY0JKvvPAF59xV1KUil65W8CGG
-----END CERTIFICATE-----
Generated at Mon Sep 11 20:10:06 2023 by rpki-client on console-ams.rpki-client.org