Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NLq6mWRSMKIjVwRHmWrKrXw145A.roa
File: NLq6mWRSMKIjVwRHmWrKrXw145A.roa (raw, json)
Hash identifier: axaNGQoWyVP03Bbu+Jgs+h3sjHG4uBsRcvA1iwCMBbQ=
Subject key identifier: 34:BA:BA:99:64:52:30:A2:23:57:04:47:99:6A:CA:AD:7C:35:E3:90
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187EAF933606EDC62F5C0D831382195970B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NLq6mWRSMKIjVwRHmWrKrXw145A.roa
Signing time: Fri 05 May 2023 08:13:32 +0000
ROA not before: Fri 05 May 2023 08:13:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 5.105.142.0/23 maxlen: 23
5.105.248.0/23 maxlen: 24
5.105.164.0/23 maxlen: 24
5.105.186.0/23 maxlen: 24
5.105.198.0/23 maxlen: 24
5.105.202.0/23 maxlen: 24
5.105.112.0/23 maxlen: 24
5.105.114.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:f9:33:60:6e:dc:62:f5:c0:d8:31:38:21:95:97:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 5 08:13:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34baba99645230a223570447996acaad7c35e390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:b1:0e:76:5f:5f:c1:d9:df:15:90:c7:a1:
f8:d1:3e:02:75:8b:86:31:b3:a1:10:7c:b0:46:09:
fc:18:43:94:1d:0a:c0:d2:49:1f:f2:5e:89:66:02:
04:ee:1e:6d:9e:1f:6f:d5:4e:d8:49:e2:c2:e8:c1:
15:b7:4d:ee:58:f8:f6:64:92:20:df:df:92:9e:7e:
e3:96:1d:fa:1a:54:c1:2a:c7:e4:5b:bd:1c:fd:5c:
5a:d6:a1:5d:22:70:f5:17:12:6c:9d:b2:b4:b4:f0:
4d:60:38:67:35:8f:32:70:a6:fa:40:89:31:db:91:
de:ad:6f:f2:d0:b3:cd:eb:49:cc:af:a4:34:ec:b0:
41:d5:27:f4:0b:76:d4:23:af:a6:a8:e1:7f:3b:35:
d7:08:75:67:1d:e9:59:82:d6:9c:a8:9c:11:e5:d4:
f9:0f:ad:24:ac:e5:1b:5d:d5:9a:57:3c:88:94:f3:
b8:83:8b:b5:5b:1d:20:d7:35:e5:d2:c5:ec:4a:c8:
12:e2:5e:0b:35:ac:5e:5e:cc:1f:ba:41:8c:12:f0:
21:d1:b6:8f:83:5e:5b:41:f5:3a:43:ac:ba:50:13:
1c:fd:4f:3c:eb:3a:29:78:16:f2:ce:75:aa:85:3d:
26:c9:60:b7:6f:be:77:00:54:96:0e:36:95:36:08:
78:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:BA:99:64:52:30:A2:23:57:04:47:99:6A:CA:AD:7C:35:E3:90
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NLq6mWRSMKIjVwRHmWrKrXw145A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.112.0/22
5.105.142.0/23
5.105.164.0/23
5.105.186.0/23
5.105.198.0/23
5.105.202.0/23
5.105.248.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:3d:2e:d9:cb:89:72:82:77:91:28:0d:68:9c:7c:d7:58:52:
2f:3f:7a:85:60:8b:54:09:22:f4:37:85:49:89:40:54:3b:e5:
e0:08:33:da:52:ce:dc:8c:6b:a7:bf:e1:f5:20:cd:75:c3:52:
7e:d4:eb:2d:f5:5e:44:2e:dc:3f:8b:42:90:3a:1b:93:f2:03:
66:18:eb:7d:94:db:9b:90:7c:79:13:a8:d3:bb:c9:15:29:69:
80:d0:42:b7:0f:fd:e7:32:88:6a:5c:04:62:67:10:08:39:2f:
7e:bb:b3:b7:2f:96:cd:bd:f7:5b:10:8f:ec:7b:c7:c9:4f:88:
3e:33:15:85:c0:01:14:54:12:d2:fc:8a:ac:84:10:9e:af:ad:
61:98:ed:3e:3c:98:7a:35:ea:a6:47:cc:cc:50:45:ff:23:15:
e6:a6:6f:75:68:7a:38:0d:22:18:1c:cd:2f:6d:af:71:d7:d6:
bb:56:b6:df:86:5e:a5:d3:16:b1:cd:f7:00:1c:4f:4b:e0:74:
6f:f0:8b:80:78:eb:a1:40:f5:82:58:98:dc:d8:ed:8e:28:b3:
33:3c:0e:dc:6e:dd:49:04:de:ce:f4:f4:7c:bc:a7:19:38:25:
bc:f6:7e:01:33:2f:1d:d4:5b:c3:94:e2:c3:df:48:01:04:88:
20:6b:46:4b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYfq+TNgbtxi9cDYMTghlZcLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNTA1MDgxMzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGJhYmE5OTY0NTIzMGEyMjM1NzA0NDc5OTZhY2FhZDdjMzVlMzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeaxDnZfX8HZ3xWQx6H40T4CdYuG
MbOhEHywRgn8GEOUHQrA0kkf8l6JZgIE7h5tnh9v1U7YSeLC6MEVt03uWPj2ZJIg
39+Snn7jlh36GlTBKsfkW70c/Vxa1qFdInD1FxJsnbK0tPBNYDhnNY8ycKb6QIkx
25HerW/y0LPN60nMr6Q07LBB1Sf0C3bUI6+mqOF/OzXXCHVnHelZgtacqJwR5dT5
D60krOUbXdWaVzyIlPO4g4u1Wx0g1zXl0sXsSsgS4l4LNaxeXswfukGMEvAh0baP
g15bQfU6Q6y6UBMc/U886zopeBbyznWqhT0myWC3b753AFSWDjaVNgh4+QIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFDS6uplkUjCiI1cER5lqyq18NeOQMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvTkxxNm1XUlNNS0lqVndSSG1XcktyWHcxNDVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCBWlwAwQB
BWmOAwQBBWmkAwQBBWm6AwQBBWnGAwQBBWnKAwQBBWn4MA0GCSqGSIb3DQEBCwUA
A4IBAQC3PS7Zy4lygneRKA1onHzXWFIvP3qFYItUCSL0N4VJiUBUO+XgCDPaUs7c
jGunv+H1IM11w1J+1Ost9V5ELtw/i0KQOhuT8gNmGOt9lNubkHx5E6jTu8kVKWmA
0EK3D/3nMohqXARiZxAIOS9+u7O3L5bNvfdbEI/se8fJT4g+MxWFwAEUVBLS/Iqs
hBCer61hmO0+PJh6NeqmR8zMUEX/IxXmpm91aHo4DSIYHM0vba9x19a7Vrbfhl6l
0xaxzfcAHE9L4HRv8IuAeOuhQPWCWJjc2O2OKLMzPA7cbt1JBN7O9PR8vKcZOCW8
9n4BMy8d1FvDlOLD30gBBIgga0ZL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:17 2023 by rpki-client on console-fra.rpki-client.org