Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NZ1jIpbQcW5rAmrzKiTtWiUyB2g.roa
File: NZ1jIpbQcW5rAmrzKiTtWiUyB2g.roa (raw, json)
Hash identifier: k6yzD0XpDzNRlJRQZ4qHAN355HNlyJ8ZuWkajxP4Xro=
Subject key identifier: 35:9D:63:22:96:D0:71:6E:6B:02:6A:F3:2A:24:ED:5A:25:32:07:68
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01890889D6DC986D232A37ECC4AA46BC8D62
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NZ1jIpbQcW5rAmrzKiTtWiUyB2g.roa
Signing time: Thu 29 Jun 2023 19:03:18 +0000
ROA not before: Thu 29 Jun 2023 19:03:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 5.105.34.0/24 maxlen: 24
5.105.41.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:08:89:d6:dc:98:6d:23:2a:37:ec:c4:aa:46:bc:8d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 29 19:03:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=359d632296d0716e6b026af32a24ed5a25320768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:16:3c:ce:c5:32:51:cf:bc:ee:79:59:76:
97:3b:89:ec:01:fb:d2:bd:3f:a4:63:42:80:94:bc:
ac:9f:a2:dc:f3:0a:7f:fc:7b:38:1d:d7:e1:ff:3a:
ca:bb:50:74:f4:38:0f:39:c6:cc:4d:eb:09:e3:bc:
bd:93:46:84:9a:1b:44:e0:05:85:04:ae:b9:1e:99:
a1:ae:5e:0a:c0:41:61:f0:d7:5c:14:69:d7:42:19:
90:85:9c:f3:68:33:8b:34:84:98:b2:46:2b:36:cd:
b3:18:97:72:15:f8:3a:9e:7d:73:8c:9f:9f:64:26:
b5:05:a1:12:92:3b:67:8f:db:ac:80:af:47:f6:a9:
20:b6:39:91:78:21:19:99:34:9e:55:63:c4:90:49:
1b:1d:18:53:2d:60:b3:46:b0:e1:08:52:46:69:a1:
17:77:37:11:b7:3e:84:18:84:25:2c:82:70:fc:33:
f3:71:a1:69:3c:d5:f6:17:0e:8e:5f:b1:17:da:14:
ce:b7:54:94:13:62:89:97:29:05:ca:6c:91:20:2b:
ee:69:cb:b0:1c:7b:58:d2:25:f6:f4:2a:d1:9f:f3:
4b:a8:04:2e:7c:2d:c2:1e:78:d1:be:61:e6:92:3a:
ef:0b:14:f9:07:3c:82:62:74:15:b2:33:0c:a0:7f:
a3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9D:63:22:96:D0:71:6E:6B:02:6A:F3:2A:24:ED:5A:25:32:07:68
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/NZ1jIpbQcW5rAmrzKiTtWiUyB2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.34.0/24
5.105.41.0/24
5.105.50.0/24
5.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3b:fa:ab:d2:a0:57:b4:13:18:26:5e:57:23:0d:6b:8a:85:
96:f9:f9:c8:5c:c9:58:55:a6:18:4e:95:7b:b6:a4:d6:0b:75:
b7:8f:d2:cb:a9:47:7f:52:fb:7a:4f:41:11:f8:0d:96:2c:f9:
94:0f:75:61:3d:21:45:47:b8:1b:bc:9a:8b:82:77:21:71:b2:
52:0a:36:e3:32:ee:94:53:df:0b:da:18:80:2f:a9:77:c3:52:
88:2e:a2:d9:02:50:04:49:58:13:6d:a0:c2:36:1f:1e:97:d1:
e1:1e:54:e4:bb:88:58:43:8b:53:34:06:c3:1e:57:4b:20:49:
61:dd:53:d1:dd:85:fa:8b:3d:51:14:43:42:a0:20:1e:b2:83:
f6:d3:7d:2b:bd:b5:5c:ba:0d:f0:33:43:f5:05:35:d8:0b:ec:
73:e2:97:56:31:f4:5b:7f:f5:42:28:31:49:a0:50:ed:9c:1c:
5f:dc:66:68:ce:09:d3:ae:19:42:41:d7:f1:4d:61:50:22:ca:
3d:f6:e4:a4:2e:fa:9b:96:90:42:65:41:a8:32:ac:2e:d8:d6:
9e:5a:b4:24:2f:c3:3e:a3:2d:90:d8:40:43:46:d4:02:20:eb:
d7:81:53:73:9c:b0:5a:02:b0:30:19:7f:b8:77:72:de:dc:04:
36:b8:72:6a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYkIidbcmG0jKjfsxKpGvI1iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjI5MTkwMzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTlkNjMyMjk2ZDA3MTZlNmIwMjZhZjMyYTI0ZWQ1YTI1MzIwNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAgWPM7FMlHPvO55WXaXO4nsAfvS
vT+kY0KAlLysn6Lc8wp//Hs4Hdfh/zrKu1B09DgPOcbMTesJ47y9k0aEmhtE4AWF
BK65Hpmhrl4KwEFh8NdcFGnXQhmQhZzzaDOLNISYskYrNs2zGJdyFfg6nn1zjJ+f
ZCa1BaESkjtnj9usgK9H9qkgtjmReCEZmTSeVWPEkEkbHRhTLWCzRrDhCFJGaaEX
dzcRtz6EGIQlLIJw/DPzcaFpPNX2Fw6OX7EX2hTOt1SUE2KJlykFymyRICvuacuw
HHtY0iX29CrRn/NLqAQufC3CHnjRvmHmkjrvCxT5BzyCYnQVsjMMoH+jSQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDWdYyKW0HFuawJq8yok7VolMgdoMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvTloxaklwYlFjVzVyQW1yektpVHRXaVV5QjJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABWkiAwQA
BWkpAwQABWkyAwQABWlSMA0GCSqGSIb3DQEBCwUAA4IBAQBOO/qr0qBXtBMYJl5X
Iw1rioWW+fnIXMlYVaYYTpV7tqTWC3W3j9LLqUd/Uvt6T0ER+A2WLPmUD3VhPSFF
R7gbvJqLgnchcbJSCjbjMu6UU98L2hiAL6l3w1KILqLZAlAESVgTbaDCNh8el9Hh
HlTku4hYQ4tTNAbDHldLIElh3VPR3YX6iz1RFENCoCAesoP2030rvbVcug3wM0P1
BTXYC+xz4pdWMfRbf/VCKDFJoFDtnBxf3GZozgnTrhlCQdfxTWFQIso99uSkLvqb
lpBCZUGoMqwu2NaeWrQkL8M+oy2Q2EBDRtQCIOvXgVNznLBaArAwGX+4d3Le3AQ2
uHJq
-----END CERTIFICATE-----
Generated at Thu Jul 27 08:34:13 2023 by rpki-client on console-ams.rpki-client.org