Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PNF-Lvh9JtEjwJJvLiwtJnSVXJA.roa
File: PNF-Lvh9JtEjwJJvLiwtJnSVXJA.roa (raw, json)
Hash identifier: wnvBGqJlM+2tEht0n/Ib8uJo5/3mW1o7G7mlulemRwQ=
Subject key identifier: 3C:D1:7E:2E:F8:7D:26:D1:23:C0:92:6F:2E:2C:2D:26:74:95:5C:90
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187A0538AED54AECAD52F7F944C49E51C92
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PNF-Lvh9JtEjwJJvLiwtJnSVXJA.roa
Signing time: Thu 20 Apr 2023 20:20:42 +0000
ROA not before: Thu 20 Apr 2023 20:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.143.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.165.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.172.0/24 maxlen: 24
5.105.69.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
5.105.77.0/24 maxlen: 24
5.105.94.0/24 maxlen: 24
5.105.104.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.113.0/24 maxlen: 24
5.105.228.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.186.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.199.0/24 maxlen: 24
5.105.198.0/24 maxlen: 24
5.105.202.0/24 maxlen: 24
5.105.206.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.218.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.64.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a0:53:8a:ed:54:ae:ca:d5:2f:7f:94:4c:49:e5:1c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 20 20:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3cd17e2ef87d26d123c0926f2e2c2d2674955c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:bb:22:27:63:df:10:50:04:59:d3:ea:32:
b0:ef:a3:d7:29:20:8b:62:02:d4:44:dd:f2:6c:8b:
0a:26:96:82:b1:09:41:a0:5c:9e:94:df:a1:c5:03:
4b:35:1d:4f:a6:53:a2:32:bc:af:8e:70:da:bb:42:
f7:24:63:63:bc:9e:52:35:8c:30:e0:7b:1b:07:87:
c4:6c:0f:98:c7:10:40:71:88:a9:bc:d9:da:04:ea:
f3:8b:7a:4a:7d:0e:31:a8:c8:e0:29:5c:eb:94:57:
fe:78:cb:e1:5c:69:39:c3:29:e3:70:0b:ab:86:b9:
4c:45:b6:b0:ef:9d:42:55:ba:8d:bf:01:a0:43:e8:
87:d0:38:26:d4:fc:26:4e:07:b8:87:55:e0:0a:1f:
85:ce:71:d2:ba:4f:ca:a2:4c:a7:42:6d:d3:d0:ac:
91:66:0d:02:36:0a:7e:3a:08:fe:52:7d:93:e1:32:
1b:40:a7:a7:95:b9:49:65:84:4c:cd:28:92:09:93:
a8:60:37:34:70:e5:ed:86:b2:1f:ba:dc:6c:39:0b:
d4:19:29:85:55:3a:18:2f:16:cf:7d:92:ab:f4:96:
3f:5f:3c:f8:be:ce:3a:59:00:e6:9c:3f:6a:a8:13:
0f:d3:7f:7c:88:da:96:d4:cf:0e:87:37:68:0c:1d:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D1:7E:2E:F8:7D:26:D1:23:C0:92:6F:2E:2C:2D:26:74:95:5C:90
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/PNF-Lvh9JtEjwJJvLiwtJnSVXJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.31.0/24
5.105.64.0/24
5.105.68.0/23
5.105.77.0/24
5.105.94.0/24
5.105.104.0/24
5.105.112.0/22
5.105.118.0/24
5.105.138.0/23
5.105.142.0/23
5.105.162.0/24
5.105.165.0/24
5.105.170.0/24
5.105.172.0/24
5.105.185.0-5.105.187.255
5.105.198.0/23
5.105.202.0/23
5.105.206.0/23
5.105.215.0/24
5.105.218.0/24
5.105.228.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.248.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4c:72:17:cf:17:08:34:49:1a:b8:c0:69:b6:ff:ef:41:4a:
f4:f9:c7:ff:42:e9:43:9b:10:81:94:a8:69:b7:ce:26:68:0d:
4b:ae:b3:af:fc:5b:12:66:59:8d:c8:34:33:70:e2:75:dc:fc:
70:c6:1c:56:13:65:bf:6e:c8:37:fd:7c:ee:d3:c7:ae:3f:ce:
fe:81:c5:e3:39:a9:15:ab:89:21:3c:12:25:f1:c3:ce:2c:f6:
92:3a:7c:36:76:6d:55:7e:ce:aa:9c:26:2e:77:79:3d:33:53:
e4:8d:5b:7d:1b:cd:6b:4d:0f:a0:83:ae:15:bf:4f:ce:a6:be:
2e:6a:09:85:cf:68:69:c6:34:37:e0:50:d6:ee:33:a0:63:aa:
76:63:d0:4a:0f:a2:30:5b:3f:d3:be:49:4e:a9:ce:27:8b:7c:
b1:57:9e:9e:75:15:d8:b1:82:40:f1:3e:71:78:41:f0:94:3f:
67:90:fb:9b:a2:c9:26:61:94:31:8e:d3:d7:53:e4:4f:f1:9b:
04:75:c7:e9:01:95:3e:89:bd:af:48:f8:b9:11:f3:63:77:17:
70:fa:45:f2:3c:91:24:b6:6f:d2:7a:bb:2d:0b:8c:eb:e0:7b:
bd:46:aa:3d:85:11:15:fc:d5:ff:40:d7:d2:ce:8c:80:4d:96:
12:f6:04:5b
-----BEGIN CERTIFICATE-----
MIIFqDCCBJCgAwIBAgISAYegU4rtVK7K1S9/lExJ5RySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDIwMjAyMDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2QxN2UyZWY4N2QyNmQxMjNjMDkyNmYyZTJjMmQyNjc0OTU1YzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk+7Iidj3xBQBFnT6jKw76PXKSCL
YgLURN3ybIsKJpaCsQlBoFyelN+hxQNLNR1PplOiMryvjnDau0L3JGNjvJ5SNYww
4HsbB4fEbA+YxxBAcYipvNnaBOrzi3pKfQ4xqMjgKVzrlFf+eMvhXGk5wynjcAur
hrlMRbaw751CVbqNvwGgQ+iH0Dgm1PwmTge4h1XgCh+FznHSuk/KokynQm3T0KyR
Zg0CNgp+Ogj+Un2T4TIbQKenlblJZYRMzSiSCZOoYDc0cOXthrIfutxsOQvUGSmF
VToYLxbPfZKr9JY/Xzz4vs46WQDmnD9qqBMP0398iNqW1M8OhzdoDB1+ZQIDAQAB
o4ICtDCCArAwHQYDVR0OBBYEFDzRfi74fSbRI8CSby4sLSZ0lVyQMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUE5GLUx2aDlKdEVqd0pKdkxpd3RKblNWWEpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHJBggrBgEFBQcBBwEB/wSBuTCBtjCBswQCAAEwgawDBAAF
aR8DBAAFaUADBAEFaUQDBAAFaU0DBAAFaV4DBAAFaWgDBAIFaXADBAAFaXYDBAEF
aYoDBAEFaY4DBAAFaaIDBAAFaaUDBAAFaaoDBAAFaawwDAMEAAVpuQMEAgVpuAME
AQVpxgMEAQVpygMEAQVpzgMEAAVp1wMEAAVp2gMEAAVp5DAMAwQABWnvAwQABWnw
AwQBBWn0AwQBBWn4AwQABbSwAwQAwS7SMA0GCSqGSIb3DQEBCwUAA4IBAQBrTHIX
zxcINEkauMBptv/vQUr0+cf/QulDmxCBlKhpt84maA1LrrOv/FsSZlmNyDQzcOJ1
3PxwxhxWE2W/bsg3/Xzu08euP87+gcXjOakVq4khPBIl8cPOLPaSOnw2dm1Vfs6q
nCYud3k9M1PkjVt9G81rTQ+gg64Vv0/Opr4uagmFz2hpxjQ34FDW7jOgY6p2Y9BK
D6IwWz/TvklOqc4ni3yxV56edRXYsYJA8T5xeEHwlD9nkPuboskmYZQxjtPXU+RP
8ZsEdcfpAZU+ib2vSPi5EfNjdxdw+kXyPJEktm/SerstC4zr4Hu9Rqo9hREV/NX/
QNfSzoyATZYS9gRb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org