Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QB1tyDFvCvVASPAoPGbP1yKqhxo.roa
File: QB1tyDFvCvVASPAoPGbP1yKqhxo.roa (raw, json)
Hash identifier: syUuEGlbWNPU7ebYU519zlrB/70p0qjUKYxZ3GdTrYE=
Subject key identifier: 40:1D:6D:C8:31:6F:0A:F5:40:48:F0:28:3C:66:CF:D7:22:AA:87:1A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01888D08EB51ACF84400E9C1C594EAEFB5DD
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QB1tyDFvCvVASPAoPGbP1yKqhxo.roa
Signing time: Mon 05 Jun 2023 19:29:11 +0000
ROA not before: Mon 05 Jun 2023 19:29:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 5.105.23.0/24 maxlen: 24
5.105.248.0/24 maxlen: 24
5.105.44.0/24 maxlen: 24
5.105.112.0/24 maxlen: 24
5.105.114.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:08:eb:51:ac:f8:44:00:e9:c1:c5:94:ea:ef:b5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 5 19:29:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=401d6dc8316f0af54048f0283c66cfd722aa871a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:51:55:97:1c:d2:61:e2:07:da:ad:5c:5e:
e4:96:ac:f6:7e:d7:27:9f:ec:ae:36:5c:91:bd:b6:
da:a6:20:4c:80:cf:84:3f:e5:57:b0:fc:5d:c2:ee:
8d:2f:b8:23:d0:e4:50:8d:8f:c8:f5:3c:80:c0:75:
71:3e:4a:00:92:55:05:59:93:f1:d6:5b:f7:66:5d:
f0:37:0c:03:57:50:cf:e3:90:28:1d:9f:a9:c1:04:
a5:c8:b6:7a:f8:a6:e3:ca:38:33:7b:2f:17:79:18:
63:7c:76:dc:1b:bf:e5:00:cd:0c:0b:f0:a3:df:72:
4c:f4:a1:d3:2c:5f:33:7a:e3:2f:2b:0c:76:82:82:
c1:08:c0:97:27:cf:aa:81:5d:99:16:c8:25:5c:80:
3a:d0:d5:09:ab:c7:86:0d:41:60:25:92:7c:d8:32:
2c:5a:77:6c:49:f6:cb:b7:3e:76:60:f6:bc:ea:fc:
47:54:25:2a:86:d9:65:0e:d2:40:cb:33:76:84:d3:
b6:52:3a:b8:0c:1a:07:62:85:25:a4:62:39:92:db:
37:d2:08:57:db:37:21:37:64:45:61:53:2c:cb:9c:
2b:b4:51:c1:65:a5:ec:8b:1e:c0:66:c0:76:0f:76:
55:12:f1:ce:dc:cf:a3:06:71:54:c6:dd:86:4e:dd:
4a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:6D:C8:31:6F:0A:F5:40:48:F0:28:3C:66:CF:D7:22:AA:87:1A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/QB1tyDFvCvVASPAoPGbP1yKqhxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.23.0/24
5.105.44.0/24
5.105.112.0/24
5.105.114.0/23
5.105.248.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a4:64:69:7b:b3:db:d6:39:34:c9:59:c7:f4:c8:2d:ab:c9:
c5:9b:67:cb:9c:65:fd:a4:cf:30:8e:9d:80:d1:7b:41:87:b6:
00:2e:ef:1e:98:86:5e:97:ea:48:4a:e6:59:52:8b:d6:c2:2e:
06:5a:70:6a:6e:eb:72:1e:e1:0e:1b:7e:92:b2:29:e9:c9:e6:
db:a8:b3:a6:16:ef:32:76:71:aa:4c:ce:cf:af:ec:ca:09:dd:
45:fd:0d:47:4c:8e:f9:20:49:b3:1d:95:dc:51:67:32:bc:88:
aa:10:74:7e:2f:4c:69:8a:55:3a:ca:05:be:9f:bb:fe:74:93:
72:4a:23:a7:17:d6:01:81:9a:e2:29:95:aa:13:99:d9:93:34:
23:91:61:11:49:e9:36:d7:c7:94:42:17:26:a1:09:db:76:0b:
c1:bd:e9:7c:27:b2:e7:98:7e:8e:f2:97:9a:bc:8a:17:9f:7d:
ad:1a:09:85:df:1b:98:ce:39:ed:fc:69:1c:82:a7:61:cd:94:
4a:f1:2c:db:a0:84:51:c7:cf:ab:9a:76:02:34:fe:f7:43:ff:
df:78:3f:42:b0:75:37:50:11:d3:32:94:a8:a0:2a:d4:55:e2:
3e:ec:07:c4:09:9b:4e:07:d3:8e:ce:e0:bc:4b:ef:16:52:9d:
26:a9:0d:c7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYiNCOtRrPhEAOnBxZTq77XdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjA1MTkyOTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDFkNmRjODMxNmYwYWY1NDA0OGYwMjgzYzY2Y2ZkNzIyYWE4NzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGhRVZcc0mHiB9qtXF7klqz2ftcn
n+yuNlyRvbbapiBMgM+EP+VXsPxdwu6NL7gj0ORQjY/I9TyAwHVxPkoAklUFWZPx
1lv3Zl3wNwwDV1DP45AoHZ+pwQSlyLZ6+Kbjyjgzey8XeRhjfHbcG7/lAM0MC/Cj
33JM9KHTLF8zeuMvKwx2goLBCMCXJ8+qgV2ZFsglXIA60NUJq8eGDUFgJZJ82DIs
WndsSfbLtz52YPa86vxHVCUqhtllDtJAyzN2hNO2Ujq4DBoHYoUlpGI5kts30ghX
2zchN2RFYVMsy5wrtFHBZaXsix7AZsB2D3ZVEvHO3M+jBnFUxt2GTt1K6QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFEAdbcgxbwr1QEjwKDxmz9ciqocaMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUUIxdHlERnZDdlZBU1BBb1BHYlAxeUtxaHhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABWkXAwQA
BWksAwQABWlwAwQBBWlyAwQABWn4MA0GCSqGSIb3DQEBCwUAA4IBAQBgpGRpe7Pb
1jk0yVnH9Mgtq8nFm2fLnGX9pM8wjp2A0XtBh7YALu8emIZel+pISuZZUovWwi4G
WnBqbutyHuEOG36SsinpyebbqLOmFu8ydnGqTM7Pr+zKCd1F/Q1HTI75IEmzHZXc
UWcyvIiqEHR+L0xpilU6ygW+n7v+dJNySiOnF9YBgZriKZWqE5nZkzQjkWERSek2
18eUQhcmoQnbdgvBvel8J7LnmH6O8peavIoXn32tGgmF3xuYzjnt/GkcgqdhzZRK
8SzboIRRx8+rmnYCNP73Q//feD9CsHU3UBHTMpSooCrUVeI+7AfECZtOB9OOzuC8
S+8WUp0mqQ3H
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org