Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/R-tjrIij1k0y3Wkn63pPRHEWEPU.roa
File: R-tjrIij1k0y3Wkn63pPRHEWEPU.roa (raw, json)
Hash identifier: usZSqbwKprEkjsPubBSaIE/JgGCjxSlfOGagv2EAvQ0=
Subject key identifier: 47:EB:63:AC:88:A3:D6:4D:32:DD:69:27:EB:7A:4F:44:71:16:10:F5
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185E802C385030DC1052543B1BDBFF1EA72
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/R-tjrIij1k0y3Wkn63pPRHEWEPU.roa
Signing time: Wed 25 Jan 2023 08:19:33 +0000
ROA not before: Wed 25 Jan 2023 08:19:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 5.105.228.0/24 maxlen: 24
5.105.242.0/24 maxlen: 24
5.105.51.0/24 maxlen: 24
5.105.170.0/24 maxlen: 24
5.105.169.0/24 maxlen: 24
5.105.66.0/24 maxlen: 24
5.105.185.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
5.105.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e8:02:c3:85:03:0d:c1:05:25:43:b1:bd:bf:f1:ea:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 25 08:19:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47eb63ac88a3d64d32dd6927eb7a4f44711610f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:2e:2f:81:c7:8f:58:43:73:b1:63:80:59:
8e:7f:f2:b3:db:25:41:d6:9c:01:45:9b:48:aa:9a:
38:50:84:e7:fd:67:66:f9:a0:48:4d:12:33:40:1d:
b4:72:77:27:5d:8b:25:49:82:23:22:0b:6b:af:c3:
03:c1:f4:13:a0:f2:0c:0b:00:70:b2:90:0c:ef:2c:
05:41:62:2a:a1:79:21:c5:58:0f:69:cc:dc:23:c3:
db:25:c9:b5:79:45:33:d4:bc:91:cc:fe:f2:3b:78:
be:e9:1d:e0:ed:56:9e:77:75:39:dc:87:da:ce:6f:
92:97:e5:b2:5b:14:b8:7f:49:09:aa:b2:cf:37:67:
f6:c9:dd:d2:b2:0d:4e:ad:7a:65:e5:7e:4a:8e:dd:
01:b8:f5:84:7f:df:d9:67:d4:e8:e6:7b:20:b4:10:
1a:37:05:a5:8e:ad:96:bc:2f:09:70:d6:af:38:f3:
35:25:07:58:c3:6c:81:75:dd:40:bc:02:5a:c0:d3:
8e:24:59:41:be:e4:e2:9c:d6:a5:23:e3:e8:6c:3f:
91:48:43:c2:cd:e2:d3:c0:45:77:fc:2f:f9:19:16:
a6:c7:a2:39:3e:66:72:3d:36:75:51:a8:f5:a5:24:
15:e3:39:97:8c:d5:ad:62:bc:24:3c:92:1c:c6:58:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:63:AC:88:A3:D6:4D:32:DD:69:27:EB:7A:4F:44:71:16:10:F5
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/R-tjrIij1k0y3Wkn63pPRHEWEPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
5.105.66.0/24
5.105.106.0/24
5.105.118.0/24
5.105.169.0-5.105.170.255
5.105.185.0/24
5.105.228.0/24
5.105.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:cf:ff:2c:cc:c2:6c:b3:42:e9:50:c8:95:4c:86:29:a2:7f:
72:bf:f4:2b:d4:1c:9e:67:22:7b:e8:ba:f7:23:a8:7c:88:73:
6b:f9:a7:c1:91:f9:c1:c2:29:cf:bc:45:37:c5:13:63:af:c6:
cf:4e:ac:67:71:4e:6d:a9:38:0b:e2:5f:3f:4b:05:aa:36:a8:
40:d8:6b:45:ec:0c:b8:c0:84:7b:99:f8:a7:c5:6f:01:49:8a:
93:99:a0:0b:8c:32:6c:4f:56:f5:45:84:40:9f:7d:11:08:6d:
5b:8d:40:94:7a:09:b8:c7:ab:5f:2d:97:d9:0a:a0:b3:ce:61:
f3:24:0c:a4:07:73:2b:b4:e4:d4:ec:f8:04:8c:28:05:59:0e:
a2:c1:89:50:8f:06:cf:6c:a1:c6:eb:05:5c:e4:32:d0:b4:32:
59:35:2b:d2:1a:fa:fd:f9:38:0e:e8:eb:9f:b9:de:a1:97:74:
ec:89:76:10:99:ac:5b:92:94:89:c5:83:b2:07:28:54:1d:74:
0d:aa:cf:62:38:7e:91:b2:b5:80:97:c1:fa:2e:67:0e:af:04:
90:d8:e4:8c:c3:9e:91:cc:c7:7b:7e:55:70:dd:ce:03:3a:16:
d5:2b:51:2b:0a:78:17:60:5e:ab:f9:13:4e:89:4c:77:d5:ff:
bb:ec:6c:5f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYXoAsOFAw3BBSVDsb2/8epyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTI1MDgxOTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2ViNjNhYzg4YTNkNjRkMzJkZDY5MjdlYjdhNGY0NDcxMTYxMGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZouL4HHj1hDc7FjgFmOf/Kz2yVB
1pwBRZtIqpo4UITn/Wdm+aBITRIzQB20cncnXYslSYIjIgtrr8MDwfQToPIMCwBw
spAM7ywFQWIqoXkhxVgPaczcI8PbJcm1eUUz1LyRzP7yO3i+6R3g7Vaed3U53Ifa
zm+Sl+WyWxS4f0kJqrLPN2f2yd3Ssg1OrXpl5X5Kjt0BuPWEf9/ZZ9To5nsgtBAa
NwWljq2WvC8JcNavOPM1JQdYw2yBdd1AvAJawNOOJFlBvuTinNalI+PobD+RSEPC
zeLTwEV3/C/5GRamx6I5PmZyPTZ1Uaj1pSQV4zmXjNWtYrwkPJIcxljVKwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFEfrY6yIo9ZNMt1pJ+t6T0RxFhD1MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvUi10anJJaWoxazB5M1drbjYzcFBSSEVXRVBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQABWkzAwQA
BWlCAwQABWlqAwQABWl2MAwDBAAFaakDBAAFaaoDBAAFabkDBAAFaeQDBAAFafIw
DQYJKoZIhvcNAQELBQADggEBAK7P/yzMwmyzQulQyJVMhimif3K/9CvUHJ5nInvo
uvcjqHyIc2v5p8GR+cHCKc+8RTfFE2Ovxs9OrGdxTm2pOAviXz9LBao2qEDYa0Xs
DLjAhHuZ+KfFbwFJipOZoAuMMmxPVvVFhECffREIbVuNQJR6CbjHq18tl9kKoLPO
YfMkDKQHcyu05NTs+ASMKAVZDqLBiVCPBs9socbrBVzkMtC0Mlk1K9Ia+v35OA7o
65+53qGXdOyJdhCZrFuSlInFg7IHKFQddA2qz2I4fpGytYCXwfouZw6vBJDY5IzD
npHMx3t+VXDdzgM6FtUrUSsKeBdgXqv5E06JTHfV/7vsbF8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org