Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U5hUv8uzSN75NQvek2G3LzmzFp8.roa
File: U5hUv8uzSN75NQvek2G3LzmzFp8.roa (raw, json)
Hash identifier: DnwftLSM96RXFgwvnw4u4MLoZd6ew1J+61ehI2GiJbI=
Subject key identifier: 53:98:54:BF:CB:B3:48:DE:F9:35:0B:DE:93:61:B7:2F:39:B3:16:9F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C41A786FA4B290AB946F1384A964D441
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U5hUv8uzSN75NQvek2G3LzmzFp8.roa
Signing time: Thu 27 Apr 2023 19:04:41 +0000
ROA not before: Thu 27 Apr 2023 19:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 5.105.22.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 May 2023 08:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c4:1a:78:6f:a4:b2:90:ab:94:6f:13:84:a9:64:d4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 19:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=539854bfcbb348def9350bde9361b72f39b3169f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d7:f7:17:a0:27:4d:2d:53:78:d7:5f:42:6c:
e1:73:94:0a:b2:53:24:ba:c7:1b:32:1a:30:e1:0a:
cb:33:57:d4:17:c9:58:58:09:8b:6b:b7:85:92:89:
de:fc:61:98:28:49:fb:a6:73:1c:08:55:39:3f:72:
e7:83:15:bb:01:c8:8a:9c:6c:33:f9:27:93:51:67:
f2:c8:4e:f2:4f:49:24:50:66:87:d6:f1:5a:48:d8:
b3:a7:4e:44:3f:46:65:56:3e:e0:16:40:07:68:77:
a4:c8:53:26:54:07:6b:9d:c3:ab:bd:63:46:39:85:
4f:ca:20:01:0c:4d:ae:75:5c:88:77:40:11:ad:9d:
3f:7a:e6:53:dd:8f:1a:17:02:90:8f:cb:9d:06:94:
22:95:e9:df:18:a3:65:9d:c7:84:f9:2f:90:70:d0:
aa:72:e2:28:de:9b:5b:f0:be:d3:9c:6a:06:3f:33:
89:9d:0e:6b:a1:5b:23:25:43:18:78:7b:21:5e:35:
c4:63:3a:ca:2b:94:10:d5:36:be:33:11:9a:b3:08:
b7:1c:44:dd:9d:ff:f6:51:04:dc:a2:ef:05:fe:28:
00:6b:9a:98:7d:95:a3:d7:e8:6d:57:a5:72:45:cd:
97:f7:8c:4f:56:e1:81:00:d1:f0:cf:8e:bb:0d:7c:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:54:BF:CB:B3:48:DE:F9:35:0B:DE:93:61:B7:2F:39:B3:16:9F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/U5hUv8uzSN75NQvek2G3LzmzFp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.22.0/24
5.105.45.0-5.105.47.255
Signature Algorithm: sha256WithRSAEncryption
20:31:5a:81:dc:c4:85:b1:58:d9:0a:78:8a:96:ae:69:a3:3b:
3d:aa:9c:35:ac:7b:3f:fb:d1:1a:29:e5:f0:8d:66:85:73:d4:
5d:61:ba:4a:93:7f:d0:66:ef:7e:54:7b:c6:4b:54:b9:12:5d:
33:a2:c6:1f:fc:b7:6f:aa:be:39:98:ce:3f:b5:a0:ff:01:dc:
a1:7e:b5:99:a4:80:10:31:ef:76:02:76:5d:a4:97:72:ff:6e:
e9:38:6f:b8:d5:2d:4d:6e:51:ee:22:a8:4f:00:db:ad:1d:e8:
4a:ed:5d:31:0b:f8:0c:e2:ec:1d:cd:31:e2:cd:8c:3a:9d:34:
b8:83:0e:cc:5a:0a:1b:aa:e5:8f:1d:ce:20:50:4b:e3:69:fc:
f4:6b:91:c0:b7:68:73:e7:53:31:11:d9:5f:68:71:9b:76:e1:
9c:56:07:50:4c:7f:03:4e:2a:61:a8:19:78:58:99:3a:29:b2:
9f:cf:73:be:17:bd:48:f3:28:6e:8a:f5:2e:84:df:5b:bd:6a:
6a:34:2c:15:48:3e:66:da:db:c7:bf:0a:99:9b:ce:21:7c:07:
fd:af:fb:6d:bc:90:aa:88:bb:33:e6:da:60:b6:90:20:5b:75:
43:e5:a9:3b:3e:82:03:e9:15:0a:3a:66:bd:e3:8c:00:ea:f7:
a1:be:8b:7b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYfEGnhvpLKQq5RvE4SpZNRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDI3MTkwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzk4NTRiZmNiYjM0OGRlZjkzNTBiZGU5MzYxYjcyZjM5YjMxNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntf3F6AnTS1TeNdfQmzhc5QKslMk
uscbMhow4QrLM1fUF8lYWAmLa7eFkone/GGYKEn7pnMcCFU5P3LngxW7AciKnGwz
+SeTUWfyyE7yT0kkUGaH1vFaSNizp05EP0ZlVj7gFkAHaHekyFMmVAdrncOrvWNG
OYVPyiABDE2udVyId0ARrZ0/euZT3Y8aFwKQj8udBpQilenfGKNlnceE+S+QcNCq
cuIo3ptb8L7TnGoGPzOJnQ5roVsjJUMYeHshXjXEYzrKK5QQ1Ta+MxGaswi3HETd
nf/2UQTcou8F/igAa5qYfZWj1+htV6VyRc2X94xPVuGBANHwz467DXxUZQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFOYVL/Ls0je+TUL3pNhty85sxafMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvVTVoVXY4dXpTTjc1TlF2ZWsyRzNMem16RnA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQABWkWMAwD
BAAFaS0DBAQFaSAwDQYJKoZIhvcNAQELBQADggEBACAxWoHcxIWxWNkKeIqWrmmj
Oz2qnDWsez/70Rop5fCNZoVz1F1hukqTf9Bm735Ue8ZLVLkSXTOixh/8t2+qvjmY
zj+1oP8B3KF+tZmkgBAx73YCdl2kl3L/buk4b7jVLU1uUe4iqE8A260d6ErtXTEL
+Azi7B3NMeLNjDqdNLiDDsxaChuq5Y8dziBQS+Np/PRrkcC3aHPnUzER2V9ocZt2
4ZxWB1BMfwNOKmGoGXhYmTopsp/Pc74XvUjzKG6K9S6E31u9amo0LBVIPmba28e/
CpmbziF8B/2v+228kKqIuzPm2mC2kCBbdUPlqTs+ggPpFQo6Zr3jjADq96G+i3s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:28 2024 by rpki-client on console-fra.rpki-client.org