Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XgBwqLNO9ipbg7zBSdcadpkx62E.roa
File: XgBwqLNO9ipbg7zBSdcadpkx62E.roa (raw, json)
Hash identifier: pJ17JT0bB3IsiypOzH4vvyweMW/juOYYip0aE3g0sxQ=
Subject key identifier: 5E:00:70:A8:B3:4E:F6:2A:5B:83:BC:C1:49:D7:1A:76:99:31:EB:61
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A4FBEE4CD17FEC239107C0BC21AC5D540
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XgBwqLNO9ipbg7zBSdcadpkx62E.roa
Signing time: Fri 01 Sep 2023 07:57:04 +0000
ROA not before: Fri 01 Sep 2023 07:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 5.105.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:be:e4:cd:17:fe:c2:39:10:7c:0b:c2:1a:c5:d5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 1 07:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e0070a8b34ef62a5b83bcc149d71a769931eb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:43:3b:53:24:7e:36:b2:33:9e:9c:5e:ee:
be:fa:a3:c1:ec:3e:4f:ae:07:8f:c8:5f:82:f9:2b:
8a:f2:7c:17:b7:e5:ea:1d:38:70:37:ed:95:1a:2f:
a6:75:e8:a0:6b:6f:de:b8:c3:e1:7b:ad:ca:40:fc:
58:e1:27:df:c6:e2:0d:cc:1f:17:68:cf:db:a6:82:
7a:97:96:00:e3:af:fc:b2:49:d3:fd:9e:1e:8d:99:
11:9f:50:c5:cd:b7:ea:ef:1a:31:5e:7e:84:56:07:
b2:83:49:0a:f5:a4:eb:3b:60:21:17:c1:30:e9:f3:
f1:49:c7:41:d2:95:97:6b:2f:f7:65:a3:08:05:a5:
e8:ca:31:b7:08:34:21:2c:34:73:e7:d3:7f:c8:58:
45:f4:49:ae:fc:0a:19:8c:b0:36:a8:7c:9a:63:d6:
b9:5d:89:b3:c2:5f:87:68:5d:80:de:06:16:46:dd:
02:9a:d8:51:e3:87:c5:df:96:ad:f7:d6:e8:b9:08:
08:8a:d7:1d:f8:d6:8c:14:91:2b:ab:7f:4f:ec:1a:
58:cd:01:d2:7c:7f:1a:f0:79:f3:00:7b:ee:01:55:
f2:82:86:9b:f0:a4:59:e9:d0:9a:59:a4:39:89:1f:
65:65:00:e0:83:5e:15:e8:21:41:32:76:99:fa:ef:
d8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:00:70:A8:B3:4E:F6:2A:5B:83:BC:C1:49:D7:1A:76:99:31:EB:61
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/XgBwqLNO9ipbg7zBSdcadpkx62E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
37:2b:86:ec:3a:b5:b4:dc:8d:5c:48:d6:3b:7c:58:83:a3:33:
38:27:0f:2b:ff:da:f9:e7:93:26:5e:fa:34:c1:bb:25:40:2d:
02:11:0c:cd:58:43:3f:36:88:65:c2:1b:6d:c0:d6:9f:b5:a7:
68:59:25:42:b6:4a:96:a7:28:1d:77:6c:6e:4f:bc:5e:4b:0b:
c3:a1:63:d3:7f:62:2d:03:48:d3:63:30:93:6e:23:66:5b:f7:
48:01:a0:b6:cd:82:56:62:dc:fe:3d:32:58:08:57:54:7e:36:
ca:c9:b9:c7:f4:ee:53:a9:3a:e2:6a:7e:25:9f:97:12:c5:34:
17:74:ae:d4:b6:1a:97:0b:fe:8b:99:bd:a8:fe:4a:42:c8:b5:
24:79:e7:62:98:df:52:97:6e:8a:0e:16:fb:d3:9a:a0:6d:5f:
96:a1:61:63:30:e2:43:fa:3b:f8:33:da:3b:98:c3:a2:79:7b:
2b:2a:2a:58:43:d9:da:26:ca:13:1d:41:9e:cf:f3:3e:db:c0:
67:4d:bc:c5:db:20:e6:93:04:e0:5a:a8:23:50:9c:ba:08:ab:
1d:96:c3:62:ec:11:bd:d6:3b:a4:f3:5d:8f:10:94:4d:a6:f0:
e8:5d:50:c3:cc:06:98:80:fd:2b:29:c8:ae:12:60:f8:28:26:
47:2d:99:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpPvuTNF/7CORB8C8IaxdVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTAxMDc1NzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTAwNzBhOGIzNGVmNjJhNWI4M2JjYzE0OWQ3MWE3Njk5MzFlYjYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbdDO1MkfjayM56cXu6++qPB7D5P
rgePyF+C+SuK8nwXt+XqHThwN+2VGi+mdeiga2/euMPhe63KQPxY4SffxuINzB8X
aM/bpoJ6l5YA46/8sknT/Z4ejZkRn1DFzbfq7xoxXn6EVgeyg0kK9aTrO2AhF8Ew
6fPxScdB0pWXay/3ZaMIBaXoyjG3CDQhLDRz59N/yFhF9Emu/AoZjLA2qHyaY9a5
XYmzwl+HaF2A3gYWRt0CmthR44fF35at99bouQgIitcd+NaMFJErq39P7BpYzQHS
fH8a8HnzAHvuAVXygoab8KRZ6dCaWaQ5iR9lZQDgg14V6CFBMnaZ+u/YqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF4AcKizTvYqW4O8wUnXGnaZMethMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWGdCd3FMTk85aXBiZzd6QlNkY2FkcGt4NjJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkTMA0G
CSqGSIb3DQEBCwUAA4IBAQA3K4bsOrW03I1cSNY7fFiDozM4Jw8r/9r555MmXvo0
wbslQC0CEQzNWEM/NohlwhttwNaftadoWSVCtkqWpygdd2xuT7xeSwvDoWPTf2It
A0jTYzCTbiNmW/dIAaC2zYJWYtz+PTJYCFdUfjbKybnH9O5TqTrian4ln5cSxTQX
dK7UthqXC/6Lmb2o/kpCyLUkeedimN9Sl26KDhb705qgbV+WoWFjMOJD+jv4M9o7
mMOieXsrKipYQ9naJsoTHUGez/M+28BnTbzF2yDmkwTgWqgjUJy6CKsdlsNi7BG9
1juk812PEJRNpvDoXVDDzAaYgP0rKciuEmD4KCZHLZkJ
-----END CERTIFICATE-----
Generated at Wed Oct 4 18:45:09 2023 by rpki-client on console-fra.rpki-client.org