Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y-g_MIUsZ-IGD3QN0NyPWHgjESI.roa
File: Y-g_MIUsZ-IGD3QN0NyPWHgjESI.roa (raw, json)
Hash identifier: Xu5/CUfwYWHIfqyur3YhRrviliPKa+0vT6PnLLXQHMY=
Subject key identifier: 63:E8:3F:30:85:2C:67:E2:06:0F:74:0D:D0:DC:8F:58:78:23:11:22
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B03E27B9B0012DCD7329AADFAED070E5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y-g_MIUsZ-IGD3QN0NyPWHgjESI.roa
Signing time: Mon 12 Jun 2023 15:34:03 +0000
ROA not before: Mon 12 Jun 2023 15:34:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 5.105.119.0/24 maxlen: 24
5.105.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:3e:27:b9:b0:01:2d:cd:73:29:aa:df:ae:d0:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 12 15:34:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63e83f30852c67e2060f740dd0dc8f5878231122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:2c:9d:76:60:2e:82:52:60:90:ae:e8:cd:
df:d0:19:26:9a:2d:7f:cd:6d:20:f5:ed:93:6f:3b:
42:a8:d6:0f:f2:df:3c:2f:cf:06:3a:9a:18:3a:0f:
b9:c6:1a:a5:06:dd:d7:9b:c0:6a:bd:38:b2:bc:70:
be:60:a0:d7:f2:5b:11:9b:17:bb:ec:9c:ae:1a:ab:
cb:32:03:88:3d:6c:1f:1d:21:2c:fb:7f:2f:9d:43:
4a:ca:a6:ea:81:c9:8d:11:d7:0f:b5:c7:94:7d:0e:
61:9d:0c:92:8d:04:6d:ce:6a:33:7d:0c:d5:7e:49:
ee:39:31:4d:21:7d:48:8b:33:09:62:0b:48:ec:9d:
45:0f:c0:a3:8b:4a:ba:36:fb:b9:48:e4:bd:30:49:
5d:87:75:5b:36:c8:d4:f8:5f:12:0d:fb:2c:3f:7d:
a2:34:24:bc:56:42:08:5a:e6:70:6f:11:bf:d3:28:
bb:1a:91:73:59:a8:b9:71:81:ad:f7:9e:cb:51:c9:
9c:ce:e2:17:ed:f9:48:a5:76:55:a3:a0:7d:d3:42:
fb:69:64:6d:73:84:14:2f:70:2a:56:a1:72:e1:9f:
12:4f:26:77:c0:22:94:be:28:f2:09:aa:d2:c0:21:
64:2b:d6:c3:f1:18:a2:07:6c:a1:17:c6:1a:ed:7e:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:3F:30:85:2C:67:E2:06:0F:74:0D:D0:DC:8F:58:78:23:11:22
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y-g_MIUsZ-IGD3QN0NyPWHgjESI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.119.0/24
5.105.121.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0b:40:62:ab:25:b0:31:86:4d:26:98:03:38:0c:08:d1:70:
0a:d0:54:49:4b:56:ac:e8:9d:b3:66:03:35:89:e5:00:d4:a5:
4c:40:7a:74:80:52:04:c1:2b:15:f0:1d:ed:1a:52:1c:f8:da:
28:14:ca:ac:af:fd:44:66:fe:ea:72:3f:b0:6f:11:37:f0:82:
95:3d:e2:89:e8:ed:6d:09:b6:5a:fc:80:b2:c8:c4:61:b6:af:
ad:05:c8:1c:c7:52:29:56:89:92:be:7e:97:f3:5d:ce:37:3b:
3c:cd:86:49:e8:80:0f:8f:15:da:63:74:61:6c:f7:a6:20:fc:
df:20:db:d6:b8:72:b2:fa:26:33:c0:8d:61:22:f7:c6:fb:34:
f8:21:51:6e:69:66:9d:4d:4c:0d:c4:9b:45:82:3e:34:f0:65:
6f:ef:62:de:c5:36:71:49:3d:88:53:4e:26:d8:d1:de:5f:c3:
a9:e1:08:69:87:63:0e:e6:a4:23:3c:b7:5b:a0:e6:4d:62:72:
07:a6:52:55:5a:13:df:5b:81:d6:e5:51:94:d5:b2:fd:ea:a1:
3e:b4:20:ab:7d:94:f2:f8:c8:0b:10:bf:83:55:83:c7:f6:e2:
ac:31:1b:57:6c:19:dc:b2:9c:27:93:1d:70:1a:29:79:6b:97:
b4:89:e5:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiwPie5sAEtzXMpqt+u0HDlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjEyMTUzNDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2U4M2YzMDg1MmM2N2UyMDYwZjc0MGRkMGRjOGY1ODc4MjMxMTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWAsnXZgLoJSYJCu6M3f0Bkmmi1/
zW0g9e2TbztCqNYP8t88L88GOpoYOg+5xhqlBt3Xm8BqvTiyvHC+YKDX8lsRmxe7
7JyuGqvLMgOIPWwfHSEs+38vnUNKyqbqgcmNEdcPtceUfQ5hnQySjQRtzmozfQzV
fknuOTFNIX1IizMJYgtI7J1FD8Cji0q6Nvu5SOS9MEldh3VbNsjU+F8SDfssP32i
NCS8VkIIWuZwbxG/0yi7GpFzWai5cYGt957LUcmczuIX7flIpXZVo6B900L7aWRt
c4QUL3AqVqFy4Z8STyZ3wCKUvijyCarSwCFkK9bD8RiiB2yhF8Ya7X5CVwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGPoPzCFLGfiBg90DdDcj1h4IxEiMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWS1nX01JVXNaLUlHRDNRTjBOeVBXSGdqRVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWl3AwQA
BWl5MA0GCSqGSIb3DQEBCwUAA4IBAQBLC0BiqyWwMYZNJpgDOAwI0XAK0FRJS1as
6J2zZgM1ieUA1KVMQHp0gFIEwSsV8B3tGlIc+NooFMqsr/1EZv7qcj+wbxE38IKV
PeKJ6O1tCbZa/ICyyMRhtq+tBcgcx1IpVomSvn6X813ONzs8zYZJ6IAPjxXaY3Rh
bPemIPzfINvWuHKy+iYzwI1hIvfG+zT4IVFuaWadTUwNxJtFgj408GVv72LexTZx
ST2IU04m2NHeX8Op4Qhph2MO5qQjPLdboOZNYnIHplJVWhPfW4HW5VGU1bL96qE+
tCCrfZTy+MgLEL+DVYPH9uKsMRtXbBncspwnkx1wGil5a5e0ieWs
-----END CERTIFICATE-----
Generated at Mon Aug 28 13:16:14 2023 by rpki-client on console-fra.rpki-client.org