Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y6t1Lljrxbyk96UT3Z5DKms69Eo.roa
File: Y6t1Lljrxbyk96UT3Z5DKms69Eo.roa (raw, json)
Hash identifier: 9jOO+3j0QrL7TxhUVhqGUdYA/GxE++nDfI/dahkFWo4=
Subject key identifier: 63:AB:75:2E:58:EB:C5:BC:A4:F7:A5:13:DD:9E:43:2A:6B:3A:F4:4A
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018586EDFE26A19749DC10434DA6854E4CF5
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y6t1Lljrxbyk96UT3Z5DKms69Eo.roa
Signing time: Fri 06 Jan 2023 11:53:42 +0000
ROA not before: Fri 06 Jan 2023 11:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.44.0/22 maxlen: 24
5.105.47.0/24 maxlen: 24
5.105.46.0/24 maxlen: 24
5.105.45.0/24 maxlen: 24
5.105.55.0/24 maxlen: 24
5.105.54.0/24 maxlen: 24
5.105.53.0/24 maxlen: 24
5.105.52.0/24 maxlen: 24
5.105.52.0/22 maxlen: 24
5.105.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:ed:fe:26:a1:97:49:dc:10:43:4d:a6:85:4e:4c:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 6 11:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ab752e58ebc5bca4f7a513dd9e432a6b3af44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:44:8a:03:68:21:2b:f6:f6:a8:e1:43:c6:
ca:78:1f:06:20:58:b3:fa:46:21:dd:d8:54:3b:82:
d5:bd:a9:56:44:df:19:7f:e4:74:5a:54:74:32:79:
74:7d:c6:c4:61:99:91:b7:71:dd:f0:fe:dc:64:2e:
e7:1a:3b:d8:8d:a0:95:fc:66:03:f5:5d:43:02:0c:
3d:c1:36:ac:af:e7:e6:b4:38:79:c9:ed:27:79:cc:
6d:f6:f1:f4:81:86:7b:ae:43:19:53:df:28:fb:2c:
e6:4d:26:6e:51:e5:64:3a:99:61:36:f7:c2:a5:9c:
6c:3a:ab:19:e7:08:fd:e3:31:e5:70:45:80:9b:d6:
ff:64:aa:95:01:74:8e:7e:a3:d8:a2:68:fb:21:de:
75:46:dc:a5:ce:9d:32:52:66:f2:a6:ac:f6:ee:e8:
57:4b:df:76:57:37:1f:0e:9c:46:69:8a:56:12:0b:
62:32:e1:11:c6:40:0e:eb:e5:4e:45:b9:58:ba:38:
f7:9d:1b:41:89:0f:19:67:89:b7:16:25:e2:b1:92:
22:7e:65:ad:13:03:d4:6a:e3:80:7a:de:b4:c7:d8:
38:38:70:59:5f:8c:3a:b9:6a:42:0c:28:a9:c4:4b:
e8:01:a4:94:49:cd:05:8e:97:f0:b7:1c:e1:d2:7f:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:75:2E:58:EB:C5:BC:A4:F7:A5:13:DD:9E:43:2A:6B:3A:F4:4A
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Y6t1Lljrxbyk96UT3Z5DKms69Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.44.0/22
5.105.52.0/22
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:e2:6e:64:27:80:10:9d:73:ba:47:35:a9:6b:0e:5c:35:bf:
0a:58:e4:c6:05:81:67:f3:da:ad:f7:b1:15:21:04:d1:22:9c:
92:9d:18:9d:c0:02:cc:40:57:57:42:8c:4b:3f:40:7c:19:2c:
ec:ea:43:e9:70:fd:a1:b1:aa:24:c3:fc:2a:d8:9e:8a:58:28:
83:32:5d:78:9d:f7:d4:3e:b6:9b:1f:f2:e4:eb:50:ac:56:15:
e5:97:64:5a:d6:00:6e:75:1e:d9:a3:98:97:b8:42:8a:60:39:
18:7a:da:38:09:0f:34:8e:ab:57:78:7e:7f:a1:b5:df:83:d3:
34:aa:cd:0b:df:7d:79:25:f1:50:ef:96:0c:40:43:82:84:ab:
b2:75:c2:3a:a0:5b:c8:f5:d6:9e:c5:35:f9:a2:42:f2:51:cd:
1f:c5:cf:48:92:c3:1f:71:ca:a9:6f:40:95:51:77:2b:f3:a1:
38:01:0b:ff:30:c4:26:79:a4:ea:33:6c:af:e7:76:c7:b7:f8:
ac:e8:4b:c4:47:71:2c:01:30:34:3a:8e:df:f3:61:4f:e4:92:
d2:b6:d5:4d:47:33:e1:36:bf:00:e2:99:f4:d1:15:e0:e0:ec:
e4:f5:d1:99:b8:9d:e1:b0:94:bd:d8:8f:f6:d4:75:21:7a:af:
e1:bb:05:d0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYWG7f4moZdJ3BBDTaaFTkz1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTA2MTE1MzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2FiNzUyZTU4ZWJjNWJjYTRmN2E1MTNkZDllNDMyYTZiM2FmNDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaREigNoISv29qjhQ8bKeB8GIFiz
+kYh3dhUO4LVvalWRN8Zf+R0WlR0Mnl0fcbEYZmRt3Hd8P7cZC7nGjvYjaCV/GYD
9V1DAgw9wTasr+fmtDh5ye0necxt9vH0gYZ7rkMZU98o+yzmTSZuUeVkOplhNvfC
pZxsOqsZ5wj94zHlcEWAm9b/ZKqVAXSOfqPYomj7Id51Rtylzp0yUmbypqz27uhX
S992VzcfDpxGaYpWEgtiMuERxkAO6+VORblYujj3nRtBiQ8ZZ4m3FiXisZIifmWt
EwPUauOAet60x9g4OHBZX4w6uWpCDCipxEvoAaSUSc0Fjpfwtxzh0n/yXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGOrdS5Y68W8pPelE92eQyprOvRKMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWTZ0MUxsanJ4YnlrOTZVVDNaNURLbXM2OUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBWksAwQC
BWk0AwQABWnbAwQABWnjMA0GCSqGSIb3DQEBCwUAA4IBAQAN4m5kJ4AQnXO6RzWp
aw5cNb8KWOTGBYFn89qt97EVIQTRIpySnRidwALMQFdXQoxLP0B8GSzs6kPpcP2h
saokw/wq2J6KWCiDMl14nffUPrabH/Lk61CsVhXll2Ra1gBudR7Zo5iXuEKKYDkY
eto4CQ80jqtXeH5/obXfg9M0qs0L3315JfFQ75YMQEOChKuydcI6oFvI9daexTX5
okLyUc0fxc9IksMfccqpb0CVUXcr86E4AQv/MMQmeaTqM2yv53bHt/is6EvER3Es
ATA0Oo7f82FP5JLSttVNRzPhNr8A4pn00RXg4Ozk9dGZuJ3hsJS92I/21HUheq/h
uwXQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:18 2023 by rpki-client on console-fra.rpki-client.org