Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ynneqe0pxERKdX1MkSk9Woyjsig.roa
File: Ynneqe0pxERKdX1MkSk9Woyjsig.roa (raw, json)
Hash identifier: cEAYEKZS9ZaJyEE8oksCSXF3XoA6ecDssGCGQC73STs=
Subject key identifier: 62:79:DE:A9:ED:29:C4:44:4A:75:7D:4C:91:29:3D:5A:8C:A3:B2:28
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A577D02D0BB6AF00241BD81D0FB1F4ED3
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ynneqe0pxERKdX1MkSk9Woyjsig.roa
Signing time: Sat 02 Sep 2023 20:02:05 +0000
ROA not before: Sat 02 Sep 2023 20:02:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.82.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.205.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:57:7d:02:d0:bb:6a:f0:02:41:bd:81:d0:fb:1f:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 2 20:02:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6279dea9ed29c4444a757d4c91293d5a8ca3b228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:93:bb:f4:79:f3:60:5a:6b:a8:9b:1e:4e:ff:
92:c2:b2:a1:08:b1:c7:5e:d9:bd:97:f8:d8:ea:0e:
bb:62:f8:82:fc:f3:d2:1c:c3:76:53:67:60:a0:02:
c0:08:95:bd:ee:fb:55:22:fa:48:48:16:be:b0:33:
e8:20:9c:91:3e:2a:ea:41:4c:ff:89:12:8b:c7:a9:
1a:f1:69:e0:29:54:6c:a3:56:6a:e6:e0:40:70:13:
c0:e5:b7:66:f9:09:7d:7d:d6:ff:76:7f:d8:f9:ce:
ab:06:44:32:ad:fb:66:d3:75:5e:68:53:80:23:2a:
40:79:e6:7a:d2:0f:ea:35:0f:95:38:f9:69:49:3c:
41:ba:45:9a:81:a4:92:a5:9c:0b:78:ac:8a:80:bc:
f9:25:05:ec:c1:11:13:75:3a:ee:23:65:2e:c9:d7:
5f:1f:4d:05:a5:10:bf:0f:98:b0:c3:75:12:a2:16:
4d:29:4f:a7:68:f5:7c:05:a7:ee:95:45:ec:99:38:
16:c3:62:3e:f4:84:80:b2:4b:27:29:e9:69:61:37:
23:32:23:96:c1:d3:3f:e2:e5:1d:65:6e:e3:34:c1:
24:ad:8f:12:37:52:7a:71:a3:b0:9c:04:c4:38:87:
ef:8c:d1:c9:54:9a:c3:1d:b3:4f:f7:d4:13:94:77:
94:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:DE:A9:ED:29:C4:44:4A:75:7D:4C:91:29:3D:5A:8C:A3:B2:28
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/Ynneqe0pxERKdX1MkSk9Woyjsig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.82.0/24
5.105.84.0/24
5.105.115.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.203.0/24
5.105.205.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:c4:98:74:5a:65:0e:21:64:26:96:88:40:59:2f:d1:39:aa:
01:23:6a:0c:4d:8c:80:1e:71:c9:7d:33:6c:95:7b:4a:93:7a:
77:3b:b2:26:b5:17:b7:1d:e4:c0:74:3b:cc:10:0d:06:f6:7f:
e9:fb:bc:98:d2:f8:cf:fc:fc:8a:c6:a8:b5:25:e5:89:1a:5d:
5b:c3:9d:48:e4:7f:33:df:b3:0b:dd:e9:99:1e:2a:f6:7f:03:
9f:00:5b:ca:8f:ab:b1:33:dc:5d:e9:13:e3:78:26:d6:7c:41:
69:1a:fc:17:c4:6d:09:f7:b8:73:ac:a0:59:6c:0e:a1:79:a6:
fa:ed:90:82:6a:55:10:5a:54:ff:e4:d4:32:41:af:07:81:6e:
bd:88:83:77:3f:82:df:62:6b:16:ef:cd:69:aa:ea:d2:26:97:
5c:8b:a5:79:f9:94:f3:62:33:9b:a3:7a:e8:6a:29:34:4a:ed:
1b:c5:00:fb:08:6e:c3:0e:d5:8d:3e:f6:6e:f1:6b:45:be:fe:
01:9e:9c:f9:96:fa:cc:d5:e5:c5:3b:74:bc:94:30:7d:51:0a:
82:02:8f:76:58:52:b7:bf:d2:ba:b6:2e:69:53:f5:03:38:f2:
e3:3c:55:9f:b9:8f:1e:44:c0:24:68:9a:e2:eb:08:ff:5f:10:
a2:6a:91:7c
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAYpXfQLQu2rwAkG9gdD7H07TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTAyMjAwMjA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjc5ZGVhOWVkMjljNDQ0NGE3NTdkNGM5MTI5M2Q1YThjYTNiMjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5O79HnzYFprqJseTv+SwrKhCLHH
Xtm9l/jY6g67YviC/PPSHMN2U2dgoALACJW97vtVIvpISBa+sDPoIJyRPirqQUz/
iRKLx6ka8WngKVRso1Zq5uBAcBPA5bdm+Ql9fdb/dn/Y+c6rBkQyrftm03VeaFOA
IypAeeZ60g/qNQ+VOPlpSTxBukWagaSSpZwLeKyKgLz5JQXswRETdTruI2Uuyddf
H00FpRC/D5iww3USohZNKU+naPV8BafulUXsmTgWw2I+9ISAsksnKelpYTcjMiOW
wdM/4uUdZW7jNMEkrY8SN1J6caOwnATEOIfvjNHJVJrDHbNP99QTlHeUoQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFGJ53qntKcRESnV9TJEpPVqMo7IoMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWW5uZXFlMHB4RVJLZFgxTWtTazlXb3lqc2lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAAF
aRADBAAFaRIDBAAFaRUDBAAFaSgDBAAFaTIDBAAFaTkDBAAFaT4DBAAFaVIDBAAF
aVQDBAAFaXMDBAAFaXoDBAAFaX8DBAAFaYMDBAAFaYYDBAAFaYgDBAEFaYoDBAAF
aZ0DBAAFaaIDBAAFacsDBAAFac0wDAMEAAVp7wMEAAVp8AMEAQVp9AMEAAW0sAME
AMEu0jANBgkqhkiG9w0BAQsFAAOCAQEA0sSYdFplDiFkJpaIQFkv0TmqASNqDE2M
gB5xyX0zbJV7SpN6dzuyJrUXtx3kwHQ7zBANBvZ/6fu8mNL4z/z8isaotSXliRpd
W8OdSOR/M9+zC93pmR4q9n8DnwBbyo+rsTPcXekT43gm1nxBaRr8F8RtCfe4c6yg
WWwOoXmm+u2QgmpVEFpU/+TUMkGvB4FuvYiDdz+C32JrFu/Naarq0iaXXIulefmU
82Izm6N66GopNErtG8UA+whuww7VjT72bvFrRb7+AZ6c+Zb6zNXlxTt0vJQwfVEK
ggKPdlhSt7/SurYuaVP1Azjy4zxVn7mPHkTAJGia4usI/18QomqRfA==
-----END CERTIFICATE-----
Generated at Sun Sep 3 21:05:31 2023 by rpki-client on console-fra.rpki-client.org