Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YxIBAb_Y2pSMqajsVkPBIE9VuhQ.roa
File: YxIBAb_Y2pSMqajsVkPBIE9VuhQ.roa (raw, json)
Hash identifier: XgaG4wVpcT/4uqNSC5I91PeGU1itSMZs1oh95nd0rOw=
Subject key identifier: 63:12:01:01:BF:D8:DA:94:8C:A9:A8:EC:56:43:C1:20:4F:55:BA:14
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A696EDECE7FB0784D7ED8CD2590C134F9
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YxIBAb_Y2pSMqajsVkPBIE9VuhQ.roa
Signing time: Wed 06 Sep 2023 07:39:48 +0000
ROA not before: Wed 06 Sep 2023 07:39:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 23:49:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:6e:de:ce:7f:b0:78:4d:7e:d8:cd:25:90:c1:34:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 6 07:39:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63120101bfd8da948ca9a8ec5643c1204f55ba14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:8f:75:4a:c7:7a:09:00:13:70:2b:ad:76:
fe:5f:68:ff:c2:f1:ac:d3:66:13:be:65:76:2a:c2:
9d:f8:c2:45:d0:d7:68:66:a5:4a:e3:9e:3b:e1:df:
2d:12:d1:a2:b9:d9:51:c9:d2:1a:a9:53:0d:9d:5a:
dc:b6:b6:f1:3c:dd:53:2d:86:6c:bc:d7:27:22:e0:
29:f2:eb:2b:85:de:73:86:b0:b2:ab:c5:e8:85:aa:
99:b9:b7:23:e8:02:45:b2:bf:cd:38:5d:4b:8b:27:
95:29:42:88:45:e5:db:4b:36:4c:fa:29:40:53:44:
ac:32:ea:08:c6:ab:95:a7:ba:60:51:0f:55:ab:6d:
a2:e8:1f:91:f7:b2:43:d7:ea:4b:05:97:67:6e:b3:
f8:da:8f:25:6a:4f:29:2a:07:fa:00:ee:75:20:56:
63:7a:a9:49:38:32:4e:e3:ae:7c:29:ab:31:89:02:
25:3c:0b:25:60:e0:a9:a2:b1:d1:9c:bb:9a:d3:86:
b0:85:2f:5f:6a:89:b8:5d:f3:58:aa:5c:0f:1a:7d:
0d:81:9f:e9:47:63:fe:67:c7:49:ae:1e:d4:0a:6c:
3e:50:3f:47:01:35:ff:53:bb:46:54:5c:e7:6f:81:
65:12:e6:ac:4b:6e:f1:3c:81:14:17:a3:99:01:64:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:12:01:01:BF:D8:DA:94:8C:A9:A8:EC:56:43:C1:20:4F:55:BA:14
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/YxIBAb_Y2pSMqajsVkPBIE9VuhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.84.0/24
5.105.115.0/24
5.105.122.0/24
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.187.0/24
5.105.197.0/24
5.105.203.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a0:14:8b:ee:a2:0b:c7:eb:47:3e:ff:d9:9b:49:9b:2c:bd:
98:c0:f2:a4:24:e0:37:d6:1a:34:38:43:62:4b:f4:0f:ee:fc:
aa:5f:f8:19:51:89:ad:5f:28:ff:48:1e:9f:61:62:3b:d0:5d:
ec:42:ad:95:45:b8:55:6c:9a:ff:71:a6:9b:35:52:3c:56:90:
4c:6a:54:09:84:69:fa:f3:bc:38:86:02:41:38:ba:7a:10:1b:
d6:eb:df:2c:d2:6f:ca:9d:93:1f:9b:36:38:14:5c:56:9e:6f:
70:4c:5e:fb:b7:e8:ae:ab:62:78:0d:66:58:94:0e:2c:38:e9:
ac:d2:9b:b9:6f:30:37:42:ab:67:1a:95:c8:3b:1e:b2:16:3c:
36:47:7f:63:6b:01:0c:37:e3:31:78:b0:48:26:d8:4f:ac:7f:
08:2b:63:d4:ae:7a:59:8b:32:30:31:1e:e6:7d:6e:86:b7:5c:
4d:63:ab:bd:8b:22:6c:78:be:7c:2e:c0:cd:76:68:5f:3d:74:
48:a0:c5:03:ac:ac:be:52:65:39:48:3c:01:d7:b2:74:73:e3:
59:e0:e5:d5:a1:f2:25:5a:4d:b0:0b:56:62:93:74:e3:fc:d1:
95:0f:be:17:95:fa:4e:16:e7:06:32:ec:56:95:f1:ae:99:1a:
55:d7:a7:b9
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAYppbt7Of7B4TX7YzSWQwTT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTA2MDczOTQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzEyMDEwMWJmZDhkYTk0OGNhOWE4ZWM1NjQzYzEyMDRmNTViYTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEKPdUrHegkAE3ArrXb+X2j/wvGs
02YTvmV2KsKd+MJF0NdoZqVK45474d8tEtGiudlRydIaqVMNnVrctrbxPN1TLYZs
vNcnIuAp8usrhd5zhrCyq8XohaqZubcj6AJFsr/NOF1LiyeVKUKIReXbSzZM+ilA
U0SsMuoIxquVp7pgUQ9Vq22i6B+R97JD1+pLBZdnbrP42o8lak8pKgf6AO51IFZj
eqlJODJO4658KasxiQIlPAslYOCporHRnLua04awhS9faom4XfNYqlwPGn0NgZ/p
R2P+Z8dJrh7UCmw+UD9HATX/U7tGVFznb4FlEuasS27xPIEUF6OZAWTbdwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFGMSAQG/2NqUjKmo7FZDwSBPVboUMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWXhJQkFiX1kycFNNcWFqc1ZrUEJJRTlWdWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG7BggrBgEFBQcBBwEB/wSBqzCBqDCBpQQCAAEwgZ4DBAAF
aRADBAAFaRIDBAAFaRUDBAAFaSgDBAAFaTIDBAAFaTkDBAAFaT4DBAAFaVQDBAAF
aXMDBAAFaXoDBAAFaX8DBAAFaYMDBAAFaYYDBAAFaYgDBAEFaYoDBAAFaZ0DBAAF
aaIDBAAFaaQDBAAFabsDBAAFacUDBAAFacswDAMEAAVp7wMEAAVp8AMEAQVp9AME
AAW0sAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEAaKAUi+6iC8frRz7/2ZtJmyy9
mMDypCTgN9YaNDhDYkv0D+78ql/4GVGJrV8o/0gen2FiO9Bd7EKtlUW4VWya/3Gm
mzVSPFaQTGpUCYRp+vO8OIYCQTi6ehAb1uvfLNJvyp2TH5s2OBRcVp5vcExe+7fo
rqtieA1mWJQOLDjprNKbuW8wN0KrZxqVyDseshY8Nkd/Y2sBDDfjMXiwSCbYT6x/
CCtj1K56WYsyMDEe5n1uhrdcTWOrvYsibHi+fC7AzXZoXz10SKDFA6ysvlJlOUg8
AdeydHPjWeDl1aHyJVpNsAtWYpN04/zRlQ++F5X6ThbnBjLsVpXxrpkaVdenuQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:57 2024 by rpki-client on console-ams.rpki-client.org