Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZoAzk8K-X5_5J_mQBikfk7ZTcH4.roa
File: ZoAzk8K-X5_5J_mQBikfk7ZTcH4.roa (raw, json)
Hash identifier: zGgMoyM9GeaKINHiSI0Q0bJ2x0h+dpYsxHYtakpYZc0=
Subject key identifier: 66:80:33:93:C2:BE:5F:9F:F9:27:F9:90:06:29:1F:93:B6:53:70:7E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A1D0411ED6B3D32DDDD98E250EE1168D7
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZoAzk8K-X5_5J_mQBikfk7ZTcH4.roa
Signing time: Tue 22 Aug 2023 11:32:00 +0000
ROA not before: Tue 22 Aug 2023 11:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 5.105.145.0/24 maxlen: 24
5.105.144.0/24 maxlen: 24
5.105.146.0/24 maxlen: 24
5.105.147.0/24 maxlen: 24
5.105.179.0/24 maxlen: 24
5.105.189.0/24 maxlen: 24
5.105.193.0/24 maxlen: 24
5.105.201.0/24 maxlen: 24
5.105.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:04:11:ed:6b:3d:32:dd:dd:98:e2:50:ee:11:68:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 22 11:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66803393c2be5f9ff927f99006291f93b653707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:5d:c9:fe:f6:be:b9:c7:99:03:06:72:ff:
5d:60:c6:21:c0:90:2a:0d:73:99:1c:f6:16:45:7e:
cd:ff:74:d8:d7:97:78:77:23:bc:29:08:3c:39:4e:
4a:df:a1:d7:56:9e:0c:3f:c8:f2:39:d7:c9:c7:f8:
65:bf:59:f3:35:a6:b0:e2:c5:0a:13:07:c9:7b:49:
fe:88:d8:64:74:db:3d:33:e6:83:80:10:a1:f5:d1:
52:0a:42:40:bd:22:67:10:d7:f3:dd:2b:b9:81:5a:
55:5d:01:70:c7:96:4c:f7:41:47:ce:2c:ac:2d:60:
1a:95:42:29:0a:6b:01:3a:d6:a3:ee:33:42:88:20:
2a:5b:e3:fd:59:a8:69:41:cb:d1:be:c4:f6:a0:22:
39:19:44:5e:b9:c2:c5:aa:69:90:92:b4:30:96:be:
64:8f:68:8b:a0:5e:0f:a1:ed:40:28:71:e9:fb:cf:
20:3f:15:21:40:c4:13:ab:11:98:de:7a:0e:c1:41:
bd:06:05:8b:a8:47:35:04:29:08:0a:ed:d6:a8:94:
a9:ac:93:fd:5e:e2:79:f6:19:bb:29:8d:9d:4c:3a:
18:83:2a:a8:f6:47:aa:3d:bf:f9:67:de:dd:75:fe:
f1:76:74:00:43:7c:c5:bf:81:d6:0a:42:97:e4:56:
37:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:80:33:93:C2:BE:5F:9F:F9:27:F9:90:06:29:1F:93:B6:53:70:7E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/ZoAzk8K-X5_5J_mQBikfk7ZTcH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.144.0/22
5.105.179.0/24
5.105.189.0/24
5.105.193.0/24
5.105.201.0/24
5.105.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:80:0d:2f:8b:d5:80:34:a8:68:9b:12:34:2f:47:d4:32:02:
ee:54:6f:f2:63:af:a9:85:cf:89:b2:47:a7:25:dd:95:7b:78:
ca:4c:f7:f0:db:6c:38:1f:a9:49:c2:0c:f5:f2:37:72:93:86:
2a:b9:f5:82:90:3d:c3:c7:4f:5c:6a:1b:7f:de:2e:6a:af:f7:
6d:d6:a9:84:78:65:23:15:98:a3:a7:0a:02:52:01:69:b8:f2:
d8:de:23:e1:e8:b8:15:f0:6e:71:3a:6c:69:9a:fd:be:e9:bf:
67:f7:19:f9:ce:b1:05:9a:27:d0:c7:53:5f:ca:cc:68:33:f8:
10:f3:67:4f:fc:a8:af:91:eb:8a:30:de:7f:02:8f:03:bf:de:
2e:f6:6b:a4:bf:8c:03:d2:d2:1e:5a:17:17:8f:f9:df:74:8e:
19:5f:03:60:83:42:25:03:17:20:7c:0f:e5:e3:bb:87:37:f5:
ee:8a:48:a0:22:4c:2d:51:72:3f:55:c4:01:e8:77:1d:37:c0:
53:54:ae:47:f6:22:21:16:91:e5:66:67:e4:36:34:1c:24:54:
b8:8c:cd:73:21:13:4f:38:1f:4c:34:f3:3d:c8:15:e0:ff:83:
87:ae:9a:8f:5c:60:60:fc:2b:e8:f5:ce:5a:4c:a1:4b:d6:27:
fe:3f:0d:bc
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYodBBHtaz0y3d2Y4lDuEWjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODIyMTEzMjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjgwMzM5M2MyYmU1ZjlmZjkyN2Y5OTAwNjI5MWY5M2I2NTM3MDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApltdyf72vrnHmQMGcv9dYMYhwJAq
DXOZHPYWRX7N/3TY15d4dyO8KQg8OU5K36HXVp4MP8jyOdfJx/hlv1nzNaaw4sUK
EwfJe0n+iNhkdNs9M+aDgBCh9dFSCkJAvSJnENfz3Su5gVpVXQFwx5ZM90FHziys
LWAalUIpCmsBOtaj7jNCiCAqW+P9WahpQcvRvsT2oCI5GUReucLFqmmQkrQwlr5k
j2iLoF4Poe1AKHHp+88gPxUhQMQTqxGY3noOwUG9BgWLqEc1BCkICu3WqJSprJP9
XuJ59hm7KY2dTDoYgyqo9keqPb/5Z97ddf7xdnQAQ3zFv4HWCkKX5FY37wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGaAM5PCvl+f+Sf5kAYpH5O2U3B+MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvWm9Bems4Sy1YNV81Sl9tUUJpa2ZrN1pUY0g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCBWmQAwQA
BWmzAwQABWm9AwQABWnBAwQABWnJAwQABWnQMA0GCSqGSIb3DQEBCwUAA4IBAQBf
gA0vi9WANKhomxI0L0fUMgLuVG/yY6+phc+JskenJd2Ve3jKTPfw22w4H6lJwgz1
8jdyk4YqufWCkD3Dx09caht/3i5qr/dt1qmEeGUjFZijpwoCUgFpuPLY3iPh6LgV
8G5xOmxpmv2+6b9n9xn5zrEFmifQx1NfysxoM/gQ82dP/KivkeuKMN5/Ao8Dv94u
9mukv4wD0tIeWhcXj/nfdI4ZXwNgg0IlAxcgfA/l47uHN/XuikigIkwtUXI/VcQB
6HcdN8BTVK5H9iIhFpHlZmfkNjQcJFS4jM1zIRNPOB9MNPM9yBXg/4OHrpqPXGBg
/Cvo9c5aTKFL1if+Pw28
-----END CERTIFICATE-----
Generated at Thu Oct 12 21:11:58 2023 by rpki-client on console-ams.rpki-client.org