Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_X0VDr0mHrXW9mONTOpyb22BSX8.roa
File: _X0VDr0mHrXW9mONTOpyb22BSX8.roa (raw, json)
Hash identifier: eAV7CkJ1T6w6xNSTj669m4Q9AqhXrFT937+71XPCKTM=
Subject key identifier: FD:7D:15:0E:BD:26:1E:B5:D6:F6:63:8D:4C:EA:72:6F:6D:81:49:7F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187C1AAFE3E3C8DC5814F8D8B447213E287
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_X0VDr0mHrXW9mONTOpyb22BSX8.roa
Signing time: Thu 27 Apr 2023 07:43:41 +0000
ROA not before: Thu 27 Apr 2023 07:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 5.105.227.0/24 maxlen: 24
5.105.123.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.137.0/24 maxlen: 24
5.105.52.0/22 maxlen: 22
5.105.103.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
5.105.219.0/24 maxlen: 24
5.105.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c1:aa:fe:3e:3c:8d:c5:81:4f:8d:8b:44:72:13:e2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 27 07:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd7d150ebd261eb5d6f6638d4cea726f6d81497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:39:48:ae:78:c0:eb:ae:da:46:db:65:07:c5:
0d:66:10:b7:99:02:02:b7:e4:c9:f1:90:21:06:0f:
c0:77:65:b7:17:97:b5:03:31:81:e6:83:2d:3e:8e:
98:37:f6:e2:d3:3c:29:6b:76:41:de:f4:d6:7a:3f:
c3:4e:26:01:e4:e4:45:cd:6d:96:be:e6:fd:12:f9:
86:c6:0a:c5:bd:2d:e2:19:6e:82:26:3a:f3:90:0b:
c7:f5:69:71:d6:23:f0:40:18:bd:34:15:7b:1f:fc:
e1:08:07:c3:c3:9d:08:34:db:40:d1:3b:dc:ca:a3:
70:4e:75:d3:24:5f:d6:3d:dc:48:e1:ae:59:66:db:
45:0c:6a:52:78:ae:32:40:28:c2:bd:c3:7e:1a:f3:
e1:8e:41:ea:e8:5a:f9:99:3b:86:34:8b:43:78:b5:
11:8c:c0:e6:3d:38:c9:2c:dd:f5:71:15:da:4f:61:
d0:80:c5:b6:ae:5f:4a:97:fa:a9:5f:a9:66:81:9d:
4e:f5:32:c6:ed:9f:7a:95:35:84:27:74:75:d0:33:
9b:bc:3c:e4:62:fe:65:22:b2:2c:9e:b8:86:2e:0b:
c4:ef:d0:31:c3:d2:28:66:43:a8:80:99:3e:d4:a1:
c5:0d:5e:03:6b:34:70:b7:61:7c:7d:62:e4:34:c6:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:7D:15:0E:BD:26:1E:B5:D6:F6:63:8D:4C:EA:72:6F:6D:81:49:7F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_X0VDr0mHrXW9mONTOpyb22BSX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.18.0/24
5.105.52.0/22
5.105.100.0/24
5.105.103.0/24
5.105.106.0/24
5.105.123.0/24
5.105.137.0/24
5.105.219.0/24
5.105.227.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ca:28:26:2b:e9:77:35:dd:1d:db:4d:8d:1b:6c:45:62:94:
2f:47:78:f3:d7:fb:a2:d8:0c:19:c3:ca:66:e0:da:a7:ac:67:
2a:6a:f9:be:43:0b:83:d2:2a:b6:63:a3:6b:38:37:7e:76:9d:
fc:3d:80:15:12:a7:3e:a7:63:40:21:c3:96:f0:bb:4d:c1:77:
b5:e2:eb:66:cc:ed:29:e4:d1:25:94:65:3a:15:de:21:16:a4:
d5:39:b5:70:a9:30:5a:de:c7:78:eb:09:cf:11:fb:13:4f:17:
70:d0:09:93:dd:e3:ee:7e:49:6f:73:70:20:13:25:e3:f0:87:
03:22:3f:33:01:37:fa:f3:75:14:98:9b:5a:21:2d:a8:78:e7:
88:9c:74:31:00:61:1d:bd:dd:a2:3f:11:d2:15:85:04:61:54:
bb:89:7e:6d:bb:51:68:b1:d4:11:4a:01:e5:7a:ef:44:8a:2d:
22:74:1d:43:4e:51:00:87:2e:e9:09:a3:76:bc:7d:21:c1:ba:
3f:e7:f6:3e:a2:37:ff:d3:e2:1e:ac:df:28:ef:c7:9c:0e:62:
87:f1:cc:33:c2:9a:e2:2f:3b:7c:bd:86:b5:cb:4d:ba:a0:36:
47:2b:48:f4:06:f9:56:e3:22:15:54:3c:82:4b:f2:b9:a8:b6:
06:6d:86:9f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYfBqv4+PI3FgU+Ni0RyE+KHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDI3MDc0MzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDdkMTUwZWJkMjYxZWI1ZDZmNjYzOGQ0Y2VhNzI2ZjZkODE0OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jlIrnjA667aRttlB8UNZhC3mQIC
t+TJ8ZAhBg/Ad2W3F5e1AzGB5oMtPo6YN/bi0zwpa3ZB3vTWej/DTiYB5ORFzW2W
vub9EvmGxgrFvS3iGW6CJjrzkAvH9Wlx1iPwQBi9NBV7H/zhCAfDw50INNtA0Tvc
yqNwTnXTJF/WPdxI4a5ZZttFDGpSeK4yQCjCvcN+GvPhjkHq6Fr5mTuGNItDeLUR
jMDmPTjJLN31cRXaT2HQgMW2rl9Kl/qpX6lmgZ1O9TLG7Z96lTWEJ3R10DObvDzk
Yv5lIrIsnriGLgvE79Axw9IoZkOogJk+1KHFDV4DazRwt2F8fWLkNMbWvwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFP19FQ69Jh611vZjjUzqcm9tgUl/MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvX1gwVkRyMG1IclhXOW1PTlRPcHliMjJCU1g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQABWkSAwQC
BWk0AwQABWlkAwQABWlnAwQABWlqAwQABWl7AwQABWmJAwQABWnbAwQABWnjMA0G
CSqGSIb3DQEBCwUAA4IBAQBeyigmK+l3Nd0d202NG2xFYpQvR3jz1/ui2AwZw8pm
4NqnrGcqavm+QwuD0iq2Y6NrODd+dp38PYAVEqc+p2NAIcOW8LtNwXe14utmzO0p
5NEllGU6Fd4hFqTVObVwqTBa3sd46wnPEfsTTxdw0AmT3ePufklvc3AgEyXj8IcD
Ij8zATf683UUmJtaIS2oeOeInHQxAGEdvd2iPxHSFYUEYVS7iX5tu1FosdQRSgHl
eu9Eii0idB1DTlEAhy7pCaN2vH0hwbo/5/Y+ojf/0+IerN8o78ecDmKH8cwzwpri
Lzt8vYa1y026oDZHK0j0BvlW4yIVVDyCS/K5qLYGbYaf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org