Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c1O-kkupv2A91ekE7vH_oE8n9NE.roa
File: c1O-kkupv2A91ekE7vH_oE8n9NE.roa (raw, json)
Hash identifier: RXogsJLHbnqfwVvado5X7A/vKfbw9iUG/TKdy7XHqIc=
Subject key identifier: 73:53:BE:92:4B:A9:BF:60:3D:D5:E9:04:EE:F1:FF:A0:4F:27:F4:D1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5AEE2C75EF7C87502620068153ECF
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c1O-kkupv2A91ekE7vH_oE8n9NE.roa
Signing time: Sun 01 Jan 2023 05:54:52 +0000
ROA not before: Sun 01 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49519
IP address blocks: 5.105.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 09:42:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:ae:e2:c7:5e:f7:c8:75:02:62:00:68:15:3e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7353be924ba9bf603dd5e904eef1ffa04f27f4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:34:6b:fe:45:9f:ca:43:a4:83:fd:43:cb:4d:
9c:4f:15:06:72:d6:ec:49:52:61:77:94:46:25:61:
73:eb:9c:60:1e:e6:02:1b:a0:02:d3:ef:c1:b4:68:
84:b2:13:8f:42:d1:6b:55:1c:87:f3:5f:3a:e9:33:
cd:43:b3:df:fe:68:72:ff:59:47:69:94:e5:3e:f1:
ca:32:d9:67:d9:08:73:4d:78:ab:3a:b8:1b:3c:07:
05:8e:51:c2:34:41:99:ed:bc:d3:bd:a3:2b:fd:29:
f4:f8:50:d3:5a:4a:91:28:6c:29:82:ea:42:65:77:
e4:fc:0b:1b:ca:f3:7d:e0:11:b1:15:db:43:57:25:
85:a7:6d:e2:9c:e5:3f:0b:a0:e2:7d:6a:4f:0b:e6:
83:40:ac:73:30:54:81:fa:0f:b6:20:a7:64:13:c1:
95:a4:c0:95:61:2b:d4:94:48:90:ed:95:41:79:95:
d6:60:61:f3:b3:8c:93:17:9c:47:41:aa:81:17:81:
b5:e8:02:4e:61:e3:66:9f:9a:49:53:96:9b:e3:78:
d4:a5:52:c7:3e:0e:f6:f1:f2:ad:20:75:0b:7f:e7:
37:08:2a:53:28:d7:eb:3d:95:3b:a6:7e:64:a1:d1:
33:73:a3:8c:e3:6a:f1:0a:e1:4e:7a:92:0b:60:32:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:BE:92:4B:A9:BF:60:3D:D5:E9:04:EE:F1:FF:A0:4F:27:F4:D1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c1O-kkupv2A91ekE7vH_oE8n9NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.6.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:c5:23:90:75:b8:17:58:8e:0c:a4:30:e4:1d:ce:64:aa:d8:
9d:b5:e3:e1:70:ac:cb:6b:ad:c0:4a:55:b6:4d:aa:ab:0e:89:
1a:52:35:14:d4:bc:dd:98:df:c5:30:c3:2e:6c:0a:fd:6a:95:
68:0a:d7:c7:49:c7:13:ad:e9:8b:16:40:d1:5a:0c:7e:3e:f8:
06:5b:14:19:31:5c:93:06:d9:d0:15:68:ae:ea:81:31:30:54:
f6:ce:3c:f1:ed:94:5c:cc:79:ab:2b:97:7c:cb:ed:a6:d1:d0:
70:bb:de:c6:67:a6:05:12:0f:36:6c:b9:7a:b5:3c:fb:f9:b0:
6a:6f:78:4c:40:7e:24:96:48:9a:0b:27:60:6a:f5:6c:fa:d8:
d8:22:d2:86:ed:f0:31:9a:f7:f3:de:58:fa:39:98:b1:f4:ea:
cf:83:9c:53:16:83:82:42:f2:50:ef:a6:f5:61:ef:fd:88:cc:
f7:89:7a:41:37:f3:e4:cc:1c:50:9d:31:fc:31:04:dd:8e:f5:
f4:c5:89:ce:0e:dc:32:c1:28:cb:f2:09:df:1f:95:1c:40:08:
0f:87:27:88:0b:cc:01:5d:fa:b7:66:92:d9:af:8b:69:32:e8:
2a:e1:95:8d:40:63:e0:74:1b:b3:93:85:48:b4:fc:f4:7d:ac:
bc:f9:b5:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr5a7ix173yHUCYgBoFT7PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTAxMDU1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzUzYmU5MjRiYTliZjYwM2RkNWU5MDRlZWYxZmZhMDRmMjdmNGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzRr/kWfykOkg/1Dy02cTxUGctbs
SVJhd5RGJWFz65xgHuYCG6AC0+/BtGiEshOPQtFrVRyH81866TPNQ7Pf/mhy/1lH
aZTlPvHKMtln2QhzTXirOrgbPAcFjlHCNEGZ7bzTvaMr/Sn0+FDTWkqRKGwpgupC
ZXfk/AsbyvN94BGxFdtDVyWFp23inOU/C6DifWpPC+aDQKxzMFSB+g+2IKdkE8GV
pMCVYSvUlEiQ7ZVBeZXWYGHzs4yTF5xHQaqBF4G16AJOYeNmn5pJU5ab43jUpVLH
Pg728fKtIHULf+c3CCpTKNfrPZU7pn5kodEzc6OM42rxCuFOepILYDLEqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHNTvpJLqb9gPdXpBO7x/6BPJ/TRMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvYzFPLWtrdXB2MkE5MWVrRTd2SF9vRThuOU5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkGMA0G
CSqGSIb3DQEBCwUAA4IBAQBLxSOQdbgXWI4MpDDkHc5kqtidtePhcKzLa63ASlW2
TaqrDokaUjUU1LzdmN/FMMMubAr9apVoCtfHSccTremLFkDRWgx+PvgGWxQZMVyT
BtnQFWiu6oExMFT2zjzx7ZRczHmrK5d8y+2m0dBwu97GZ6YFEg82bLl6tTz7+bBq
b3hMQH4klkiaCydgavVs+tjYItKG7fAxmvfz3lj6OZix9OrPg5xTFoOCQvJQ76b1
Ye/9iMz3iXpBN/PkzBxQnTH8MQTdjvX0xYnODtwywSjL8gnfH5UcQAgPhyeIC8wB
Xfq3ZpLZr4tpMugq4ZWNQGPgdBuzk4VItPz0fay8+bWt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:28 2024 by rpki-client on console-fra.rpki-client.org