Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c5kYgjv0eNfvCMJ7yQnEP2U-rF8.roa
File: c5kYgjv0eNfvCMJ7yQnEP2U-rF8.roa (raw, json)
Hash identifier: RC7+FGwl5r9uDgqcL992W1ebVNdH7dGC/JK4jVOYa1Y=
Subject key identifier: 73:99:18:82:3B:F4:78:D7:EF:08:C2:7B:C9:09:C4:3F:65:3E:AC:5F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187EAF847A16E3212E463A5614A66134672
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c5kYgjv0eNfvCMJ7yQnEP2U-rF8.roa
Signing time: Fri 05 May 2023 08:12:32 +0000
ROA not before: Fri 05 May 2023 08:12:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 5.105.134.0/24 maxlen: 24
5.105.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:f8:47:a1:6e:32:12:e4:63:a5:61:4a:66:13:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 5 08:12:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739918823bf478d7ef08c27bc909c43f653eac5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e5:41:66:1a:f4:6e:16:10:f0:a4:e1:7e:fb:
7e:a4:70:d4:b7:3f:f8:a0:1f:2d:a6:51:6b:bd:f1:
f0:8c:ee:f2:f2:78:f7:47:d1:8b:60:59:30:25:3e:
05:8c:7b:ab:e5:7f:a0:98:b9:76:b3:67:86:3e:1c:
3b:70:2b:dd:09:91:a5:b8:d4:63:8b:af:06:8f:69:
e0:a6:cc:22:30:a4:fd:f1:62:b2:03:d6:77:46:28:
52:41:aa:38:94:81:72:b7:45:00:a7:d8:5d:24:e9:
b5:49:4f:f9:67:c5:2e:f9:f6:8a:e9:b4:d0:bc:41:
70:f5:49:71:dd:2f:bd:cf:e8:64:97:20:11:2e:1a:
30:df:7e:11:06:6a:63:87:36:51:28:cc:9f:06:70:
6b:ee:1d:4d:14:2e:3e:e8:a2:c6:92:97:5d:6c:1a:
d8:65:28:9b:70:c8:69:d2:f3:61:79:2c:43:c5:c2:
a8:3d:88:4b:b0:30:08:37:8a:32:09:82:84:51:2e:
3f:5a:fb:65:94:cc:70:59:da:e6:87:71:68:43:16:
dc:01:4d:e6:62:0a:ee:a2:c7:e4:f1:63:b5:bd:47:
62:87:a7:46:23:cf:dd:32:f3:64:1e:75:92:51:05:
8d:6d:72:1e:79:b7:40:e3:52:e2:42:23:8b:8a:c0:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:18:82:3B:F4:78:D7:EF:08:C2:7B:C9:09:C4:3F:65:3E:AC:5F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/c5kYgjv0eNfvCMJ7yQnEP2U-rF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.68.0/24
5.105.134.0/24
Signature Algorithm: sha256WithRSAEncryption
07:62:62:57:37:e4:15:34:28:35:7d:21:4c:3a:b5:ba:d7:e3:
9d:66:86:c8:b2:a9:0b:49:f9:a5:f4:1d:61:e6:60:a0:05:b0:
d0:3f:51:b1:c7:18:26:59:4a:ab:7a:ec:99:e7:31:69:e2:e8:
77:0b:06:ca:f8:70:f0:33:2d:ba:d6:9d:d2:bd:c0:8f:a6:9a:
37:7e:03:b6:25:8f:f3:5c:ab:7d:aa:63:2a:21:2c:89:fc:b3:
92:b6:fb:bf:40:4f:c8:c8:bf:cd:84:ae:8d:b3:38:b0:92:d3:
72:db:7b:b1:8c:70:86:17:46:09:6f:19:72:a8:84:f3:e3:2d:
0d:97:02:05:96:a6:88:b8:56:60:e8:0d:f2:22:38:32:96:ff:
64:e1:79:00:45:0a:94:a3:89:ad:4f:ff:c5:eb:d6:fb:bb:49:
66:f6:28:2d:c7:e7:3a:33:f9:54:b2:1a:96:f3:ea:2e:e1:e5:
81:d9:52:dc:1a:33:36:ca:14:3a:4b:97:0a:6a:85:5b:70:b2:
74:d7:3c:05:45:e2:fc:fd:c7:6d:94:32:30:60:35:27:c2:9b:
88:fc:e8:3d:35:12:7a:8b:c9:33:68:0d:ee:49:58:c3:2f:c0:
32:5d:5c:f4:0c:75:ec:e7:83:6a:cf:1a:52:73:86:2e:78:2b:
a2:9b:7f:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYfq+EehbjIS5GOlYUpmE0ZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNTA1MDgxMjMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mzk5MTg4MjNiZjQ3OGQ3ZWYwOGMyN2JjOTA5YzQzZjY1M2VhYzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOVBZhr0bhYQ8KThfvt+pHDUtz/4
oB8tplFrvfHwjO7y8nj3R9GLYFkwJT4FjHur5X+gmLl2s2eGPhw7cCvdCZGluNRj
i68Gj2ngpswiMKT98WKyA9Z3RihSQao4lIFyt0UAp9hdJOm1SU/5Z8Uu+faK6bTQ
vEFw9Ulx3S+9z+hklyARLhow334RBmpjhzZRKMyfBnBr7h1NFC4+6KLGkpddbBrY
ZSibcMhp0vNheSxDxcKoPYhLsDAIN4oyCYKEUS4/WvtllMxwWdrmh3FoQxbcAU3m
Ygruosfk8WO1vUdih6dGI8/dMvNkHnWSUQWNbXIeebdA41LiQiOLisBnHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHOZGII79HjX7wjCe8kJxD9lPqxfMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvYzVrWWdqdjBlTmZ2Q01KN3lRbkVQMlUtckY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWlEAwQA
BWmGMA0GCSqGSIb3DQEBCwUAA4IBAQAHYmJXN+QVNCg1fSFMOrW61+OdZobIsqkL
Sfml9B1h5mCgBbDQP1GxxxgmWUqreuyZ5zFp4uh3CwbK+HDwMy261p3SvcCPppo3
fgO2JY/zXKt9qmMqISyJ/LOStvu/QE/IyL/NhK6NsziwktNy23uxjHCGF0YJbxly
qITz4y0NlwIFlqaIuFZg6A3yIjgylv9k4XkARQqUo4mtT//F69b7u0lm9igtx+c6
M/lUshqW8+ou4eWB2VLcGjM2yhQ6S5cKaoVbcLJ01zwFReL8/cdtlDIwYDUnwpuI
/Og9NRJ6i8kzaA3uSVjDL8AyXVz0DHXs54NqzxpSc4YueCuim3/2
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org