Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cQWhuv6lU0CyGo4iQ_68NvRd7-E.roa
File: cQWhuv6lU0CyGo4iQ_68NvRd7-E.roa (raw, json)
Hash identifier: 1mzsd39BW92Drl0OEtHrk+USVMKQT+aEyY5C4c3wuLI=
Subject key identifier: 71:05:A1:BA:FE:A5:53:40:B2:1A:8E:22:43:FE:BC:36:F4:5D:EF:E1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188FD0EAC6057084F8C7F9C1B156D39B4E0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cQWhuv6lU0CyGo4iQ_68NvRd7-E.roa
Signing time: Tue 27 Jun 2023 13:32:57 +0000
ROA not before: Tue 27 Jun 2023 13:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 5.105.138.0/24 maxlen: 24
5.105.164.0/23 maxlen: 24
5.105.101.0/24 maxlen: 24
5.105.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:0e:ac:60:57:08:4f:8c:7f:9c:1b:15:6d:39:b4:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 27 13:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7105a1bafea55340b21a8e2243febc36f45defe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:c8:e1:3b:48:f9:d9:40:9e:c5:08:60:66:
92:48:f8:67:6e:22:dc:1f:2f:f3:77:5e:e4:a2:5c:
a4:39:48:60:8b:b0:fc:4a:8c:f1:70:29:68:50:e5:
11:ee:34:26:0e:f2:3a:6a:b9:bf:88:63:ca:76:c6:
66:55:b0:55:ec:31:5e:40:b6:dd:66:83:f0:67:56:
ee:67:1b:10:fc:33:e4:80:80:23:ef:41:11:bd:e2:
2b:be:5a:cf:9d:8d:52:ab:82:4a:43:f9:99:00:e0:
91:20:11:29:0f:88:99:60:86:b8:35:fe:0c:cb:dc:
65:dc:51:40:46:ab:b9:94:09:1b:40:d0:d5:42:54:
b0:43:f5:9a:96:66:aa:87:0d:e5:ad:87:4f:e6:d2:
1e:48:99:b2:0e:a6:d6:9f:fe:82:26:d2:0d:43:15:
42:39:dd:7f:3f:48:0e:77:c5:1d:40:d7:37:16:8f:
e0:44:4d:40:63:e2:fc:9f:b7:55:ec:27:f8:62:b2:
07:13:6e:4d:bc:1d:4d:ad:00:28:37:b8:c2:af:a1:
7c:74:52:0f:48:fb:90:b2:e4:ea:11:cc:1d:a6:9e:
a3:4c:7d:5c:bc:64:46:55:c7:44:a6:c8:7d:2d:ad:
a9:02:ff:a8:2c:d6:e5:37:ad:49:c4:bf:0b:b2:cc:
21:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:A1:BA:FE:A5:53:40:B2:1A:8E:22:43:FE:BC:36:F4:5D:EF:E1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/cQWhuv6lU0CyGo4iQ_68NvRd7-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.101.0/24
5.105.111.0/24
5.105.138.0/24
5.105.164.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:89:ec:00:96:28:41:84:d7:bb:a6:43:06:d7:33:d9:fb:4c:
51:0b:0d:01:82:a5:62:a2:da:20:51:e5:eb:2a:20:09:27:14:
88:49:f6:27:2b:e6:7c:c7:17:a3:ee:71:78:95:85:75:90:83:
9c:06:8b:fc:0b:e2:98:e7:3a:f3:2a:43:63:43:30:b5:84:51:
bb:6e:1d:a9:8c:6f:d8:2d:b5:54:d2:fe:2b:66:1f:2c:11:32:
a5:5a:9b:c5:a7:60:59:1d:8a:2a:ee:a5:a7:d4:55:aa:07:8d:
82:4a:44:80:76:f4:4f:e3:d5:ae:c1:cf:ce:cd:44:33:84:88:
48:97:ec:2e:a2:3e:e5:8d:e2:56:e2:3e:a9:c0:90:f1:40:90:
81:52:50:4a:eb:78:65:0a:f4:17:8f:c8:6e:43:e2:16:d8:7f:
9b:c5:bc:cc:ca:66:f5:3b:46:df:da:4b:df:67:c5:ad:cf:8e:
83:28:13:c6:a0:69:65:f7:14:72:06:43:27:e3:02:e8:6b:b3:
c0:3e:60:f7:ba:81:25:92:ea:ad:9d:a2:5f:01:ad:77:b6:44:
e8:ca:d7:cc:c1:08:df:ff:4d:ef:1a:a5:3f:a3:38:ad:05:85:
9a:5a:15:73:2d:ec:fa:20:da:98:e7:0c:04:7d:e2:5f:8d:e1:
4b:5c:f8:5e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYj9DqxgVwhPjH+cGxVtObTgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjI3MTMzMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTA1YTFiYWZlYTU1MzQwYjIxYThlMjI0M2ZlYmMzNmY0NWRlZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLfI4TtI+dlAnsUIYGaSSPhnbiLc
Hy/zd17kolykOUhgi7D8SozxcCloUOUR7jQmDvI6arm/iGPKdsZmVbBV7DFeQLbd
ZoPwZ1buZxsQ/DPkgIAj70ERveIrvlrPnY1Sq4JKQ/mZAOCRIBEpD4iZYIa4Nf4M
y9xl3FFARqu5lAkbQNDVQlSwQ/Walmaqhw3lrYdP5tIeSJmyDqbWn/6CJtINQxVC
Od1/P0gOd8UdQNc3Fo/gRE1AY+L8n7dV7Cf4YrIHE25NvB1NrQAoN7jCr6F8dFIP
SPuQsuTqEcwdpp6jTH1cvGRGVcdEpsh9La2pAv+oLNblN61JxL8LsswhwwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHEFobr+pVNAshqOIkP+vDb0Xe/hMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvY1FXaHV2NmxVMEN5R280aVFfNjhOdlJkNy1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABWllAwQA
BWlvAwQABWmKAwQBBWmkMA0GCSqGSIb3DQEBCwUAA4IBAQCziewAlihBhNe7pkMG
1zPZ+0xRCw0BgqViotogUeXrKiAJJxSISfYnK+Z8xxej7nF4lYV1kIOcBov8C+KY
5zrzKkNjQzC1hFG7bh2pjG/YLbVU0v4rZh8sETKlWpvFp2BZHYoq7qWn1FWqB42C
SkSAdvRP49Wuwc/OzUQzhIhIl+wuoj7ljeJW4j6pwJDxQJCBUlBK63hlCvQXj8hu
Q+IW2H+bxbzMymb1O0bf2kvfZ8Wtz46DKBPGoGll9xRyBkMn4wLoa7PAPmD3uoEl
kuqtnaJfAa13tkToytfMwQjf/03vGqU/ozitBYWaWhVzLez6INqY5wwEfeJfjeFL
XPhe
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org