Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dhbf9M19ku8V_jESlxVb8uZO8sY.roa
File: dhbf9M19ku8V_jESlxVb8uZO8sY.roa (raw, json)
Hash identifier: ae1jHcFuZ/aswNI3bkE35fnEjSoCE10ntLh+TiNHppE=
Subject key identifier: 76:16:DF:F4:CD:7D:92:EF:15:FE:31:12:97:15:5B:F2:E6:4E:F2:C6
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B382F2E6128B0AFDBBA0F9460392D111
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dhbf9M19ku8V_jESlxVb8uZO8sY.roa
Signing time: Tue 13 Jun 2023 06:48:03 +0000
ROA not before: Tue 13 Jun 2023 06:48:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.26.0/24 maxlen: 24
5.105.37.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b3:82:f2:e6:12:8b:0a:fd:bb:a0:f9:46:03:92:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 13 06:48:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7616dff4cd7d92ef15fe311297155bf2e64ef2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:f4:32:6b:cd:c9:40:9f:9f:8f:8e:f1:4c:
ed:fb:7f:cd:35:46:49:9b:0d:18:db:dc:16:e3:51:
76:9e:21:b5:75:8c:11:20:b4:76:be:e7:f9:b6:3a:
15:d5:80:f2:5b:c6:a3:b3:6d:08:62:71:f8:98:97:
20:2f:66:38:34:98:4d:ab:1c:8c:64:b0:76:0d:71:
97:74:97:cf:22:9a:da:f6:e5:26:3f:d7:31:b8:21:
57:50:53:6b:f7:fa:26:e8:96:be:af:bd:3e:fe:27:
26:f2:9b:05:fd:8f:8c:2d:25:72:31:ca:5a:97:af:
90:39:62:47:fa:2a:c1:37:76:cf:58:6f:47:0c:e8:
8d:0c:c3:63:31:87:d7:bc:e6:b5:02:ec:e9:be:87:
04:6f:c4:5a:5c:47:38:90:c0:5e:19:94:cf:52:2c:
37:bf:f7:1e:09:d6:ce:52:53:c8:d5:fe:10:87:18:
4d:4d:dd:30:c0:d0:99:fd:ab:f4:58:10:52:e9:82:
3d:a7:0c:8b:46:a9:bf:40:99:67:25:34:89:1c:55:
2b:34:7a:4c:6a:cd:62:3d:9c:5c:94:4c:b7:69:55:
4c:d7:e1:a7:2b:88:2d:39:3b:1f:a7:64:0a:33:36:
18:b0:07:21:00:f7:66:56:3f:60:af:8d:80:60:47:
b5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:16:DF:F4:CD:7D:92:EF:15:FE:31:12:97:15:5B:F2:E6:4E:F2:C6
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/dhbf9M19ku8V_jESlxVb8uZO8sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.2.0/24
5.105.26.0/24
5.105.32.0/24
5.105.37.0/24
Signature Algorithm: sha256WithRSAEncryption
be:f2:37:53:6d:0c:f0:f7:3d:3e:de:3a:22:d8:ab:09:5c:3c:
29:2c:22:3b:03:db:d2:e2:52:46:a2:34:b3:68:47:83:20:de:
c9:76:f4:b8:d4:78:88:0e:b0:bc:d3:e4:02:31:1a:56:81:37:
21:d6:69:18:01:8a:8b:50:cd:3c:15:7e:40:ac:08:36:a9:8b:
4b:b6:3f:17:98:75:0e:74:e6:ec:87:2a:8e:18:3c:a2:b7:e3:
9b:f5:5b:96:b1:8d:ff:ec:4f:0c:58:24:25:74:eb:0d:b9:0a:
29:3e:8f:bd:2f:27:a3:2b:f5:f8:a1:07:c4:90:b4:07:c0:70:
49:62:3f:a4:e0:bf:fc:0b:2c:a9:ca:32:e6:54:86:8a:ea:68:
3a:ce:6f:a7:0e:a4:60:6d:e1:4f:db:ab:35:8f:c1:f1:73:68:
c1:7a:d2:41:21:a5:88:7a:67:f8:71:f7:8e:de:6f:34:54:37:
b6:67:0b:65:5a:c5:7a:60:2e:eb:61:0a:3f:58:73:9c:ab:a6:
aa:9d:42:0b:5a:fc:f7:d3:28:57:b2:52:c5:de:da:fa:26:ae:
dc:a4:61:40:c0:70:cb:41:72:e8:9d:30:2e:27:d2:50:b4:bb:
71:77:20:6e:79:f0:40:a9:4a:67:f1:79:94:7d:06:12:af:f9:
95:c6:b0:9f
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYizgvLmEosK/bug+UYDktERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjEzMDY0ODAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjE2ZGZmNGNkN2Q5MmVmMTVmZTMxMTI5NzE1NWJmMmU2NGVmMmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAH0MmvNyUCfn4+O8Uzt+3/NNUZJ
mw0Y29wW41F2niG1dYwRILR2vuf5tjoV1YDyW8ajs20IYnH4mJcgL2Y4NJhNqxyM
ZLB2DXGXdJfPIpra9uUmP9cxuCFXUFNr9/om6Ja+r70+/icm8psF/Y+MLSVyMcpa
l6+QOWJH+irBN3bPWG9HDOiNDMNjMYfXvOa1AuzpvocEb8RaXEc4kMBeGZTPUiw3
v/ceCdbOUlPI1f4QhxhNTd0wwNCZ/av0WBBS6YI9pwyLRqm/QJlnJTSJHFUrNHpM
as1iPZxclEy3aVVM1+GnK4gtOTsfp2QKMzYYsAchAPdmVj9gr42AYEe1VQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFHYW3/TNfZLvFf4xEpcVW/LmTvLGMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZGhiZjlNMTlrdThWX2pFU2x4VmI4dVpPOHNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABWkCAwQA
BWkaAwQABWkgAwQABWklMA0GCSqGSIb3DQEBCwUAA4IBAQC+8jdTbQzw9z0+3joi
2KsJXDwpLCI7A9vS4lJGojSzaEeDIN7JdvS41HiIDrC80+QCMRpWgTch1mkYAYqL
UM08FX5ArAg2qYtLtj8XmHUOdObshyqOGDyit+Ob9VuWsY3/7E8MWCQldOsNuQop
Po+9LyejK/X4oQfEkLQHwHBJYj+k4L/8CyypyjLmVIaK6mg6zm+nDqRgbeFP26s1
j8Hxc2jBetJBIaWIemf4cfeO3m80VDe2ZwtlWsV6YC7rYQo/WHOcq6aqnUILWvz3
0yhXslLF3tr6Jq7cpGFAwHDLQXLonTAuJ9JQtLtxdyBuefBAqUpn8XmUfQYSr/mV
xrCf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:00 2023 by rpki-client on console-ams.rpki-client.org