Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/emKBwM4cxp2FYq9OW1Cyolwj3Nk.roa
File: emKBwM4cxp2FYq9OW1Cyolwj3Nk.roa (raw, json)
Hash identifier: BGf6p1EyUrmjywcXzE0aW0F3eviRLNEGQC0xiiPO2zg=
Subject key identifier: 7A:62:81:C0:CE:1C:C6:9D:85:62:AF:4E:5B:50:B2:A2:5C:23:DC:D9
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01899B9B33E4F4EE3E62E695DF9E149698DC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/emKBwM4cxp2FYq9OW1Cyolwj3Nk.roa
Signing time: Fri 28 Jul 2023 08:26:27 +0000
ROA not before: Fri 28 Jul 2023 08:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 5.105.152.0/24 maxlen: 24
5.105.155.0/24 maxlen: 24
5.105.154.0/24 maxlen: 24
5.105.153.0/24 maxlen: 24
5.105.61.0/24 maxlen: 24
5.105.67.0/24 maxlen: 24
5.105.73.0/24 maxlen: 24
5.105.83.0/24 maxlen: 24
5.105.11.0/24 maxlen: 24
5.105.9.0/24 maxlen: 24
5.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:9b:33:e4:f4:ee:3e:62:e6:95:df:9e:14:96:98:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jul 28 08:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a6281c0ce1cc69d8562af4e5b50b2a25c23dcd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:0c:b9:01:b4:b5:ac:6b:cd:9f:92:5e:09:
ec:24:bc:7f:6f:25:e0:cd:3e:ab:20:27:4f:15:d4:
df:59:40:e0:86:16:31:1f:f9:6f:6a:0a:43:e1:0e:
f8:45:2b:36:de:5c:9a:3a:e7:d4:d0:71:77:4b:a1:
a1:e4:29:d9:c5:1c:99:9e:c4:d1:02:07:72:ce:b6:
25:eb:43:7f:e9:b2:57:6b:44:87:73:0e:e5:bf:b1:
b3:7c:01:da:b4:81:71:52:7b:64:33:e4:f9:e0:73:
81:08:d6:2a:aa:1e:15:97:28:93:7e:03:26:a6:f1:
25:bd:eb:dc:8f:e3:3a:74:a7:81:e7:f1:7d:88:c9:
6a:d1:ea:6f:3e:ec:b3:4a:24:08:18:62:52:05:86:
3e:e9:03:12:18:06:4f:9e:1f:4a:b3:4e:03:e4:ab:
2e:50:5f:11:79:de:78:e4:d4:7e:43:d7:42:1e:14:
6d:25:d6:13:a6:3b:9e:71:f3:8a:2b:e2:c5:dc:46:
60:13:23:da:0c:c5:5e:f0:81:e5:6f:82:82:35:ca:
34:5f:de:a2:a6:6e:a4:59:41:62:1d:11:b0:b6:21:
1a:90:20:5e:49:45:27:ee:b5:2d:68:1a:80:b6:29:
bc:53:d5:9d:9a:4c:43:2c:83:c8:b5:e9:8a:4b:cb:
8c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:62:81:C0:CE:1C:C6:9D:85:62:AF:4E:5B:50:B2:A2:5C:23:DC:D9
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/emKBwM4cxp2FYq9OW1Cyolwj3Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.8.0/23
5.105.11.0/24
5.105.61.0/24
5.105.67.0/24
5.105.73.0/24
5.105.83.0/24
5.105.152.0/22
Signature Algorithm: sha256WithRSAEncryption
cc:ec:7f:07:67:11:f3:4c:a2:a4:b8:ca:84:f7:3b:08:40:c5:
da:e2:b0:de:d6:3e:8a:60:de:6a:3f:f3:a9:0d:8a:80:b7:90:
56:ce:9c:8a:bc:12:d8:94:e7:d2:70:08:b1:9f:f6:91:d6:dc:
9f:c0:2b:53:f3:3e:d5:d6:84:47:e8:2c:53:be:b2:66:04:59:
1a:d2:bf:09:68:c8:79:34:a9:2e:e6:0b:34:67:70:23:24:c6:
57:71:b3:8a:2d:e3:c2:56:54:a7:6c:17:65:fc:f3:30:99:08:
c8:f3:f1:7b:0a:1f:51:e6:cb:4b:45:68:ca:38:8d:56:80:1d:
14:30:44:7e:81:5d:e3:c8:0c:d7:fe:28:f9:52:30:06:f1:af:
58:c6:9b:f3:71:b7:47:07:67:9d:89:be:2d:c1:5a:d3:2f:bb:
14:be:76:4f:a1:12:8b:57:85:96:07:8b:10:2a:27:a6:66:46:
f2:f0:e7:55:3f:2a:e3:7b:3d:2f:23:5f:26:76:cf:98:23:38:
1c:7f:4e:fe:9a:3f:16:5a:df:f6:37:e4:a4:b7:2c:50:cb:56:
3f:bf:88:38:ca:95:60:0c:ec:c1:d1:89:f7:84:87:78:5b:7d:
e9:a8:48:1c:59:38:ed:9d:2d:19:31:78:79:e3:50:65:a4:24:
89:cd:aa:de
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYmbmzPk9O4+YuaV354UlpjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNzI4MDgyNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTYyODFjMGNlMWNjNjlkODU2MmFmNGU1YjUwYjJhMjVjMjNkY2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkgMuQG0taxrzZ+SXgnsJLx/byXg
zT6rICdPFdTfWUDghhYxH/lvagpD4Q74RSs23lyaOufU0HF3S6Gh5CnZxRyZnsTR
AgdyzrYl60N/6bJXa0SHcw7lv7GzfAHatIFxUntkM+T54HOBCNYqqh4VlyiTfgMm
pvElvevcj+M6dKeB5/F9iMlq0epvPuyzSiQIGGJSBYY+6QMSGAZPnh9Ks04D5Ksu
UF8Red545NR+Q9dCHhRtJdYTpjuecfOKK+LF3EZgEyPaDMVe8IHlb4KCNco0X96i
pm6kWUFiHRGwtiEakCBeSUUn7rUtaBqAtim8U9WdmkxDLIPItemKS8uMtQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFHpigcDOHMadhWKvTltQsqJcI9zZMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZW1LQndNNGN4cDJGWXE5T1cxQ3lvbHdqM05rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBBWkIAwQA
BWkLAwQABWk9AwQABWlDAwQABWlJAwQABWlTAwQCBWmYMA0GCSqGSIb3DQEBCwUA
A4IBAQDM7H8HZxHzTKKkuMqE9zsIQMXa4rDe1j6KYN5qP/OpDYqAt5BWzpyKvBLY
lOfScAixn/aR1tyfwCtT8z7V1oRH6CxTvrJmBFka0r8JaMh5NKku5gs0Z3AjJMZX
cbOKLePCVlSnbBdl/PMwmQjI8/F7Ch9R5stLRWjKOI1WgB0UMER+gV3jyAzX/ij5
UjAG8a9YxpvzcbdHB2edib4twVrTL7sUvnZPoRKLV4WWB4sQKiemZkby8OdVPyrj
ez0vI18mds+YIzgcf07+mj8WWt/2N+SktyxQy1Y/v4g4ypVgDOzB0Yn3hId4W33p
qEgcWTjtnS0ZMXh541BlpCSJzare
-----END CERTIFICATE-----
Generated at Thu Oct 12 21:10:36 2023 by rpki-client on console-fra.rpki-client.org