Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/g6k2_q8bYNxuBDqx_azHa76Fe5Q.roa
File: g6k2_q8bYNxuBDqx_azHa76Fe5Q.roa (raw, json)
Hash identifier: 3b7GxbY1SHEMKnuXdkrjoKnIRXC1r1RMpiWVa3hXE9U=
Subject key identifier: 83:A9:36:FE:AF:1B:60:DC:6E:04:3A:B1:FD:AC:C7:6B:BE:85:7B:94
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188B03C54B7BD91CBFD2E578CF100DDD085
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/g6k2_q8bYNxuBDqx_azHa76Fe5Q.roa
Signing time: Mon 12 Jun 2023 15:32:03 +0000
ROA not before: Mon 12 Jun 2023 15:32:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.230.0/24 maxlen: 24
5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b0:3c:54:b7:bd:91:cb:fd:2e:57:8c:f1:00:dd:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 12 15:32:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83a936feaf1b60dc6e043ab1fdacc76bbe857b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:35:f0:b0:86:ff:46:6e:b3:70:55:4b:43:
74:f0:2f:07:a8:25:63:b1:9a:f5:64:a0:2c:69:76:
97:17:f2:a4:73:19:ff:c2:d9:53:73:5a:20:9d:2e:
cb:81:ad:6d:d4:42:ea:b5:45:eb:50:f1:cf:11:4c:
d4:02:33:4b:dd:77:e3:11:f2:d2:41:1f:93:f2:73:
78:90:d7:6c:84:ef:b3:50:c3:71:c7:4f:0f:cb:1b:
31:24:8a:4f:82:50:37:91:34:32:3e:3c:18:f7:d0:
a5:fb:35:1e:c8:ae:4e:8a:65:78:0f:07:14:5b:59:
d3:3b:39:aa:20:74:d5:b4:f5:68:6f:78:75:d1:19:
a1:8c:cb:60:93:1b:f6:21:0a:86:2c:e1:f6:37:8d:
bd:68:e3:9e:f8:f3:e8:23:ce:23:16:71:47:eb:f9:
07:de:03:df:91:2b:18:0b:ef:b7:76:64:8d:8e:2d:
e0:cf:86:9a:2a:54:83:84:49:13:3f:9f:84:14:92:
54:ab:cf:88:8e:e0:59:73:60:39:62:28:93:34:9b:
7b:3a:99:08:e9:70:e4:0a:bb:3d:29:7b:b0:2c:85:
8d:3c:5b:34:2d:44:f6:b4:53:ca:1a:05:ae:bb:91:
86:00:87:b3:6a:60:15:e3:89:69:00:87:41:d5:91:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A9:36:FE:AF:1B:60:DC:6E:04:3A:B1:FD:AC:C7:6B:BE:85:7B:94
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/g6k2_q8bYNxuBDqx_azHa76Fe5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
5.105.184.0/24
5.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:cb:ce:fb:df:d2:73:87:c6:97:16:24:68:ec:ae:6b:74:7f:
84:04:ac:8b:5e:de:0b:47:af:bb:a4:da:0b:81:3c:41:c8:e5:
a5:37:f7:c6:a3:d5:fd:22:43:4f:e7:70:9e:5e:2b:9c:0d:95:
3a:e0:aa:5f:90:03:59:a1:b9:c0:cc:e3:38:6b:2b:5a:98:e0:
47:8c:42:1c:07:d8:e0:7c:2c:b7:88:d9:19:fc:0b:c8:8e:91:
bb:e0:e3:7d:78:3e:38:35:b5:f5:7e:fc:43:52:ee:1b:c2:c3:
f0:45:82:08:0d:44:65:51:f3:4d:0d:d7:d9:9c:0a:f3:2c:1f:
22:28:22:a9:90:6b:fd:cd:e0:eb:30:ef:29:f0:77:e8:c3:0e:
cb:b3:8f:2d:ca:25:be:ec:54:9d:4c:04:a7:59:ee:44:46:f4:
0b:57:36:9a:a2:10:9f:9b:dc:8a:7c:5c:63:90:28:80:0d:c6:
f5:96:8e:43:da:c3:25:62:71:0a:63:54:79:ba:7b:27:ce:07:
ae:4a:bf:56:3f:e7:98:2c:a3:5b:45:23:b2:a5:9c:08:66:85:
ee:81:b7:c0:b4:4d:35:85:2a:80:5b:2b:ff:f6:a5:8a:c8:ea:
2c:49:d2:39:56:75:c6:ee:ac:3e:60:2e:af:3a:48:49:34:d0:
59:36:98:bc
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYiwPFS3vZHL/S5XjPEA3dCFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjEyMTUzMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2E5MzZmZWFmMWI2MGRjNmUwNDNhYjFmZGFjYzc2YmJlODU3Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikk18LCG/0Zus3BVS0N08C8HqCVj
sZr1ZKAsaXaXF/Kkcxn/wtlTc1ognS7Lga1t1ELqtUXrUPHPEUzUAjNL3XfjEfLS
QR+T8nN4kNdshO+zUMNxx08PyxsxJIpPglA3kTQyPjwY99Cl+zUeyK5OimV4DwcU
W1nTOzmqIHTVtPVob3h10RmhjMtgkxv2IQqGLOH2N429aOOe+PPoI84jFnFH6/kH
3gPfkSsYC++3dmSNji3gz4aaKlSDhEkTP5+EFJJUq8+IjuBZc2A5YiiTNJt7OpkI
6XDkCrs9KXuwLIWNPFs0LUT2tFPKGgWuu5GGAIezamAV44lpAIdB1ZHJ6wIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFIOpNv6vG2DcbgQ6sf2sx2u+hXuUMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvZzZrMl9xOGJZTnh1QkRxeF9hekhhNzZGZTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBBWkYAwQA
BWkhAwQABWkoAwQABWkrAwQABWkyAwQABWk5AwQABWlRAwQABWlgAwQABWmoAwQA
BWm4AwQABWnmMA0GCSqGSIb3DQEBCwUAA4IBAQCby87739Jzh8aXFiRo7K5rdH+E
BKyLXt4LR6+7pNoLgTxByOWlN/fGo9X9IkNP53CeXiucDZU64KpfkANZobnAzOM4
aytamOBHjEIcB9jgfCy3iNkZ/AvIjpG74ON9eD44NbX1fvxDUu4bwsPwRYIIDURl
UfNNDdfZnArzLB8iKCKpkGv9zeDrMO8p8Hfoww7Ls48tyiW+7FSdTASnWe5ERvQL
VzaaohCfm9yKfFxjkCiADcb1lo5D2sMlYnEKY1R5unsnzgeuSr9WP+eYLKNbRSOy
pZwIZoXugbfAtE01hSqAWyv/9qWKyOosSdI5VnXG7qw+YC6vOkhJNNBZNpi8
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org