Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/iVpS6D4z_FK2PAoOLsLYV4WMNLE.roa
File: iVpS6D4z_FK2PAoOLsLYV4WMNLE.roa (raw, json)
Hash identifier: zgwD5U/AFOMbyI0PVsEajmUM2gttHZuCMw+N6kUVDc4=
Subject key identifier: 89:5A:52:E8:3E:33:FC:52:B6:3C:0A:0E:2E:C2:D8:57:85:8C:34:B1
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018634FC333D68FD07F9CC9D473DE073F46A
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/iVpS6D4z_FK2PAoOLsLYV4WMNLE.roa
Signing time: Thu 09 Feb 2023 07:03:08 +0000
ROA not before: Thu 09 Feb 2023 07:03:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.65.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:34:fc:33:3d:68:fd:07:f9:cc:9d:47:3d:e0:73:f4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Feb 9 07:03:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=895a52e83e33fc52b63c0a0e2ec2d857858c34b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:07:90:aa:c2:30:10:f0:5f:84:9a:6d:6c:22:
a9:7a:b7:ee:f8:eb:fb:41:c7:d7:a2:6e:11:15:bd:
c5:d2:9a:99:48:18:5d:b4:72:ce:0f:cd:a8:96:2b:
96:9c:96:d4:a1:5f:f0:48:32:07:42:9e:4e:db:e0:
30:23:23:61:5e:f7:e9:02:0e:00:8d:75:fb:35:0b:
4f:f8:7f:37:d1:f5:3f:10:00:b0:30:ec:0b:e7:0d:
e5:6e:03:53:34:19:04:6c:94:67:52:0b:ec:05:8a:
ae:b9:d3:b2:58:3d:e4:1d:a9:a2:0d:c2:1f:a9:f7:
bd:f7:b4:c3:88:a0:a0:02:c4:b4:36:c0:72:e2:31:
14:fb:de:31:00:6f:92:ff:bc:63:e1:1f:78:43:a5:
9e:25:b4:c6:a4:b2:c9:e3:02:1d:f6:1f:2b:0d:9d:
56:00:59:9f:ae:14:41:3d:af:85:1e:d0:16:93:c5:
8b:04:36:7a:3b:ab:8d:8a:19:96:1d:24:02:b9:90:
f4:d5:c3:58:ad:9e:6c:2b:7f:30:5d:22:ad:14:ef:
8b:09:bd:2e:05:6b:de:be:99:41:f4:69:d8:c7:76:
0f:36:1d:74:9d:55:45:cc:01:3d:29:11:5f:a1:6b:
17:44:10:26:19:1f:39:a6:0a:b4:f5:22:07:be:99:
b9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5A:52:E8:3E:33:FC:52:B6:3C:0A:0E:2E:C2:D8:57:85:8C:34:B1
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/iVpS6D4z_FK2PAoOLsLYV4WMNLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.57.0/24
5.105.65.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7e:04:fb:9f:69:f5:49:5e:10:bc:37:2b:58:a9:15:c8:61:
64:59:1b:68:56:f4:5a:e1:a0:8c:a8:16:59:d8:ff:9a:6b:5e:
4e:76:30:af:2c:4d:84:04:5a:5a:a4:d2:e7:d6:47:a3:ef:67:
ad:e1:fa:5f:e5:ad:cd:38:8e:31:02:ce:dd:d7:5d:4f:c5:ef:
24:be:3a:af:70:74:d2:61:c0:86:ae:74:ed:86:04:f3:97:22:
79:b8:a3:96:d0:0a:54:c7:73:30:de:80:31:21:f9:b5:f6:f6:
8f:56:01:de:07:fb:32:8b:ee:73:e5:b3:e0:e9:fb:a7:2b:17:
6a:2b:34:62:72:f2:aa:ad:d2:38:bd:63:df:92:0d:d9:71:7c:
90:c9:77:ad:bb:45:d6:21:b2:58:09:f8:9a:28:23:19:e9:11:
7c:3c:7c:ba:08:03:1c:79:36:96:bb:5e:93:b5:a0:8b:4c:bc:
a7:dc:67:4e:a0:d6:6d:e1:e5:9c:39:86:a0:a7:49:5c:81:15:
14:a4:5f:aa:9f:a1:21:a4:87:22:67:be:d5:9a:67:b2:9e:2a:
d7:9c:d5:2a:c4:2a:ed:2e:17:2d:b3:4a:51:1f:37:ad:23:37:
1d:dd:b6:a9:89:6b:93:f2:45:7e:e8:be:c0:65:40:5f:25:e5:
65:fc:ff:72
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYY0/DM9aP0H+cydRz3gc/RqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMjA5MDcwMzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTVhNTJlODNlMzNmYzUyYjYzYzBhMGUyZWMyZDg1Nzg1OGMzNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggeQqsIwEPBfhJptbCKperfu+Ov7
QcfXom4RFb3F0pqZSBhdtHLOD82oliuWnJbUoV/wSDIHQp5O2+AwIyNhXvfpAg4A
jXX7NQtP+H830fU/EACwMOwL5w3lbgNTNBkEbJRnUgvsBYquudOyWD3kHamiDcIf
qfe997TDiKCgAsS0NsBy4jEU+94xAG+S/7xj4R94Q6WeJbTGpLLJ4wId9h8rDZ1W
AFmfrhRBPa+FHtAWk8WLBDZ6O6uNihmWHSQCuZD01cNYrZ5sK38wXSKtFO+LCb0u
BWvevplB9GnYx3YPNh10nVVFzAE9KRFfoWsXRBAmGR85pgq09SIHvpm5LQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFIlaUug+M/xStjwKDi7C2FeFjDSxMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvaVZwUzZENHpfRksyUEFvT0xzTFlWNFdNTkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBBWkYAwQA
BWkhAwQABWkoAwQABWkrAwQABWk5AwQABWlBMA0GCSqGSIb3DQEBCwUAA4IBAQCR
fgT7n2n1SV4QvDcrWKkVyGFkWRtoVvRa4aCMqBZZ2P+aa15OdjCvLE2EBFpapNLn
1kej72et4fpf5a3NOI4xAs7d111Pxe8kvjqvcHTSYcCGrnTthgTzlyJ5uKOW0ApU
x3Mw3oAxIfm19vaPVgHeB/syi+5z5bPg6funKxdqKzRicvKqrdI4vWPfkg3ZcXyQ
yXetu0XWIbJYCfiaKCMZ6RF8PHy6CAMceTaWu16TtaCLTLyn3GdOoNZt4eWcOYag
p0lcgRUUpF+qn6EhpIciZ77VmmeynirXnNUqxCrtLhcts0pRHzetIzcd3bapiWuT
8kV+6L7AZUBfJeVl/P9y
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org