Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kxG83gBUko0RC6YHyl8kqmrq6a8.roa
File: kxG83gBUko0RC6YHyl8kqmrq6a8.roa (raw, json)
Hash identifier: 2JMmDj5ShS1MC6ygvi6NqYxaZ21HXbNq/8jieLGAaK4=
Subject key identifier: 93:11:BC:DE:00:54:92:8D:11:0B:A6:07:CA:5F:24:AA:6A:EA:E9:AF
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188ED76F8AEBE0D743470B019E1D4C706D6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kxG83gBUko0RC6YHyl8kqmrq6a8.roa
Signing time: Sat 24 Jun 2023 12:52:57 +0000
ROA not before: Sat 24 Jun 2023 12:52:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 5.105.151.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
5.105.232.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.175.0/24 maxlen: 24
5.105.177.0/24 maxlen: 24
5.105.178.0/24 maxlen: 24
5.105.174.0/24 maxlen: 24
5.105.182.0/24 maxlen: 24
5.105.183.0/24 maxlen: 24
5.105.180.0/24 maxlen: 24
5.105.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:76:f8:ae:be:0d:74:34:70:b0:19:e1:d4:c7:06:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 24 12:52:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9311bcde0054928d110ba607ca5f24aa6aeae9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:c7:43:0f:78:7f:77:cf:52:b2:8d:f1:b7:
85:0e:7c:9d:c6:7b:7e:c5:32:dc:46:fc:47:16:35:
00:db:a8:fa:42:e7:53:b3:d3:03:8e:a3:f2:52:a3:
5f:28:b4:f8:ea:5e:77:9c:90:1d:2b:31:81:a5:b9:
2a:55:3c:b8:c9:e9:39:94:35:80:7d:35:75:b4:bb:
cc:f7:25:5c:fd:49:58:7f:46:82:f9:49:aa:a1:5e:
db:23:1c:36:bf:31:85:5f:f8:5d:91:7a:f6:c7:4a:
66:ab:84:24:65:d6:35:dd:8f:8d:92:7e:a0:bd:7e:
57:41:d1:ab:19:1f:5a:0e:24:9e:c0:38:d3:34:b7:
cb:95:f2:55:f3:3f:b5:84:98:6f:17:89:60:0b:22:
a3:00:bd:b7:a4:e2:1f:68:f5:41:39:92:76:c9:1c:
e4:34:04:83:bd:32:45:c3:6f:c6:11:b2:87:e1:70:
20:a8:f4:20:5e:80:bd:df:23:cb:9c:48:e3:e6:28:
a8:59:e5:21:78:66:71:6e:91:bf:a9:ca:12:9f:e1:
58:34:7d:4e:93:49:34:a6:1c:32:6c:51:e4:5a:96:
6d:43:ad:9d:53:23:97:7e:fd:d8:36:4f:35:96:54:
7b:ca:2d:3d:7c:8e:83:13:48:35:e9:18:ad:c6:1a:
02:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:11:BC:DE:00:54:92:8D:11:0B:A6:07:CA:5F:24:AA:6A:EA:E9:AF
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/kxG83gBUko0RC6YHyl8kqmrq6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.148.0/22
5.105.174.0/23
5.105.177.0-5.105.178.255
5.105.180.0/22
5.105.232.0-5.105.236.255
Signature Algorithm: sha256WithRSAEncryption
1e:e6:da:40:1a:cc:13:29:88:5d:f6:0f:55:54:bc:36:4d:7e:
9e:bd:cb:f5:8d:34:57:2f:3b:dc:79:e5:a6:c2:5f:bc:25:51:
12:dc:77:96:7f:d5:3d:0a:85:cb:70:87:c9:23:36:21:a5:78:
ad:22:f7:84:46:dc:cd:33:c9:46:fd:32:73:5c:95:50:6d:5d:
d5:70:29:b3:d4:0a:45:95:6d:2f:6b:fb:5f:a1:77:2f:a2:5a:
f4:bf:6e:dc:9c:00:62:bb:9d:69:ba:b0:6b:c3:95:92:cb:3d:
ea:58:75:cc:9f:3e:00:61:dd:8f:12:9a:dc:43:3a:20:bc:72:
81:e1:ac:74:e4:9d:20:48:ae:68:b5:3d:ad:e8:ea:bc:12:e6:
56:81:fc:01:bb:87:0a:13:ab:d6:fe:92:23:7a:31:10:5c:d8:
6c:39:19:88:07:f5:3d:a7:aa:2e:e6:45:e5:5b:ac:74:45:8e:
7a:ae:ec:32:50:62:e6:e5:8f:cb:d1:7b:6a:29:40:91:ce:e4:
b6:4e:6c:98:0e:a0:13:af:25:d6:1c:1d:3c:d5:ad:0c:c8:fd:
40:23:85:eb:90:11:6c:5f:9f:a7:6a:96:b8:e3:dc:03:d2:81:
af:2d:22:c1:b6:6d:c7:37:d5:82:52:4e:a2:40:39:e4:8b:ca:
02:ce:c1:ec
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYjtdviuvg10NHCwGeHUxwbWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjI0MTI1MjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzExYmNkZTAwNTQ5MjhkMTEwYmE2MDdjYTVmMjRhYTZhZWFlOWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGbHQw94f3fPUrKN8beFDnydxnt+
xTLcRvxHFjUA26j6QudTs9MDjqPyUqNfKLT46l53nJAdKzGBpbkqVTy4yek5lDWA
fTV1tLvM9yVc/UlYf0aC+UmqoV7bIxw2vzGFX/hdkXr2x0pmq4QkZdY13Y+Nkn6g
vX5XQdGrGR9aDiSewDjTNLfLlfJV8z+1hJhvF4lgCyKjAL23pOIfaPVBOZJ2yRzk
NASDvTJFw2/GEbKH4XAgqPQgXoC93yPLnEjj5iioWeUheGZxbpG/qcoSn+FYNH1O
k0k0phwybFHkWpZtQ62dUyOXfv3YNk81llR7yi09fI6DE0g16RitxhoCPwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFJMRvN4AVJKNEQumB8pfJKpq6umvMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEva3hHODNnQlVrbzBSQzZZSHlsOGtxbXJxNmE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQCBWmUAwQB
BWmuMAwDBAAFabEDBAAFabIDBAIFabQwDAMEAwVp6AMEAAVp7DANBgkqhkiG9w0B
AQsFAAOCAQEAHubaQBrMEymIXfYPVVS8Nk1+nr3L9Y00Vy873HnlpsJfvCVREtx3
ln/VPQqFy3CHySM2IaV4rSL3hEbczTPJRv0yc1yVUG1d1XAps9QKRZVtL2v7X6F3
L6Ja9L9u3JwAYrudabqwa8OVkss96lh1zJ8+AGHdjxKa3EM6ILxygeGsdOSdIEiu
aLU9rejqvBLmVoH8AbuHChOr1v6SI3oxEFzYbDkZiAf1PaeqLuZF5VusdEWOeq7s
MlBi5uWPy9F7ailAkc7ktk5smA6gE68l1hwdPNWtDMj9QCOF65ARbF+fp2qWuOPc
A9KBry0iwbZtxzfVglJOokA55IvKAs7B7A==
-----END CERTIFICATE-----
Generated at Tue Aug 8 05:57:18 2023 by rpki-client on console-fra.rpki-client.org