Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/l-cbaW8YoLlGmmZ_df_TAoP_oi8.roa
File: l-cbaW8YoLlGmmZ_df_TAoP_oi8.roa (raw, json)
Hash identifier: AxDOQ1fUiU7RU3EQEShi607MT3wkjIshXimyXD14N8w=
Subject key identifier: 97:E7:1B:69:6F:18:A0:B9:46:9A:66:7F:75:FF:D3:02:83:FF:A2:2F
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189D463809191BC5B798E9BD352E2FA4D79
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/l-cbaW8YoLlGmmZ_df_TAoP_oi8.roa
Signing time: Tue 08 Aug 2023 09:03:57 +0000
ROA not before: Tue 08 Aug 2023 09:03:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 5.105.232.0/24 maxlen: 24
5.105.233.0/24 maxlen: 24
5.105.234.0/24 maxlen: 24
5.105.235.0/24 maxlen: 24
5.105.236.0/24 maxlen: 24
5.105.151.0/24 maxlen: 24
5.105.148.0/24 maxlen: 24
5.105.149.0/24 maxlen: 24
5.105.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:63:80:91:91:bc:5b:79:8e:9b:d3:52:e2:fa:4d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 8 09:03:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97e71b696f18a0b9469a667f75ffd30283ffa22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:25:eb:8b:8d:a2:8c:bd:94:f5:5a:76:b8:
0e:05:ce:56:e2:11:78:f3:9a:69:83:e0:11:d0:77:
66:85:75:65:57:dc:6d:6f:91:1c:b4:a2:82:d2:32:
70:2d:bf:f1:a0:79:11:72:2a:f3:a5:7c:fd:1a:5b:
8b:35:f8:ab:18:d2:ae:75:d5:23:7a:34:3a:ce:af:
40:a1:4b:09:5a:a2:ec:01:be:b2:73:61:0f:a2:f2:
df:27:c2:cc:85:d9:bd:02:7a:2f:24:4f:74:23:f3:
9e:dd:7d:a9:09:d4:93:ef:93:d9:ce:26:29:8c:05:
46:76:9a:97:ef:fb:50:bd:66:a4:15:49:07:d9:37:
cb:76:b7:ba:d5:1f:b5:d8:b8:8c:e5:07:1a:b5:1d:
73:65:53:16:71:ea:4e:b9:4b:d2:9f:1e:99:a1:d1:
05:a2:25:7c:3e:2e:57:00:89:18:18:d7:be:8b:89:
4f:59:ac:5b:eb:b1:b9:9d:8a:c1:68:0b:a5:85:28:
42:f0:b6:ef:54:05:38:7b:a7:75:4c:db:b4:f6:d2:
3a:2c:57:aa:8f:24:c0:47:c8:7c:dd:cf:98:7a:04:
1c:7e:c6:a4:64:56:c0:73:66:2e:6a:d9:c0:67:f8:
58:d1:33:a1:16:43:68:ba:22:11:0e:06:e0:47:23:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E7:1B:69:6F:18:A0:B9:46:9A:66:7F:75:FF:D3:02:83:FF:A2:2F
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/l-cbaW8YoLlGmmZ_df_TAoP_oi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.148.0/22
5.105.232.0-5.105.236.255
Signature Algorithm: sha256WithRSAEncryption
84:6f:a5:fb:b4:f6:28:e6:6a:65:76:35:f7:b1:99:a8:e2:4b:
f2:89:d4:7b:97:c6:6a:d6:05:49:9c:60:0a:66:af:f0:62:ca:
70:f2:ee:95:4c:a2:16:94:a1:36:37:47:35:a0:24:af:28:c5:
ee:9c:1e:46:9e:ff:49:e6:8a:4f:2b:18:b9:65:fe:07:0d:c2:
4e:47:3c:3d:e2:3e:6f:9a:ad:94:8b:c8:18:7e:a4:2b:f6:8d:
91:59:28:be:6e:e5:7e:1f:7c:04:8e:d6:9b:30:dc:5d:54:8d:
c6:ab:4f:53:b7:06:42:09:fe:bb:ec:81:aa:dc:8c:7e:a7:c0:
7c:49:ea:d9:34:9e:c6:9a:dd:e0:9c:30:86:d7:8d:e9:c4:4a:
e6:b4:ca:49:c9:5d:11:2f:c5:73:ec:97:94:3f:da:18:7c:31:
d0:42:7a:93:d5:f0:01:ad:c0:6b:93:5a:07:da:59:4c:58:a4:
2b:40:ea:27:86:56:e6:21:6a:d2:a9:e4:99:18:e7:24:ae:f9:
bd:41:ce:c7:31:b2:de:a1:01:52:47:3e:1b:26:13:4f:35:97:
66:47:a7:f4:19:0b:0f:70:ad:14:c0:fc:d5:b9:fb:6c:2d:20:
ce:f5:9f:6f:38:d3:d2:43:ae:59:8c:37:78:6a:e4:4d:05:20:
5b:d2:57:16
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYnUY4CRkbxbeY6b01Li+k15MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODA4MDkwMzU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2U3MWI2OTZmMThhMGI5NDY5YTY2N2Y3NWZmZDMwMjgzZmZhMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLol64uNooy9lPVadrgOBc5W4hF4
85ppg+AR0HdmhXVlV9xtb5EctKKC0jJwLb/xoHkRcirzpXz9GluLNfirGNKuddUj
ejQ6zq9AoUsJWqLsAb6yc2EPovLfJ8LMhdm9AnovJE90I/Oe3X2pCdST75PZziYp
jAVGdpqX7/tQvWakFUkH2TfLdre61R+12LiM5QcatR1zZVMWcepOuUvSnx6ZodEF
oiV8Pi5XAIkYGNe+i4lPWaxb67G5nYrBaAulhShC8LbvVAU4e6d1TNu09tI6LFeq
jyTAR8h83c+YegQcfsakZFbAc2YuatnAZ/hY0TOhFkNouiIRDgbgRyOSiwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJfnG2lvGKC5Rppmf3X/0wKD/6IvMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbC1jYmFXOFlvTGxHbW1aX2RmX1RBb1Bfb2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCBWmUMAwD
BAMFaegDBAAFaewwDQYJKoZIhvcNAQELBQADggEBAIRvpfu09ijmamV2Nfexmaji
S/KJ1HuXxmrWBUmcYApmr/BiynDy7pVMohaUoTY3RzWgJK8oxe6cHkae/0nmik8r
GLll/gcNwk5HPD3iPm+arZSLyBh+pCv2jZFZKL5u5X4ffASO1psw3F1UjcarT1O3
BkIJ/rvsgarcjH6nwHxJ6tk0nsaa3eCcMIbXjenESua0yknJXREvxXPsl5Q/2hh8
MdBCepPV8AGtwGuTWgfaWUxYpCtA6ieGVuYhatKp5JkY5ySu+b1Bzscxst6hAVJH
PhsmE081l2ZHp/QZCw9wrRTA/NW5+2wtIM71n28409JDrlmMN3hq5E0FIFvSVxY=
-----END CERTIFICATE-----
Generated at Mon Oct 9 18:33:32 2023 by rpki-client on console-fra.rpki-client.org