Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lcRVv3CvuGyOhuvtgm2K2eqkOWE.roa
File: lcRVv3CvuGyOhuvtgm2K2eqkOWE.roa (raw, json)
Hash identifier: L+Qd94TKB7W9NJ+XMSIZlozPPcVC46rt7r/BcY++93c=
Subject key identifier: 95:C4:55:BF:70:AF:B8:6C:8E:86:EB:ED:82:6D:8A:D9:EA:A4:39:61
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018794018C51A7E441094E99022C47E092EC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lcRVv3CvuGyOhuvtgm2K2eqkOWE.roa
Signing time: Tue 18 Apr 2023 10:55:41 +0000
ROA not before: Tue 18 Apr 2023 10:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:01:8c:51:a7:e4:41:09:4e:99:02:2c:47:e0:92:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 18 10:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95c455bf70afb86c8e86ebed826d8ad9eaa43961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a4:dd:49:b0:53:e5:9c:26:4b:6f:0e:7e:dd:
48:4d:92:be:ca:b7:43:90:a8:62:e2:54:72:4e:e0:
e3:79:b8:a3:81:4d:6b:62:da:c1:84:97:85:61:5d:
d3:a3:46:f9:09:d9:79:3e:55:e0:1f:65:48:63:de:
b6:d7:21:5a:68:fb:b6:88:4e:1f:1b:9a:a9:42:80:
7f:cd:5e:e4:f1:dc:d5:ff:c3:4b:44:97:74:53:c1:
ca:90:db:b6:1e:a3:10:36:f4:4b:5c:02:bf:92:01:
d9:2e:be:af:0a:6e:8a:35:8e:7c:12:a4:74:40:79:
77:82:62:d9:e1:34:c4:7d:6e:16:19:3f:18:f1:0a:
f7:56:c2:74:80:04:b3:76:82:41:27:bf:44:08:58:
9b:d7:65:c5:1c:e3:ef:3a:72:0f:15:e8:9f:51:57:
fa:8d:23:06:85:4d:19:27:ca:61:c0:8a:68:8d:0e:
0c:57:47:da:b7:82:f8:9f:40:0f:87:d6:ab:8d:d8:
8d:0d:5b:8a:e8:4c:f2:f0:34:82:dc:51:e8:ee:fc:
cc:40:70:f2:c1:b3:5b:db:b0:88:a1:8b:b4:f2:d9:
98:62:43:2f:f8:da:8f:24:3a:cc:fc:b4:56:3c:e6:
fd:5e:ce:a7:9a:60:14:3b:0a:44:7d:e8:4f:51:a7:
14:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C4:55:BF:70:AF:B8:6C:8E:86:EB:ED:82:6D:8A:D9:EA:A4:39:61
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/lcRVv3CvuGyOhuvtgm2K2eqkOWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/24
5.105.63.0/24
5.105.85.0/24
5.105.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:8e:b0:96:ca:a0:34:69:11:12:08:05:da:72:f4:fe:73:f0:
4b:d8:75:7c:0a:e1:98:a5:6a:67:a8:16:8a:46:0e:e0:ef:82:
da:f8:42:60:18:4e:04:1f:42:7f:b8:c8:ae:c3:ec:a2:00:88:
3d:ca:b6:7c:22:d9:10:f4:d1:66:0c:0a:c8:05:e2:1a:59:42:
b2:ad:1d:e0:ca:47:a1:df:9c:e7:7f:9d:73:47:9c:96:82:8d:
3a:58:1b:9c:1d:7f:3c:12:08:8e:af:42:e0:1b:f2:cc:a9:5e:
b9:2d:8a:0e:e7:08:82:8e:88:63:5d:18:87:af:88:25:1d:fc:
9f:25:de:ea:38:ec:cf:ec:50:36:dd:03:6a:81:4f:31:86:d0:
da:6e:0f:77:09:7c:a2:4c:f6:64:2c:cb:84:fa:75:d0:72:72:
dc:92:b1:45:29:4e:12:56:3d:b7:94:7e:61:13:8b:9d:d2:23:
2c:9b:65:38:51:1c:9e:74:53:64:19:16:39:aa:93:15:d3:28:
3a:d1:5f:0b:83:ac:d1:86:6a:db:65:25:57:50:eb:3d:61:8d:
a5:01:62:74:c4:a5:48:0b:2d:c3:0d:21:48:78:ba:b6:45:78:
da:92:7a:27:4f:8b:3c:f4:b3:b5:f9:da:bc:1b:fd:b6:26:3c:
6a:52:24:f2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYeUAYxRp+RBCU6ZAixH4JLsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDE4MTA1NTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWM0NTViZjcwYWZiODZjOGU4NmViZWQ4MjZkOGFkOWVhYTQzOTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaTdSbBT5ZwmS28Oft1ITZK+yrdD
kKhi4lRyTuDjebijgU1rYtrBhJeFYV3To0b5Cdl5PlXgH2VIY9621yFaaPu2iE4f
G5qpQoB/zV7k8dzV/8NLRJd0U8HKkNu2HqMQNvRLXAK/kgHZLr6vCm6KNY58EqR0
QHl3gmLZ4TTEfW4WGT8Y8Qr3VsJ0gASzdoJBJ79ECFib12XFHOPvOnIPFeifUVf6
jSMGhU0ZJ8phwIpojQ4MV0fat4L4n0APh9arjdiNDVuK6Ezy8DSC3FHo7vzMQHDy
wbNb27CIoYu08tmYYkMv+NqPJDrM/LRWPOb9Xs6nmmAUOwpEfehPUacUvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJXEVb9wr7hsjobr7YJtitnqpDlhMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbGNSVnYzQ3Z1R3lPaHV2dGdtMksyZXFrT1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABWkeAwQA
BWk/AwQABWlVAwQABWm4MA0GCSqGSIb3DQEBCwUAA4IBAQDCjrCWyqA0aRESCAXa
cvT+c/BL2HV8CuGYpWpnqBaKRg7g74La+EJgGE4EH0J/uMiuw+yiAIg9yrZ8ItkQ
9NFmDArIBeIaWUKyrR3gykeh35znf51zR5yWgo06WBucHX88EgiOr0LgG/LMqV65
LYoO5wiCjohjXRiHr4glHfyfJd7qOOzP7FA23QNqgU8xhtDabg93CXyiTPZkLMuE
+nXQcnLckrFFKU4SVj23lH5hE4ud0iMsm2U4URyedFNkGRY5qpMV0yg60V8Lg6zR
hmrbZSVXUOs9YY2lAWJ0xKVICy3DDSFIeLq2RXjaknonT4s89LO1+dq8G/22Jjxq
UiTy
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org