Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/luUeKpWD-RMsZeugbVtZ7_enmHc.roa
File: luUeKpWD-RMsZeugbVtZ7_enmHc.roa (raw, json)
Hash identifier: 7qB8+0dzXQ4VHIWcRKlQPrNoh2oDWBtgEw3ODAAQLPA=
Subject key identifier: 96:E5:1E:2A:95:83:F9:13:2C:65:EB:A0:6D:5B:59:EF:F7:A7:98:77
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0185BE6C8BD0272CD1681FF5F2E3A63AD453
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/luUeKpWD-RMsZeugbVtZ7_enmHc.roa
Signing time: Tue 17 Jan 2023 06:31:02 +0000
ROA not before: Tue 17 Jan 2023 06:31:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.130.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.32.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.215.0/24 maxlen: 24
5.105.7.0/24 maxlen: 24
5.105.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:be:6c:8b:d0:27:2c:d1:68:1f:f5:f2:e3:a6:3a:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 17 06:31:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96e51e2a9583f9132c65eba06d5b59eff7a79877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:10:58:10:6f:a6:7e:ac:af:d1:c3:17:a3:
fa:53:4b:40:c7:7f:07:dd:bb:bb:71:07:92:2b:1f:
15:9d:c1:40:79:b6:36:d2:8c:30:76:0f:fa:f9:02:
bd:69:38:fa:09:8f:c9:65:76:4b:32:05:2f:ac:42:
24:c9:ec:dd:5f:ae:31:ca:bd:b2:0b:c9:35:90:83:
58:50:af:9e:4a:ab:ed:5b:49:57:74:80:1e:3f:d3:
df:f3:d6:eb:7f:85:6f:e9:20:c3:be:cf:aa:0f:30:
b2:c5:8a:aa:f8:84:cd:6a:db:dd:5c:a7:e1:2d:d5:
cf:ba:3f:a5:a0:3d:74:36:0d:e9:21:88:ec:ea:84:
1a:d4:e8:ae:31:37:7c:c4:89:e7:70:c6:7c:36:9f:
69:84:57:87:19:80:a0:70:85:31:8a:e2:82:fb:2e:
04:e8:44:73:3a:b4:22:1f:9c:04:83:bd:96:ab:f3:
c4:7a:4b:04:be:fa:e9:25:13:5c:9d:18:4b:e9:ff:
89:93:cb:81:49:5b:00:56:4e:d8:fe:5b:e8:d1:27:
c2:4f:38:4d:fa:57:89:98:74:8e:40:70:70:5e:cb:
74:f3:37:b1:41:3d:a6:e4:51:a6:ef:9b:d0:7e:e3:
42:58:71:35:6b:ed:5c:ae:6b:43:1a:cc:47:1d:2e:
e8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E5:1E:2A:95:83:F9:13:2C:65:EB:A0:6D:5B:59:EF:F7:A7:98:77
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/luUeKpWD-RMsZeugbVtZ7_enmHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.7.0/24
5.105.30.0-5.105.33.255
5.105.38.0/23
5.105.63.0/24
5.105.96.0/24
5.105.130.0/24
5.105.136.0/24
5.105.184.0/24
5.105.215.0/24
5.105.226.0/24
Signature Algorithm: sha256WithRSAEncryption
65:b4:69:af:f5:dc:60:a0:ad:b2:19:b2:63:a9:41:20:19:0f:
ad:a8:e7:03:f4:b7:25:f2:25:93:18:99:50:d4:71:a8:91:ff:
16:f7:02:0b:a1:b9:90:45:c6:9a:8a:c6:ed:c6:7e:41:14:00:
43:c3:42:d2:53:e8:67:9e:5f:f8:ab:e1:f4:bd:0a:d3:00:2c:
53:b4:53:87:89:2e:61:bb:a9:93:f6:3a:52:bf:a5:12:4a:27:
ff:64:ff:ff:52:40:15:b2:1d:32:31:33:d7:f4:2e:32:27:e8:
5b:f2:4c:9b:92:e1:eb:0c:c0:6e:d6:5c:28:06:77:66:20:b5:
73:bf:eb:44:76:a4:8c:4e:2d:f3:bb:8f:2c:17:e5:9e:ae:7f:
54:3f:25:c1:46:04:2d:d8:15:27:73:15:bf:5e:6f:8e:f9:21:
7a:76:fc:ab:6e:77:be:59:2d:f6:26:0e:ac:70:3d:51:44:8e:
2c:20:70:d6:fb:ae:03:d8:ee:48:d8:a4:95:04:55:eb:29:1f:
7f:c2:74:cb:41:04:dd:e2:38:15:5a:2a:88:6e:dd:73:f7:17:
a0:fe:16:66:56:4a:f7:0f:8d:84:91:be:24:85:0c:42:9d:5e:
81:4b:5a:91:b9:57:e2:e6:d6:e0:77:37:71:5b:b1:75:e1:11:
48:a3:5a:3c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAYW+bIvQJyzRaB/18uOmOtRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTE3MDYzMTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmU1MWUyYTk1ODNmOTEzMmM2NWViYTA2ZDViNTllZmY3YTc5ODc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+UQWBBvpn6sr9HDF6P6U0tAx38H
3bu7cQeSKx8VncFAebY20owwdg/6+QK9aTj6CY/JZXZLMgUvrEIkyezdX64xyr2y
C8k1kINYUK+eSqvtW0lXdIAeP9Pf89brf4Vv6SDDvs+qDzCyxYqq+ITNatvdXKfh
LdXPuj+loD10Ng3pIYjs6oQa1OiuMTd8xInncMZ8Np9phFeHGYCgcIUxiuKC+y4E
6ERzOrQiH5wEg72Wq/PEeksEvvrpJRNcnRhL6f+Jk8uBSVsAVk7Y/lvo0SfCTzhN
+leJmHSOQHBwXst08zexQT2m5FGm75vQfuNCWHE1a+1crmtDGsxHHS7ovQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFJblHiqVg/kTLGXroG1bWe/3p5h3MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbHVVZUtwV0QtUk1zWmV1Z2JWdFo3X2VubUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQABWkHMAwD
BAEFaR4DBAEFaSADBAEFaSYDBAAFaT8DBAAFaWADBAAFaYIDBAAFaYgDBAAFabgD
BAAFadcDBAAFaeIwDQYJKoZIhvcNAQELBQADggEBAGW0aa/13GCgrbIZsmOpQSAZ
D62o5wP0tyXyJZMYmVDUcaiR/xb3AguhuZBFxpqKxu3GfkEUAEPDQtJT6GeeX/ir
4fS9CtMALFO0U4eJLmG7qZP2OlK/pRJKJ/9k//9SQBWyHTIxM9f0LjIn6FvyTJuS
4esMwG7WXCgGd2YgtXO/60R2pIxOLfO7jywX5Z6uf1Q/JcFGBC3YFSdzFb9eb475
IXp2/Ktud75ZLfYmDqxwPVFEjiwgcNb7rgPY7kjYpJUEVespH3/CdMtBBN3iOBVa
Kohu3XP3F6D+FmZWSvcPjYSRviSFDEKdXoFLWpG5V+Lm1uB3N3FbsXXhEUijWjw=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org