Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mDoVANAbsM6Sf9xJ2eHRChEgQNw.roa
File: mDoVANAbsM6Sf9xJ2eHRChEgQNw.roa (raw, json)
Hash identifier: QssTCIbp3UyFbIRmJYB33q3DH5W6rpdTdU7RnZFGtMY=
Subject key identifier: 98:3A:15:00:D0:1B:B0:CE:92:7F:DC:49:D9:E1:D1:0A:11:20:40:DC
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188BE30B8E31A0DF206AF3F221E08AF46BC
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mDoVANAbsM6Sf9xJ2eHRChEgQNw.roa
Signing time: Thu 15 Jun 2023 08:34:04 +0000
ROA not before: Thu 15 Jun 2023 08:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.184.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:30:b8:e3:1a:0d:f2:06:af:3f:22:1e:08:af:46:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 15 08:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=983a1500d01bb0ce927fdc49d9e1d10a112040dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:22:34:9f:a4:11:07:b6:26:46:a2:31:54:3d:
78:75:0f:4e:11:0d:5b:80:cc:88:13:7e:4d:31:54:
a9:37:a5:63:07:c2:91:30:92:22:12:07:ea:e9:43:
e6:07:22:7e:87:6f:81:19:70:3d:97:a4:d2:25:8f:
57:6c:78:8f:49:25:f6:77:f2:37:cb:cf:b1:68:1b:
27:13:25:80:d9:33:35:06:62:15:39:32:89:e3:5a:
38:6f:1a:0c:08:a1:a3:bb:d2:25:93:1b:4a:83:21:
9a:c1:52:56:84:da:fb:af:ed:61:53:30:52:be:81:
89:b1:d3:bc:6f:44:12:57:17:27:28:e1:ec:91:56:
f7:04:2f:7e:a3:f9:ba:a3:42:9e:c9:80:68:79:93:
d1:f8:c5:f4:ab:46:9d:86:1f:34:6e:37:bd:d0:f9:
d0:a0:e9:6a:e0:21:09:8c:82:07:7e:4f:98:9b:15:
a9:7b:ae:66:59:94:4e:9f:f1:c0:70:e3:58:02:1e:
9e:e1:05:36:94:ef:90:0a:a4:de:85:e8:84:02:a4:
b3:70:4e:a9:c2:24:7e:99:95:fa:bc:19:34:26:8f:
ed:ba:42:ec:a3:b9:54:97:da:f3:bf:84:04:6d:e4:
b8:f0:c4:b3:e9:38:b3:d2:4b:ed:9f:ca:80:56:d4:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3A:15:00:D0:1B:B0:CE:92:7F:DC:49:D9:E1:D1:0A:11:20:40:DC
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/mDoVANAbsM6Sf9xJ2eHRChEgQNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
5.105.184.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ad:19:71:83:56:7f:dd:8e:3b:81:6a:ba:55:70:59:33:7c:
4b:86:9a:b5:dc:be:f0:04:fa:65:09:46:4a:2d:30:01:e0:72:
a9:7b:22:b0:63:f7:16:b7:fa:77:18:4a:db:d9:03:cf:12:85:
1d:89:b0:4b:19:f3:d0:92:ac:84:4d:90:a1:80:2e:69:61:37:
e1:df:b4:92:bd:f0:63:f9:d1:45:5a:70:38:39:7d:c0:ea:b6:
1e:d2:c5:82:6f:1d:aa:a1:e5:8a:be:b1:b5:dd:0e:28:21:05:
fd:7e:35:a7:d7:46:b5:51:73:07:bf:1d:55:fa:2c:0c:e4:24:
62:2e:99:97:b3:03:34:5a:17:27:70:6e:49:08:ce:38:7c:6c:
a6:43:2a:fe:ea:04:6c:7e:01:fc:fd:ba:e7:d1:26:27:23:c6:
72:d0:ce:1e:04:af:61:4a:79:8f:4f:05:cb:f7:20:30:cf:9a:
86:57:ec:71:c3:4e:90:00:2f:79:dc:22:8b:f0:56:5c:12:8a:
10:8a:b8:84:fa:08:77:3a:1f:9f:53:6d:20:e9:91:c0:df:59:
1a:15:2f:78:62:58:37:b0:70:02:96:84:5a:0a:fa:a6:53:a0:
68:f8:11:62:fb:53:aa:70:12:99:0b:1f:a2:1e:29:8b:3f:57:
74:b6:0c:13
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYi+MLjjGg3yBq8/Ih4Ir0a8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjE1MDgzNDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODNhMTUwMGQwMWJiMGNlOTI3ZmRjNDlkOWUxZDEwYTExMjA0MGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCI0n6QRB7YmRqIxVD14dQ9OEQ1b
gMyIE35NMVSpN6VjB8KRMJIiEgfq6UPmByJ+h2+BGXA9l6TSJY9XbHiPSSX2d/I3
y8+xaBsnEyWA2TM1BmIVOTKJ41o4bxoMCKGju9IlkxtKgyGawVJWhNr7r+1hUzBS
voGJsdO8b0QSVxcnKOHskVb3BC9+o/m6o0KeyYBoeZPR+MX0q0adhh80bje90PnQ
oOlq4CEJjIIHfk+YmxWpe65mWZROn/HAcONYAh6e4QU2lO+QCqTeheiEAqSzcE6p
wiR+mZX6vBk0Jo/tukLso7lUl9rzv4QEbeS48MSz6Tiz0kvtn8qAVtQPRwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFJg6FQDQG7DOkn/cSdnh0QoRIEDcMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbURvVkFOQWJzTTZTZjl4SjJlSFJDaEVnUU53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBBWkYAwQA
BWkhAwQABWkoAwQABWkrAwQABWkyAwQABWk5AwQABWlRAwQABWlgAwQABWmoAwQA
BWm4MA0GCSqGSIb3DQEBCwUAA4IBAQAArRlxg1Z/3Y47gWq6VXBZM3xLhpq13L7w
BPplCUZKLTAB4HKpeyKwY/cWt/p3GErb2QPPEoUdibBLGfPQkqyETZChgC5pYTfh
37SSvfBj+dFFWnA4OX3A6rYe0sWCbx2qoeWKvrG13Q4oIQX9fjWn10a1UXMHvx1V
+iwM5CRiLpmXswM0WhcncG5JCM44fGymQyr+6gRsfgH8/brn0SYnI8Zy0M4eBK9h
SnmPTwXL9yAwz5qGV+xxw06QAC953CKL8FZcEooQiriE+gh3Oh+fU20g6ZHA31ka
FS94Ylg3sHACloRaCvqmU6Bo+BFi+1OqcBKZCx+iHimLP1d0tgwT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org