Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nhvo16DOHkpTUmuVSFCV9kZB2gs.roa
File: nhvo16DOHkpTUmuVSFCV9kZB2gs.roa (raw, json)
Hash identifier: T4Y043YCckCI4FfOYi8+yZY65Ko7pBHeAFkH/NhbZqw=
Subject key identifier: 9E:1B:E8:D7:A0:CE:1E:4A:53:52:6B:95:48:50:95:F6:46:41:DA:0B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0186DF501DE3EF8F741353CF6372D3729813
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nhvo16DOHkpTUmuVSFCV9kZB2gs.roa
Signing time: Tue 14 Mar 2023 08:50:14 +0000
ROA not before: Tue 14 Mar 2023 08:50:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 5.105.17.0/24 maxlen: 24
5.105.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:50:1d:e3:ef:8f:74:13:53:cf:63:72:d3:72:98:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Mar 14 08:50:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e1be8d7a0ce1e4a53526b95485095f64641da0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6b:e7:7e:0a:42:7b:da:a8:85:5b:4d:c9:3e:
a8:bd:dd:df:b7:54:b0:c1:40:d4:c7:09:7d:fd:4b:
88:d4:87:6e:5a:db:f4:96:57:d1:aa:6c:9b:fe:19:
55:d9:e0:aa:fa:1a:6b:d0:98:eb:8f:38:f9:3b:33:
b2:58:ff:6d:8c:d6:a3:9c:c1:90:20:63:82:e7:31:
78:6b:68:65:07:c0:17:ec:80:26:b5:66:6b:91:42:
70:3d:e0:49:e2:73:26:c0:7d:e3:b6:43:85:31:5d:
a4:00:81:97:ed:85:03:8d:2c:63:e8:57:ac:e6:85:
4c:21:0d:05:9a:d3:c2:8c:1f:54:30:88:95:c9:95:
78:b7:29:ad:cb:e4:dc:46:37:4a:56:c3:1b:bc:84:
a6:32:1b:2f:f1:53:96:8e:35:f7:2a:db:80:e9:13:
43:71:42:3c:02:7f:44:34:12:2c:4d:a5:45:32:ba:
6a:3d:ff:30:ee:38:1b:a1:af:09:47:1f:a0:a1:32:
0a:5c:c6:17:18:36:1d:62:c5:de:5b:30:2d:80:af:
ba:b7:87:cd:80:42:a4:75:77:24:cc:14:a7:57:c3:
fe:de:47:e3:5e:4d:92:52:45:aa:f6:44:47:1c:27:
c7:d1:ef:50:26:97:d8:a4:fb:e1:fd:3c:71:fa:58:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:E8:D7:A0:CE:1E:4A:53:52:6B:95:48:50:95:F6:46:41:DA:0B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nhvo16DOHkpTUmuVSFCV9kZB2gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.17.0/24
5.105.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:bf:75:7c:d6:08:ce:4b:b2:14:84:de:ac:6f:46:fb:1b:b2:
fe:04:b0:84:b8:ab:4a:e3:5d:85:d9:58:b4:47:88:98:83:fd:
ee:df:8c:da:d6:62:d2:53:98:8b:a6:31:2c:05:72:11:24:5d:
35:95:f0:51:86:0e:15:b6:76:f2:94:e9:17:5a:3f:d8:31:ce:
17:b4:ee:a9:34:b2:7c:a0:fc:52:80:24:9a:9f:12:68:a5:8e:
fd:4d:cc:f3:fb:b9:ba:24:9e:9d:3d:c7:5a:93:f1:76:05:fc:
18:a3:03:3e:d7:41:a9:91:fb:0d:4a:a4:0c:09:8a:87:fb:83:
20:db:ec:71:7d:f9:a2:7b:0f:ea:b0:ef:dd:4c:5e:6c:8b:e5:
cf:df:f4:15:82:1a:5f:d9:b7:11:d8:e7:3c:d4:28:a2:88:9a:
ea:ba:91:18:f4:ba:8c:c8:83:73:55:2b:c1:b7:a2:67:9f:13:
42:82:bc:54:13:54:8d:05:01:6c:7d:59:c6:2a:ca:e2:a3:23:
d5:86:50:d8:d3:ef:b3:cd:d1:2a:0a:02:d9:a4:a5:ec:36:b5:
25:33:35:76:f2:67:c6:26:83:7d:56:d6:59:24:85:54:53:50:
be:34:95:7c:63:dc:1b:43:f1:2e:9a:ff:18:b1:86:be:83:f5:
ab:5a:d6:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYbfUB3j7490E1PPY3LTcpgTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMzE0MDg1MDE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTFiZThkN2EwY2UxZTRhNTM1MjZiOTU0ODUwOTVmNjQ2NDFkYTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2vnfgpCe9qohVtNyT6ovd3ft1Sw
wUDUxwl9/UuI1IduWtv0llfRqmyb/hlV2eCq+hpr0Jjrjzj5OzOyWP9tjNajnMGQ
IGOC5zF4a2hlB8AX7IAmtWZrkUJwPeBJ4nMmwH3jtkOFMV2kAIGX7YUDjSxj6Fes
5oVMIQ0FmtPCjB9UMIiVyZV4tymty+TcRjdKVsMbvISmMhsv8VOWjjX3KtuA6RND
cUI8An9ENBIsTaVFMrpqPf8w7jgboa8JRx+goTIKXMYXGDYdYsXeWzAtgK+6t4fN
gEKkdXckzBSnV8P+3kfjXk2SUkWq9kRHHCfH0e9QJpfYpPvh/Txx+lhOJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ4b6Negzh5KU1JrlUhQlfZGQdoLMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbmh2bzE2RE9Ia3BUVW11VlNGQ1Y5a1pCMmdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWkRAwQA
BWlMMA0GCSqGSIb3DQEBCwUAA4IBAQCNv3V81gjOS7IUhN6sb0b7G7L+BLCEuKtK
412F2Vi0R4iYg/3u34za1mLSU5iLpjEsBXIRJF01lfBRhg4VtnbylOkXWj/YMc4X
tO6pNLJ8oPxSgCSanxJopY79Tczz+7m6JJ6dPcdak/F2BfwYowM+10GpkfsNSqQM
CYqH+4Mg2+xxffmiew/qsO/dTF5si+XP3/QVghpf2bcR2Oc81CiiiJrqupEY9LqM
yINzVSvBt6JnnxNCgrxUE1SNBQFsfVnGKsrioyPVhlDY0++zzdEqCgLZpKXsNrUl
MzV28mfGJoN9VtZZJIVUU1C+NJV8Y9wbQ/Eumv8YsYa+g/WrWtY4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org