Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nmkvllI4im8oSIFUa4xpNZigXI0.roa
File: nmkvllI4im8oSIFUa4xpNZigXI0.roa (raw, json)
Hash identifier: UlDe6drEJ+PxPtSfc6ohOVk/E6iRvPKyHQCKWhQR6BE=
Subject key identifier: 9E:69:2F:96:52:38:8A:6F:28:48:81:54:6B:8C:69:35:98:A0:5C:8D
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188D76BC6132E43034ADA14938673A33326
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nmkvllI4im8oSIFUa4xpNZigXI0.roa
Signing time: Tue 20 Jun 2023 06:09:04 +0000
ROA not before: Tue 20 Jun 2023 06:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 5.105.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:6b:c6:13:2e:43:03:4a:da:14:93:86:73:a3:33:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 20 06:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e692f9652388a6f284881546b8c693598a05c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:1f:33:b4:38:7b:cb:d7:8d:e7:26:41:a4:
cb:8d:b7:c1:ae:8d:58:41:7d:ae:c4:55:c6:f3:64:
25:e2:c6:09:70:31:62:8f:fd:74:9f:56:47:70:f4:
f6:75:9c:fd:0a:ea:9c:2b:49:ea:d3:0e:3d:d4:3b:
5c:7d:9a:d0:b9:ba:c0:2b:5f:43:41:2a:f4:02:63:
06:6e:d9:7d:c9:2c:c5:83:45:bd:e3:7a:34:24:22:
2b:85:d0:d4:67:a0:e2:d0:88:85:ce:f8:70:f9:62:
50:7e:8f:24:11:f8:5d:c8:6a:c4:0f:66:c6:81:89:
8b:c9:66:39:e3:bf:83:cf:83:79:19:14:2e:6e:3e:
37:a9:01:5f:d4:c5:de:f8:e9:aa:e6:ba:73:66:eb:
48:85:9e:ac:d1:b5:ab:16:7e:8a:70:eb:5e:44:0c:
fe:2b:4a:fd:7f:a4:6d:a2:cf:39:fd:3c:a9:1f:99:
5f:01:c3:1f:92:0a:f9:2d:83:66:fc:00:68:09:27:
ea:fd:3b:a1:4d:13:e7:cb:8c:6d:b1:e5:cf:0b:f7:
1e:d1:52:0c:14:08:48:85:55:c6:d9:ec:f8:34:68:
ed:dd:2a:2c:cd:5c:6e:f7:af:d2:72:db:70:58:0a:
28:98:81:9f:d0:62:3e:d0:48:40:c4:25:ba:0e:13:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:69:2F:96:52:38:8A:6F:28:48:81:54:6B:8C:69:35:98:A0:5C:8D
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/nmkvllI4im8oSIFUa4xpNZigXI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c7:cb:71:60:ab:29:eb:ed:66:a5:ca:dc:92:79:6d:55:34:
cc:7e:15:d8:d4:28:06:f2:4a:b8:c1:a1:2a:58:cc:f6:18:2a:
20:93:7f:bc:72:43:d5:6d:38:08:44:ba:a0:87:09:06:78:be:
de:b3:2f:de:c0:1d:29:76:d4:ea:88:52:24:47:63:a3:f3:88:
ad:64:bf:f5:4e:3b:62:d3:11:9b:2e:53:9a:8d:bb:51:9c:71:
88:00:ce:47:e6:ea:75:7c:c6:6d:19:ac:01:3b:e4:9a:a9:a6:
e2:2c:04:48:7a:f1:63:f8:9a:82:ec:dd:0e:b9:dc:76:11:f3:
bd:1f:08:75:48:e5:fb:ba:fd:8f:02:aa:98:aa:b4:35:70:7f:
7d:b8:a8:e8:22:87:2e:26:49:3d:9e:6a:be:20:bb:cc:e8:d0:
53:82:f8:aa:c1:cb:0d:19:8f:05:e3:56:87:26:d6:ad:e4:67:
21:0b:06:d7:28:8c:cd:f6:a4:43:49:dd:f1:d6:d4:16:8e:36:
39:2d:a9:91:1b:25:c1:95:c3:c0:cf:ef:ad:58:7d:53:ab:88:
fa:55:f8:90:60:9b:b7:73:5a:15:d7:e3:8f:c6:2a:aa:2a:93:
51:3a:94:ed:b8:81:57:71:eb:c4:c5:d3:30:83:3b:f8:b4:8e:
47:71:3e:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjXa8YTLkMDStoUk4ZzozMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjIwMDYwOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTY5MmY5NjUyMzg4YTZmMjg0ODgxNTQ2YjhjNjkzNTk4YTA1YzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9IfM7Q4e8vXjecmQaTLjbfBro1Y
QX2uxFXG82Ql4sYJcDFij/10n1ZHcPT2dZz9CuqcK0nq0w491DtcfZrQubrAK19D
QSr0AmMGbtl9ySzFg0W943o0JCIrhdDUZ6Di0IiFzvhw+WJQfo8kEfhdyGrED2bG
gYmLyWY547+Dz4N5GRQubj43qQFf1MXe+Omq5rpzZutIhZ6s0bWrFn6KcOteRAz+
K0r9f6Rtos85/TypH5lfAcMfkgr5LYNm/ABoCSfq/TuhTRPny4xtseXPC/ce0VIM
FAhIhVXG2ez4NGjt3SoszVxu96/ScttwWAoomIGf0GI+0EhAxCW6DhP0sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ5pL5ZSOIpvKEiBVGuMaTWYoFyNMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvbm1rdmxsSTRpbThvU0lGVWE0eHBOWmlnWEkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkdMA0G
CSqGSIb3DQEBCwUAA4IBAQB5x8txYKsp6+1mpcrcknltVTTMfhXY1CgG8kq4waEq
WMz2GCogk3+8ckPVbTgIRLqghwkGeL7esy/ewB0pdtTqiFIkR2Oj84itZL/1Tjti
0xGbLlOajbtRnHGIAM5H5up1fMZtGawBO+SaqabiLARIevFj+JqC7N0Oudx2EfO9
Hwh1SOX7uv2PAqqYqrQ1cH99uKjoIocuJkk9nmq+ILvM6NBTgviqwcsNGY8F41aH
Jtat5GchCwbXKIzN9qRDSd3x1tQWjjY5LamRGyXBlcPAz++tWH1Tq4j6VfiQYJu3
c1oV1+OPxiqqKpNROpTtuIFXcevExdMwgzv4tI5HcT4L
-----END CERTIFICATE-----
Generated at Tue Sep 19 11:03:39 2023 by rpki-client on console-fra.rpki-client.org