Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/p17LzPMUgC7sDBgQZUlFMwuUSok.roa
File: p17LzPMUgC7sDBgQZUlFMwuUSok.roa (raw, json)
Hash identifier: 1Efn6i0IbOleO4wOByacVlZKbt0XP4cnPJ+h+0PLcS0=
Subject key identifier: A7:5E:CB:CC:F3:14:80:2E:EC:0C:18:10:65:49:45:33:0B:94:4A:89
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01860812753F276F53E15E6C47E5B9DB602D
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/p17LzPMUgC7sDBgQZUlFMwuUSok.roa
Signing time: Tue 31 Jan 2023 13:44:32 +0000
ROA not before: Tue 31 Jan 2023 13:44:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 5.105.30.0/24 maxlen: 24
5.105.31.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.38.0/24 maxlen: 24
5.105.247.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.63.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:08:12:75:3f:27:6f:53:e1:5e:6c:47:e5:b9:db:60:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 31 13:44:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a75ecbccf314802eec0c1810654945330b944a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d4:74:9f:31:d9:43:79:49:87:70:8b:9b:0e:
c3:a0:9b:97:c5:d5:0c:d2:35:7f:4f:9c:46:b0:5a:
1f:92:67:67:2b:14:6e:d3:15:16:ce:32:28:ef:34:
f9:b2:53:64:28:cd:f3:2f:76:32:f0:cb:d6:ed:52:
ae:9a:2e:15:c5:d6:76:37:75:d5:08:bb:9d:82:a2:
b2:2e:11:1f:c6:fd:7c:9f:cd:e4:af:40:2e:f7:86:
22:fb:c2:77:a2:5b:c5:b1:48:39:67:54:85:e5:d4:
e4:6f:05:80:7f:21:cc:e2:b1:a9:12:c9:2e:58:56:
b2:1d:e9:2c:6b:91:5f:d9:f5:85:09:55:43:72:83:
87:71:f5:5e:76:2e:ee:a2:46:d7:d0:cb:60:55:fc:
3b:79:78:37:54:b6:1e:9a:fb:91:5c:97:6b:0e:ed:
f3:dd:6e:9d:6a:58:db:e6:78:0e:77:e1:c6:91:f4:
c7:b3:cb:78:ea:7f:25:52:f1:a0:06:65:a2:d6:78:
d8:44:d6:57:76:72:5c:bf:6f:1d:78:07:a4:12:7e:
b4:55:75:9e:9e:d1:c0:b9:f6:84:9e:c7:42:3a:ce:
d7:34:31:5e:54:64:9d:75:57:2d:de:e6:26:85:cb:
40:74:f4:78:ef:1f:c2:39:06:cd:dc:ce:38:4d:5f:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5E:CB:CC:F3:14:80:2E:EC:0C:18:10:65:49:45:33:0B:94:4A:89
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/p17LzPMUgC7sDBgQZUlFMwuUSok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.30.0/23
5.105.38.0/23
5.105.63.0/24
5.105.136.0/24
5.105.200.0/24
5.105.247.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:d5:02:c6:8c:a3:94:21:f6:14:d7:7e:d6:ad:0a:1e:e9:59:
c4:0f:6e:b4:ef:7a:b7:c9:01:24:62:cf:2f:2e:91:55:06:c1:
c2:e2:5a:68:09:27:b2:73:27:9a:3e:f0:24:fa:b2:0a:cc:aa:
d5:49:60:68:c6:29:22:52:d9:36:d0:bf:e4:3f:6d:ff:75:62:
39:9f:c2:7c:69:fb:77:23:22:c3:50:00:df:22:50:ec:d0:2c:
36:da:91:97:e9:94:ef:72:f1:16:ff:6e:11:45:41:31:07:f1:
35:7e:ca:19:7e:6e:72:ba:c5:be:f9:08:6e:78:9c:c1:4d:33:
3a:a9:1d:26:c3:88:23:b0:a9:94:b1:bb:cc:11:f9:1e:43:6e:
f0:99:2f:18:56:ab:af:49:fd:3c:54:13:e1:bf:ab:7f:9f:bd:
a7:f1:de:3d:35:98:44:d8:96:aa:3d:e5:08:b9:a5:53:cb:97:
40:19:34:43:da:fa:d8:b8:ec:9b:cf:e3:6f:e2:7f:74:2f:37:
f1:44:8d:79:1c:2d:09:ba:76:1f:73:7b:15:ad:2b:9f:72:18:
b9:64:be:d4:65:46:59:94:f0:74:36:4e:79:cd:00:b7:37:8d:
80:91:23:c0:dc:59:14:0e:5c:7e:8c:a4:71:4a:60:17:78:67:
08:ae:82:45
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYYIEnU/J29T4V5sR+W522AtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTMxMTM0NDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzVlY2JjY2YzMTQ4MDJlZWMwYzE4MTA2NTQ5NDUzMzBiOTQ0YTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7tR0nzHZQ3lJh3CLmw7DoJuXxdUM
0jV/T5xGsFofkmdnKxRu0xUWzjIo7zT5slNkKM3zL3Yy8MvW7VKumi4VxdZ2N3XV
CLudgqKyLhEfxv18n83kr0Au94Yi+8J3olvFsUg5Z1SF5dTkbwWAfyHM4rGpEsku
WFayHeksa5Ff2fWFCVVDcoOHcfVedi7uokbX0MtgVfw7eXg3VLYemvuRXJdrDu3z
3W6daljb5ngOd+HGkfTHs8t46n8lUvGgBmWi1njYRNZXdnJcv28deAekEn60VXWe
ntHAufaEnsdCOs7XNDFeVGSddVct3uYmhctAdPR47x/COQbN3M44TV8nmwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKdey8zzFIAu7AwYEGVJRTMLlEqJMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvcDE3THpQTVVnQzdzREJnUVpVbEZNd3VVU29rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBBWkeAwQB
BWkmAwQABWk/AwQABWmIAwQABWnIAwQABWn3MA0GCSqGSIb3DQEBCwUAA4IBAQDB
1QLGjKOUIfYU137WrQoe6VnED26073q3yQEkYs8vLpFVBsHC4lpoCSeycyeaPvAk
+rIKzKrVSWBoxikiUtk20L/kP23/dWI5n8J8aft3IyLDUADfIlDs0Cw22pGX6ZTv
cvEW/24RRUExB/E1fsoZfm5yusW++QhueJzBTTM6qR0mw4gjsKmUsbvMEfkeQ27w
mS8YVquvSf08VBPhv6t/n72n8d49NZhE2JaqPeUIuaVTy5dAGTRD2vrYuOybz+Nv
4n90LzfxRI15HC0JunYfc3sVrSufchi5ZL7UZUZZlPB0Nk55zQC3N42AkSPA3FkU
Dlx+jKRxSmAXeGcIroJF
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org