Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rsk8SSRjtJ4FVtL5TaBf6JpI7Gs.roa
File: rsk8SSRjtJ4FVtL5TaBf6JpI7Gs.roa (raw, json)
Hash identifier: rbea3WcvMpKi4mI9wNilctlZvr+emJvqB8b3SL0yDgo=
Subject key identifier: AE:C9:3C:49:24:63:B4:9E:05:56:D2:F9:4D:A0:5F:E8:9A:48:EC:6B
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0189F95732CB7D7F3AAA2A54F3F962D71AB0
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rsk8SSRjtJ4FVtL5TaBf6JpI7Gs.roa
Signing time: Tue 15 Aug 2023 13:16:28 +0000
ROA not before: Tue 15 Aug 2023 13:16:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 5.105.185.0/24 maxlen: 24
5.105.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f9:57:32:cb:7d:7f:3a:aa:2a:54:f3:f9:62:d7:1a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Aug 15 13:16:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aec93c492463b49e0556d2f94da05fe89a48ec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:e5:ed:4f:46:c0:d0:6e:95:da:17:8a:85:
0a:4f:de:73:34:c7:7d:7a:55:00:4d:aa:b0:7a:c2:
40:08:b6:f7:53:6e:af:c8:a2:0d:77:9d:94:45:e2:
71:91:b9:37:c2:95:61:51:56:f5:1e:17:53:a6:4a:
15:b0:4f:77:fb:2d:f4:b8:27:7f:4e:2a:f7:52:2c:
6f:eb:9c:20:44:a9:7e:de:3c:73:61:db:8e:fe:4d:
a1:6b:2d:76:39:e0:0b:66:f0:43:63:ed:38:90:2d:
00:24:79:25:d7:1d:19:18:c6:b2:ec:26:18:2d:4c:
84:a3:5b:f5:92:b5:7c:a1:36:29:d9:e2:60:87:b1:
6d:c2:ac:c7:3c:50:fb:bf:b1:29:df:8d:50:98:7c:
a9:12:f7:14:b7:52:0c:f4:57:c9:1d:a8:13:ee:af:
4f:70:83:3c:81:2a:08:32:d4:06:93:f5:57:5a:9f:
80:25:05:58:e5:61:b3:5d:7c:58:fe:de:f5:9b:20:
57:54:db:36:ab:a6:85:2f:54:6e:e7:aa:7b:4b:d4:
c6:3c:44:c2:c2:1d:69:02:80:6e:e9:cd:37:98:f6:
05:07:40:4f:38:ed:88:42:dd:da:5f:5c:59:24:dc:
5d:37:0a:86:ee:03:eb:d1:eb:14:f2:9b:e8:5a:3d:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:3C:49:24:63:B4:9E:05:56:D2:F9:4D:A0:5F:E8:9A:48:EC:6B
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/rsk8SSRjtJ4FVtL5TaBf6JpI7Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.1.0/24
5.105.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:8c:ab:7d:a6:1a:2f:f9:2f:56:ca:6c:e9:9c:8b:27:44:5b:
89:86:a9:9c:cb:6e:1b:3b:e4:06:4d:1e:c7:5f:f6:e7:99:b1:
1f:2d:f8:37:67:53:4c:66:dc:04:cc:91:36:a1:cd:7d:05:16:
45:da:b0:4b:68:b5:70:0f:1a:b1:d4:ea:b7:8a:f3:2d:95:9e:
9b:53:0a:e9:df:45:fc:27:e4:62:f5:02:0e:af:6d:68:a0:d6:
b7:83:08:fd:7b:02:8e:42:38:4c:a6:c5:13:80:71:8b:ec:60:
47:3d:e2:4f:f4:8d:cd:5c:de:c2:dc:fe:3e:64:76:4f:f1:67:
df:19:3e:60:15:32:7a:87:b0:b1:85:97:e6:c4:b0:5a:3b:88:
64:e4:69:36:20:5e:d3:72:ae:3d:ad:7e:b0:69:40:36:b2:a0:
03:a3:e0:41:58:c8:74:07:be:3d:6c:e8:5f:70:a8:5b:3b:d9:
e4:3f:02:91:6b:5e:2b:d2:f5:c4:96:9a:a3:f0:00:4c:35:e8:
01:c2:e1:fe:7b:0e:30:e0:55:69:81:26:84:60:3c:71:ac:38:
33:14:4b:35:ef:c0:61:37:6d:18:38:7a:e9:5d:8b:2d:58:de:
df:85:c0:51:30:93:3c:21:3b:f4:0b:bb:ce:86:16:75:0d:04:
ae:d2:ce:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYn5VzLLfX86qipU8/li1xqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwODE1MTMxNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWM5M2M0OTI0NjNiNDllMDU1NmQyZjk0ZGEwNWZlODlhNDhlYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GLl7U9GwNBuldoXioUKT95zNMd9
elUATaqwesJACLb3U26vyKINd52UReJxkbk3wpVhUVb1HhdTpkoVsE93+y30uCd/
Tir3Uixv65wgRKl+3jxzYduO/k2hay12OeALZvBDY+04kC0AJHkl1x0ZGMay7CYY
LUyEo1v1krV8oTYp2eJgh7FtwqzHPFD7v7Ep341QmHypEvcUt1IM9FfJHagT7q9P
cIM8gSoIMtQGk/VXWp+AJQVY5WGzXXxY/t71myBXVNs2q6aFL1Ru56p7S9TGPETC
wh1pAoBu6c03mPYFB0BPOO2IQt3aX1xZJNxdNwqG7gPr0esU8pvoWj1DBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK7JPEkkY7SeBVbS+U2gX+iaSOxrMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvcnNrOFNTUmp0SjRGVnRMNVRhQmY2SnBJN0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWkBAwQA
BWm5MA0GCSqGSIb3DQEBCwUAA4IBAQDHjKt9phov+S9WymzpnIsnRFuJhqmcy24b
O+QGTR7HX/bnmbEfLfg3Z1NMZtwEzJE2oc19BRZF2rBLaLVwDxqx1Oq3ivMtlZ6b
Uwrp30X8J+Ri9QIOr21ooNa3gwj9ewKOQjhMpsUTgHGL7GBHPeJP9I3NXN7C3P4+
ZHZP8WffGT5gFTJ6h7CxhZfmxLBaO4hk5Gk2IF7Tcq49rX6waUA2sqADo+BBWMh0
B749bOhfcKhbO9nkPwKRa14r0vXElpqj8ABMNegBwuH+ew4w4FVpgSaEYDxxrDgz
FEs178BhN20YOHrpXYstWN7fhcBRMJM8ITv0C7vOhhZ1DQSu0s5i
-----END CERTIFICATE-----
Generated at Tue Sep 19 11:05:47 2023 by rpki-client on console-ams.rpki-client.org