Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s8KkG68DdekRFyVKObRUDeZTkRI.roa
File: s8KkG68DdekRFyVKObRUDeZTkRI.roa (raw, json)
Hash identifier: s12tU9S9FOmO5aZWBIMhuXPyd/l5L8f+0tywZX/Mc70=
Subject key identifier: B3:C2:A4:1B:AF:03:75:E9:11:17:25:4A:39:B4:54:0D:E6:53:91:12
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018892872FB5AE12363443B2CFB0D7A87997
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s8KkG68DdekRFyVKObRUDeZTkRI.roa
Signing time: Tue 06 Jun 2023 21:05:13 +0000
ROA not before: Tue 06 Jun 2023 21:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 5.105.51.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:87:2f:b5:ae:12:36:34:43:b2:cf:b0:d7:a8:79:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 6 21:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3c2a41baf0375e91117254a39b4540de6539112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:03:c8:d1:12:b3:10:37:cb:d4:06:e8:00:00:
fa:82:1e:7f:e1:2a:e6:54:52:81:df:43:4e:6d:fb:
9c:b8:a3:15:0b:de:da:20:f8:39:bc:3a:e3:55:65:
36:2c:9d:7d:72:f4:df:1b:22:6f:3e:16:58:aa:9d:
b6:46:d1:a7:ae:d7:ed:b5:2d:a3:7c:f6:d6:8f:0a:
20:4f:47:2e:84:fb:ac:6d:8a:88:04:c3:3e:ff:2f:
c4:86:af:9e:88:dd:0e:e7:e6:b7:0c:e4:06:66:41:
45:36:40:ac:9c:fb:14:76:a4:0e:ac:08:23:4d:f0:
6a:b3:d3:ec:a2:f4:d1:0d:6b:9e:ef:7b:24:27:6d:
d4:e0:e6:14:4a:92:7d:4e:4d:a4:86:5f:68:b5:a0:
93:25:a2:4d:98:93:ed:4c:9a:28:3a:c8:56:34:1e:
fd:2d:f1:7f:26:40:57:6b:59:97:9e:80:a7:59:b6:
8f:02:44:20:fd:07:b5:82:9d:a4:52:03:86:e0:7b:
03:06:73:ce:d9:56:f8:1b:4b:53:a8:9b:5e:5a:b3:
64:eb:90:c4:55:b7:c4:e2:5a:f6:ab:d1:91:a0:ef:
1a:17:14:69:e8:02:1b:e9:48:5c:42:e2:d9:f0:11:
6f:6b:35:b0:6c:f1:ac:5e:f2:04:bb:41:66:82:15:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C2:A4:1B:AF:03:75:E9:11:17:25:4A:39:B4:54:0D:E6:53:91:12
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/s8KkG68DdekRFyVKObRUDeZTkRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.51.0/24
Signature Algorithm: sha256WithRSAEncryption
44:61:01:dd:0d:e1:fa:20:33:c8:86:34:39:cb:41:13:eb:15:
94:ec:0d:a0:88:c1:1e:6f:6f:65:57:32:7e:96:bb:2f:d7:ac:
85:c8:b5:96:ae:56:56:6f:a5:f7:df:bc:e7:fb:f3:38:34:be:
ec:d1:5b:a0:d1:c4:ca:a8:e0:3d:e7:70:74:bf:ab:ef:fa:b9:
2a:34:67:1a:2a:a4:aa:4b:b9:47:23:31:c1:31:a6:f2:58:a4:
75:66:96:e6:eb:2f:f1:18:6a:16:c7:59:c3:e8:33:99:f0:cc:
d8:76:fd:5c:4c:6b:14:18:6e:4c:c4:78:f8:70:97:b3:d0:a5:
0e:b8:76:ce:e9:08:23:50:e9:4e:4f:de:c1:fe:80:62:09:e4:
e9:01:c1:7b:ff:af:40:d2:92:ab:8d:88:3e:b6:39:c4:e0:1f:
db:2e:d9:54:cc:81:ef:e9:d2:68:24:3b:6a:29:57:b0:53:9a:
93:43:c2:e6:74:2e:99:db:7b:09:ce:5c:bd:90:18:1f:ea:cb:
7f:1b:93:a1:3f:40:2c:86:b1:67:6a:bd:71:eb:ae:b8:4f:e4:
c4:2d:65:ad:a5:08:68:c9:da:8f:15:03:ae:b1:31:19:69:63:
f6:4d:45:7f:38:71:49:60:20:19:25:cc:99:b4:da:cd:25:0f:
6b:ca:f1:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiShy+1rhI2NEOyz7DXqHmXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjA2MjEwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2MyYTQxYmFmMDM3NWU5MTExNzI1NGEzOWI0NTQwZGU2NTM5MTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQPI0RKzEDfL1AboAAD6gh5/4Srm
VFKB30NObfucuKMVC97aIPg5vDrjVWU2LJ19cvTfGyJvPhZYqp22RtGnrtfttS2j
fPbWjwogT0cuhPusbYqIBMM+/y/Ehq+eiN0O5+a3DOQGZkFFNkCsnPsUdqQOrAgj
TfBqs9PsovTRDWue73skJ23U4OYUSpJ9Tk2khl9otaCTJaJNmJPtTJooOshWNB79
LfF/JkBXa1mXnoCnWbaPAkQg/Qe1gp2kUgOG4HsDBnPO2Vb4G0tTqJteWrNk65DE
VbfE4lr2q9GRoO8aFxRp6AIb6UhcQuLZ8BFvazWwbPGsXvIEu0FmghUZZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLPCpBuvA3XpERclSjm0VA3mU5ESMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvczhLa0c2OERkZWtSRnlWS09iUlVEZVpUa1JJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkzMA0G
CSqGSIb3DQEBCwUAA4IBAQBEYQHdDeH6IDPIhjQ5y0ET6xWU7A2giMEeb29lVzJ+
lrsv16yFyLWWrlZWb6X337zn+/M4NL7s0Vug0cTKqOA953B0v6vv+rkqNGcaKqSq
S7lHIzHBMabyWKR1Zpbm6y/xGGoWx1nD6DOZ8MzYdv1cTGsUGG5MxHj4cJez0KUO
uHbO6QgjUOlOT97B/oBiCeTpAcF7/69A0pKrjYg+tjnE4B/bLtlUzIHv6dJoJDtq
KVewU5qTQ8LmdC6Z23sJzly9kBgf6st/G5OhP0AshrFnar1x6664T+TELWWtpQho
ydqPFQOusTEZaWP2TUV/OHFJYCAZJcyZtNrNJQ9ryvGH
-----END CERTIFICATE-----
Generated at Thu Jul 27 08:37:22 2023 by rpki-client on console-fra.rpki-client.org