Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tmmhwmLLQHRl0-Qn26QphfiGP8o.roa
File: tmmhwmLLQHRl0-Qn26QphfiGP8o.roa (raw, json)
Hash identifier: P20xDLX5VAnjb62NDI+pYndxrtko7cCa8hoxXMTsJx8=
Subject key identifier: B6:69:A1:C2:62:CB:40:74:65:D3:E4:27:DB:A4:29:85:F8:86:3F:CA
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018586868936893EBFD729FFB4C825AD8CEE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tmmhwmLLQHRl0-Qn26QphfiGP8o.roa
Signing time: Fri 06 Jan 2023 10:00:41 +0000
ROA not before: Fri 06 Jan 2023 10:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 5.105.126.0/24 maxlen: 24
5.105.132.0/24 maxlen: 24
5.105.141.0/24 maxlen: 24
5.105.72.0/24 maxlen: 24
5.105.196.0/24 maxlen: 24
5.105.212.0/24 maxlen: 24
5.105.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:86:89:36:89:3e:bf:d7:29:ff:b4:c8:25:ad:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 6 10:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b669a1c262cb407465d3e427dba42985f8863fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:ab:5e:43:b1:74:16:7a:a2:64:b5:73:3c:
4f:43:65:c8:4d:92:ab:14:e1:36:bb:39:0b:3a:32:
bc:69:bc:c0:55:ee:a7:e5:52:20:39:92:ae:73:f4:
e8:7d:a6:fe:ca:4c:3d:93:40:ec:9a:98:ea:7d:55:
d8:e2:b2:6c:d6:00:85:1d:d5:73:74:90:d6:9a:05:
24:3f:a4:56:5f:9a:9b:17:ca:69:b6:0c:df:fd:d7:
66:22:f5:81:a7:d0:98:ab:20:ea:f4:b4:5b:69:72:
d9:9f:b8:38:0f:5a:87:19:e6:04:bd:10:c7:a4:f6:
b8:37:05:e7:29:b9:c6:d0:9c:3b:46:fe:8c:de:2b:
3e:ca:bf:35:10:22:21:38:19:6c:99:d4:0e:8c:46:
9f:4d:c9:e8:69:ca:a4:7b:d0:15:8c:8e:eb:69:c8:
c8:68:35:0b:8b:7b:6b:e6:6f:60:46:a5:03:9f:6b:
3f:fc:16:de:b5:f3:db:14:32:1e:19:7c:1f:6b:34:
8f:c8:0f:de:14:7d:21:5e:51:4f:4e:a6:98:b8:a3:
1a:5b:d2:cb:b9:4e:5a:c5:8b:4f:6c:9f:75:44:7e:
a2:a1:df:06:dc:64:31:dc:b2:fd:a3:4d:fb:3b:23:
fd:81:c0:cd:bc:ca:64:7f:af:a3:20:1d:7c:0e:67:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:69:A1:C2:62:CB:40:74:65:D3:E4:27:DB:A4:29:85:F8:86:3F:CA
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/tmmhwmLLQHRl0-Qn26QphfiGP8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.3.0/24
5.105.72.0/24
5.105.126.0/24
5.105.132.0/24
5.105.141.0/24
5.105.196.0/24
5.105.212.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:c1:1e:50:09:a6:9c:6e:e9:b8:c3:b9:26:2e:e5:c9:f9:04:
f8:d8:e7:a6:81:18:c0:b6:ad:2a:de:11:99:2e:6b:cf:b6:5e:
96:af:f9:f0:01:99:bb:b9:a4:cc:f5:33:09:44:8f:09:ff:4a:
3c:ad:55:70:64:8e:54:09:85:59:20:c5:55:fd:43:ee:10:05:
72:11:d8:f2:2d:39:5c:dd:a6:10:b0:3e:06:e5:2d:99:52:85:
a5:86:72:c8:47:76:38:cc:48:6d:48:f5:f2:d0:c4:85:ee:df:
3b:d3:b2:19:02:7f:38:1b:20:5f:52:78:bb:a1:bb:71:98:36:
92:60:c4:4a:fc:59:ca:5a:d5:bf:f9:5a:43:84:6a:2f:b0:13:
02:00:48:21:ed:96:1d:0e:42:7c:a3:91:e3:8b:af:ed:c6:f6:
80:3d:23:88:c7:47:9c:0b:dd:ca:6b:6d:73:09:16:58:ff:6e:
c8:c7:5b:4c:0c:a0:4b:aa:a1:ae:10:48:7d:5a:85:24:f2:fd:
6f:c8:2a:67:10:aa:2a:50:39:70:78:19:bb:27:e8:b2:7d:61:
fd:b2:63:a7:cb:26:49:b6:98:4a:0e:75:59:16:82:06:4b:f1:
d1:7c:44:04:53:e6:fd:62:26:ef:22:11:e6:2a:f6:09:9c:06:
ab:a8:99:71
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYWGhok2iT6/1yn/tMglrYzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTA2MTAwMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjY5YTFjMjYyY2I0MDc0NjVkM2U0MjdkYmE0Mjk4NWY4ODYzZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuerXkOxdBZ6omS1czxPQ2XITZKr
FOE2uzkLOjK8abzAVe6n5VIgOZKuc/Tofab+ykw9k0DsmpjqfVXY4rJs1gCFHdVz
dJDWmgUkP6RWX5qbF8pptgzf/ddmIvWBp9CYqyDq9LRbaXLZn7g4D1qHGeYEvRDH
pPa4NwXnKbnG0Jw7Rv6M3is+yr81ECIhOBlsmdQOjEafTcnoacqke9AVjI7racjI
aDULi3tr5m9gRqUDn2s//BbetfPbFDIeGXwfazSPyA/eFH0hXlFPTqaYuKMaW9LL
uU5axYtPbJ91RH6iod8G3GQx3LL9o037OyP9gcDNvMpkf6+jIB18DmcnqwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFLZpocJiy0B0ZdPkJ9ukKYX4hj/KMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvdG1taHdtTExRSFJsMC1RbjI2UXBoZmlHUDhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQABWkDAwQA
BWlIAwQABWl+AwQABWmEAwQABWmNAwQABWnEAwQABWnUMA0GCSqGSIb3DQEBCwUA
A4IBAQDNwR5QCaacbum4w7kmLuXJ+QT42OemgRjAtq0q3hGZLmvPtl6Wr/nwAZm7
uaTM9TMJRI8J/0o8rVVwZI5UCYVZIMVV/UPuEAVyEdjyLTlc3aYQsD4G5S2ZUoWl
hnLIR3Y4zEhtSPXy0MSF7t8707IZAn84GyBfUni7obtxmDaSYMRK/FnKWtW/+VpD
hGovsBMCAEgh7ZYdDkJ8o5Hji6/txvaAPSOIx0ecC93Ka21zCRZY/27Ix1tMDKBL
qqGuEEh9WoUk8v1vyCpnEKoqUDlweBm7J+iyfWH9smOnyyZJtphKDnVZFoIGS/HR
fEQEU+b9YibvIhHmKvYJnAarqJlx
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org