Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/txB0KOjFjc3GKVW3rp22SmMI4ZY.roa
File: txB0KOjFjc3GKVW3rp22SmMI4ZY.roa (raw, json)
Hash identifier: v3+x19B8hTEt/jSCXpRxLQgtXyWU21P0UadMLK3G7qY=
Subject key identifier: B7:10:74:28:E8:C5:8D:CD:C6:29:55:B7:AE:9D:B6:4A:63:08:E1:96
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0187EA9DA4B63DC4573CED92A54B29DFB73C
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/txB0KOjFjc3GKVW3rp22SmMI4ZY.roa
Signing time: Fri 05 May 2023 06:33:32 +0000
ROA not before: Fri 05 May 2023 06:33:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 5.105.124.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.29.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.34.0/24 maxlen: 24
5.105.249.0/24 maxlen: 24
5.105.39.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.200.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:9d:a4:b6:3d:c4:57:3c:ed:92:a5:4b:29:df:b7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: May 5 06:33:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7107428e8c58dcdc62955b7ae9db64a6308e196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:6c:f2:a5:e2:de:10:9b:07:79:48:20:6b:
f5:71:fa:11:06:07:2e:20:1b:7a:50:bd:e1:50:02:
72:3c:2a:0c:a8:2f:9d:ca:1e:c5:85:00:a7:ae:05:
b1:20:05:ad:95:9a:0e:39:31:d5:e1:64:c1:9d:5d:
24:eb:e3:27:b8:c5:ff:8b:2d:02:9c:fc:f1:43:84:
5b:0b:b2:b6:50:6d:3d:e9:aa:b7:64:6b:18:8c:8f:
06:46:66:c3:6a:89:d1:b1:f5:8a:a2:2e:27:a7:57:
4e:5e:a2:74:53:df:57:11:52:b4:87:9b:f6:4a:91:
7e:31:44:35:63:7d:10:ae:b6:3a:53:0f:68:d9:38:
2d:11:aa:e8:c7:17:83:8a:4e:e0:7b:3f:1e:0d:7a:
f2:16:81:51:c5:dd:d4:e4:86:d8:10:a4:a3:c6:35:
78:2c:25:32:e1:8f:9b:f5:f1:f7:da:08:21:5b:f5:
fe:17:f1:5a:83:5a:b6:cf:63:7d:49:38:e5:cd:af:
69:82:69:74:e1:38:8c:0b:d9:b1:69:78:81:43:20:
cc:08:99:da:b9:60:c1:1a:25:ad:38:3c:a6:c9:5b:
c4:74:ab:05:f8:9e:3b:56:0f:d6:8b:f6:61:e7:0b:
f6:2e:c9:b3:36:c0:22:6c:10:54:6d:79:77:8c:99:
a5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:74:28:E8:C5:8D:CD:C6:29:55:B7:AE:9D:B6:4A:63:08:E1:96
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/txB0KOjFjc3GKVW3rp22SmMI4ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.29.0/24
5.105.34.0/24
5.105.39.0/24
5.105.124.0/24
5.105.127.0/24
5.105.139.0/24
5.105.157.0/24
5.105.200.0/24
5.105.207.0/24
5.105.216.0/24
5.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2e:d5:71:84:51:2a:99:fe:d1:37:ca:25:b1:78:74:c5:33:
72:2f:b9:0c:81:77:20:f6:12:d2:96:4e:26:76:01:27:fe:e5:
47:8d:5e:a2:b3:f0:fb:a3:7c:28:2a:61:03:1d:f4:06:34:46:
55:3d:0c:f8:af:fe:98:4c:15:ef:4a:34:cc:65:30:df:2a:aa:
09:5b:62:95:7d:de:25:8f:50:ae:7d:c0:69:1e:21:1d:85:f9:
83:86:3e:d9:35:89:cd:d1:5c:91:3e:8b:66:ec:4a:3e:95:1e:
c4:f4:64:30:a8:ef:86:fd:7b:a0:6c:21:c9:57:9a:f5:86:35:
ec:e5:7a:64:e3:f6:e5:38:71:1b:8c:84:6f:86:b0:b6:47:6e:
f2:4a:74:44:c9:e1:6d:77:5c:03:9b:6f:7f:54:a5:11:1a:ad:
a2:28:eb:fe:99:03:1a:de:dd:c2:00:4f:0a:86:0c:94:e9:de:
c4:86:98:9d:cb:b9:f2:14:ec:e9:ca:58:8e:c3:b0:ea:1c:e8:
08:ae:dd:4c:91:dc:1c:1b:42:b7:4c:7e:40:9c:b3:5b:9e:c7:
49:3a:56:39:3b:02:ab:7d:94:88:fb:97:85:a6:f4:06:ca:fe:
16:4f:8c:cb:da:2d:ab:28:32:ef:68:60:12:36:e4:52:5b:6a:
9e:9f:d8:08
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYfqnaS2PcRXPO2SpUsp37c8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNTA1MDYzMzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzEwNzQyOGU4YzU4ZGNkYzYyOTU1YjdhZTlkYjY0YTYzMDhlMTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Rs8qXi3hCbB3lIIGv1cfoRBgcu
IBt6UL3hUAJyPCoMqC+dyh7FhQCnrgWxIAWtlZoOOTHV4WTBnV0k6+MnuMX/iy0C
nPzxQ4RbC7K2UG096aq3ZGsYjI8GRmbDaonRsfWKoi4np1dOXqJ0U99XEVK0h5v2
SpF+MUQ1Y30QrrY6Uw9o2TgtEaroxxeDik7gez8eDXryFoFRxd3U5IbYEKSjxjV4
LCUy4Y+b9fH32gghW/X+F/Fag1q2z2N9STjlza9pgml04TiMC9mxaXiBQyDMCJna
uWDBGiWtODymyVvEdKsF+J47Vg/Wi/Zh5wv2LsmzNsAibBBUbXl3jJml8wIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFLcQdCjoxY3NxilVt66dtkpjCOGWMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvdHhCMEtPakZqYzNHS1ZXM3JwMjJTbU1JNFpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQABWkdAwQA
BWkiAwQABWknAwQABWl8AwQABWl/AwQABWmLAwQABWmdAwQABWnIAwQABWnPAwQA
BWnYAwQABWn5MA0GCSqGSIb3DQEBCwUAA4IBAQBaLtVxhFEqmf7RN8olsXh0xTNy
L7kMgXcg9hLSlk4mdgEn/uVHjV6is/D7o3woKmEDHfQGNEZVPQz4r/6YTBXvSjTM
ZTDfKqoJW2KVfd4lj1CufcBpHiEdhfmDhj7ZNYnN0VyRPotm7Eo+lR7E9GQwqO+G
/XugbCHJV5r1hjXs5Xpk4/blOHEbjIRvhrC2R27ySnREyeFtd1wDm29/VKURGq2i
KOv+mQMa3t3CAE8KhgyU6d7Ehpidy7nyFOzpyliOw7DqHOgIrt1MkdwcG0K3TH5A
nLNbnsdJOlY5OwKrfZSI+5eFpvQGyv4WT4zL2i2rKDLvaGASNuRSW2qen9gI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org