Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uxFmkOYqPAIaRK5YGTVUwAxOiiw.roa
File: uxFmkOYqPAIaRK5YGTVUwAxOiiw.roa (raw, json)
Hash identifier: ADnpXXTGgBLXAerpyfPJt2Rlp7B6nFLYErL2Y/XxqUg=
Subject key identifier: BB:11:66:90:E6:2A:3C:02:1A:44:AE:58:19:35:54:C0:0C:4E:8A:2C
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5A3EEDA0C634CB5B46904DC02EFFA
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uxFmkOYqPAIaRK5YGTVUwAxOiiw.roa
Signing time: Sun 01 Jan 2023 05:54:49 +0000
ROA not before: Sun 01 Jan 2023 05:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 5.105.16.0/24 maxlen: 24
5.105.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:a3:ee:da:0c:63:4c:b5:b4:69:04:dc:02:ef:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb116690e62a3c021a44ae58193554c00c4e8a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:c7:dc:d1:3e:27:31:07:2c:48:9e:2f:3e:
d8:68:68:39:e2:64:b3:2f:fd:7b:a9:da:98:6f:22:
73:5c:47:75:24:d9:bb:9d:15:4f:64:1c:e6:a7:97:
5a:cc:f8:28:1c:bf:d6:f2:f3:12:7d:28:33:b6:7d:
7f:e4:af:d3:a0:ea:f9:bb:53:5a:df:42:5b:ac:55:
f4:62:6c:c5:3c:e8:1f:19:51:ee:b2:3a:ce:6b:70:
2a:7b:97:b1:50:a5:ec:3a:60:8e:16:c7:0f:aa:2b:
76:6a:f3:28:2a:91:5e:83:45:5f:81:61:c2:a6:cc:
70:5a:48:42:8f:b0:51:67:e7:d6:5c:82:16:ad:d0:
40:7b:d4:39:2a:6d:72:4f:cc:7d:cf:f2:33:2f:80:
78:dc:e6:83:bb:8d:ab:81:57:41:69:2a:39:30:a0:
d7:72:a8:47:26:1d:6d:fa:eb:ae:ba:28:8a:8c:f9:
89:35:c8:8b:b3:93:18:dd:6a:ad:37:bd:28:dc:48:
35:b2:20:67:a4:58:61:bf:19:ff:19:94:85:2c:82:
89:a0:67:d6:d9:e6:14:90:aa:a8:aa:41:cc:3a:eb:
d6:f1:e3:86:0e:61:8e:27:e8:ca:61:67:21:77:e8:
55:a4:a8:02:db:f5:78:81:da:65:23:6e:f3:fc:4c:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:11:66:90:E6:2A:3C:02:1A:44:AE:58:19:35:54:C0:0C:4E:8A:2C
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/uxFmkOYqPAIaRK5YGTVUwAxOiiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ff:e8:45:d3:0d:e7:22:3b:33:00:b1:a2:e0:04:61:cb:e2:
1b:8f:47:d4:6a:06:ca:2e:2a:1b:ef:bb:04:d7:aa:60:05:b2:
64:ec:e5:26:5d:1e:cf:10:f7:97:30:0f:5c:c7:10:aa:5c:d9:
73:de:31:89:3a:40:1e:7a:88:70:e6:dd:46:e0:a6:f0:48:db:
f8:39:66:1b:29:da:eb:f6:1f:cf:5b:b4:b5:73:13:53:4d:81:
ce:5a:05:ae:53:c3:6e:d1:ee:aa:61:ee:fa:d1:63:4f:ca:db:
20:a5:ed:76:5c:12:27:53:6a:d5:20:7f:76:53:28:c9:7c:dd:
49:4c:00:97:88:db:fc:60:64:e7:07:b4:11:12:2d:1f:b1:79:
cc:73:a9:e5:c3:3b:1a:94:76:ce:ac:47:ae:fe:52:d0:c7:06:
89:d3:1e:d8:4a:99:3e:6b:30:cd:77:4a:ad:3d:a6:2e:c5:fd:
69:4e:7f:66:f4:6a:46:24:d8:79:b2:24:48:e6:c5:3f:4e:74:
89:af:80:50:fb:a4:e4:dc:c8:d9:36:af:71:98:cb:12:1b:4e:
06:d4:96:53:63:70:5e:59:f8:d5:88:a9:64:97:fb:99:48:75:
9a:4f:c6:9e:eb:38:d0:1d:61:d9:b4:a9:90:97:0e:63:bc:50:
2d:d4:35:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVr5aPu2gxjTLW0aQTcAu/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTAxMDU1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjExNjY5MGU2MmEzYzAyMWE0NGFlNTgxOTM1NTRjMDBjNGU4YTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspTH3NE+JzEHLEieLz7YaGg54mSz
L/17qdqYbyJzXEd1JNm7nRVPZBzmp5dazPgoHL/W8vMSfSgztn1/5K/ToOr5u1Na
30JbrFX0YmzFPOgfGVHusjrOa3Aqe5exUKXsOmCOFscPqit2avMoKpFeg0VfgWHC
psxwWkhCj7BRZ+fWXIIWrdBAe9Q5Km1yT8x9z/IzL4B43OaDu42rgVdBaSo5MKDX
cqhHJh1t+uuuuiiKjPmJNciLs5MY3WqtN70o3Eg1siBnpFhhvxn/GZSFLIKJoGfW
2eYUkKqoqkHMOuvW8eOGDmGOJ+jKYWchd+hVpKgC2/V4gdplI27z/ExvyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLsRZpDmKjwCGkSuWBk1VMAMToosMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvdXhGbWtPWXFQQUlhUks1WUdUVlV3QXhPaWl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWkQAwQA
BWkUMA0GCSqGSIb3DQEBCwUAA4IBAQBv/+hF0w3nIjszALGi4ARhy+Ibj0fUagbK
Liob77sE16pgBbJk7OUmXR7PEPeXMA9cxxCqXNlz3jGJOkAeeohw5t1G4KbwSNv4
OWYbKdrr9h/PW7S1cxNTTYHOWgWuU8Nu0e6qYe760WNPytsgpe12XBInU2rVIH92
UyjJfN1JTACXiNv8YGTnB7QREi0fsXnMc6nlwzsalHbOrEeu/lLQxwaJ0x7YSpk+
azDNd0qtPaYuxf1pTn9m9GpGJNh5siRI5sU/TnSJr4BQ+6Tk3MjZNq9xmMsSG04G
1JZTY3BeWfjViKlkl/uZSHWaT8ae6zjQHWHZtKmQlw5jvFAt1DV5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org