Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vrjXBsUR5TK0XsZLujn6aNcRew4.roa
File: vrjXBsUR5TK0XsZLujn6aNcRew4.roa (raw, json)
Hash identifier: fw1+VGd4Ccf1FWS1OLNtSkAeSy4kkTNX2FLWZPNlo3E=
Subject key identifier: BE:B8:D7:06:C5:11:E5:32:B4:5E:C6:4B:BA:39:FA:68:D7:11:7B:0E
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018A720F384691DCD9643588FDD09BB55B6F
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vrjXBsUR5TK0XsZLujn6aNcRew4.roa
Signing time: Thu 07 Sep 2023 23:51:54 +0000
ROA not before: Thu 07 Sep 2023 23:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204384
IP address blocks: 5.105.123.0/24 maxlen: 24
5.105.122.0/24 maxlen: 24
5.105.131.0/24 maxlen: 24
5.105.127.0/24 maxlen: 24
5.105.139.0/24 maxlen: 24
5.105.138.0/24 maxlen: 24
5.105.136.0/24 maxlen: 24
5.105.134.0/24 maxlen: 24
5.105.142.0/24 maxlen: 24
5.105.157.0/24 maxlen: 24
5.105.164.0/24 maxlen: 24
5.105.162.0/24 maxlen: 24
5.105.84.0/24 maxlen: 24
5.105.115.0/24 maxlen: 24
5.105.240.0/24 maxlen: 24
5.105.239.0/24 maxlen: 24
5.105.244.0/24 maxlen: 24
5.105.245.0/24 maxlen: 24
5.105.253.0/24 maxlen: 24
5.105.187.0/24 maxlen: 24
193.46.210.0/24 maxlen: 24
5.105.197.0/24 maxlen: 24
5.105.203.0/24 maxlen: 24
5.105.207.0/24 maxlen: 24
5.105.16.0/24 maxlen: 24
5.105.21.0/24 maxlen: 24
5.105.18.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.62.0/24 maxlen: 24
5.180.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:72:0f:38:46:91:dc:d9:64:35:88:fd:d0:9b:b5:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Sep 7 23:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beb8d706c511e532b45ec64bba39fa68d7117b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f7:fe:25:6a:a6:25:74:e8:61:d3:8b:64:2f:
f2:94:49:99:4b:e4:8a:76:d0:57:ce:f0:63:f3:96:
3f:13:d0:bf:04:5e:a0:45:a2:ae:dd:43:8d:03:a5:
64:aa:e1:78:04:59:3c:d3:18:c2:cd:5c:25:53:23:
4f:7d:17:91:f3:0e:60:5e:de:2e:3f:1d:b5:f4:55:
db:ba:b3:0b:89:6d:52:40:e7:55:c3:58:a3:ce:3d:
a5:7e:1d:a4:f5:ab:39:3a:18:e5:58:ba:f4:b3:b8:
2b:83:fe:78:51:17:e3:a5:0e:73:fd:ba:53:44:bb:
f2:c6:b9:59:f2:5c:7a:4a:3a:b2:9f:81:a4:20:ea:
ef:5d:b2:87:b1:db:e8:52:84:15:0e:65:1e:ec:48:
86:1a:bc:e5:ab:69:69:a7:f6:f1:1b:13:b8:1e:a2:
d8:54:d9:bb:80:8f:15:e9:0e:7f:40:e7:a0:50:dd:
e6:9e:5c:3b:5c:71:d5:f5:1e:76:ee:e3:a3:75:96:
d9:c2:69:ea:0e:3f:02:20:f4:c7:ab:c7:6f:94:af:
11:0e:1f:5c:01:2d:24:60:d1:4a:a0:c4:1a:7f:9a:
36:46:0d:a3:b4:c6:64:dd:01:37:b0:84:01:bf:89:
16:d3:97:31:2a:cb:eb:9a:f3:4a:e2:9c:92:d6:1d:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B8:D7:06:C5:11:E5:32:B4:5E:C6:4B:BA:39:FA:68:D7:11:7B:0E
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/vrjXBsUR5TK0XsZLujn6aNcRew4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.16.0/24
5.105.18.0/24
5.105.21.0/24
5.105.40.0/24
5.105.50.0/24
5.105.57.0/24
5.105.62.0/24
5.105.84.0/24
5.105.115.0/24
5.105.122.0/23
5.105.127.0/24
5.105.131.0/24
5.105.134.0/24
5.105.136.0/24
5.105.138.0/23
5.105.142.0/24
5.105.157.0/24
5.105.162.0/24
5.105.164.0/24
5.105.187.0/24
5.105.197.0/24
5.105.203.0/24
5.105.207.0/24
5.105.239.0-5.105.240.255
5.105.244.0/23
5.105.253.0/24
5.180.176.0/24
193.46.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:7e:4b:c1:da:c4:65:a7:62:25:d3:f8:ee:9e:22:77:d7:d9:
b5:6e:27:4c:f8:ca:2b:bc:be:a4:ff:46:f0:1e:d0:36:f5:2f:
e7:d6:41:af:3a:3f:93:28:b6:f3:1a:11:66:a9:aa:74:54:62:
cf:e5:55:e8:51:56:b1:42:fb:1c:c1:8a:f8:39:52:60:d0:ea:
7b:51:a5:2b:2e:50:0a:49:af:98:ee:4d:62:ea:21:fc:5c:a9:
0e:6a:dc:d0:dd:97:ea:ba:67:2e:eb:88:2e:18:0d:e5:51:a8:
cf:aa:dd:42:29:67:d5:57:c7:78:b8:6d:a2:98:bd:1e:29:7a:
4a:43:ba:30:62:1f:3b:c2:4e:33:e1:82:15:9a:97:8b:51:a0:
5b:a4:c3:a1:d6:f6:d7:8f:99:d3:b5:62:b7:40:7c:52:0f:38:
fe:20:62:3d:eb:37:2c:e2:a6:2f:d1:04:9d:ad:bd:91:d5:2a:
89:8c:f5:0e:d9:eb:33:b4:ee:d7:d0:04:cd:46:0c:22:53:04:
0f:1d:eb:e6:d0:01:44:1f:7c:a9:4b:a3:67:50:4d:33:35:5e:
c3:4d:f5:af:00:cb:60:f5:1c:70:bc:01:4c:11:a6:4b:11:13:
71:3c:53:dd:8b:0b:98:75:9a:04:80:ce:53:0f:1d:4b:ff:04:
5a:c3:e3:c3
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAYpyDzhGkdzZZDWI/dCbtVtvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwOTA3MjM1MTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWI4ZDcwNmM1MTFlNTMyYjQ1ZWM2NGJiYTM5ZmE2OGQ3MTE3YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlff+JWqmJXToYdOLZC/ylEmZS+SK
dtBXzvBj85Y/E9C/BF6gRaKu3UONA6VkquF4BFk80xjCzVwlUyNPfReR8w5gXt4u
Px219FXburMLiW1SQOdVw1ijzj2lfh2k9as5OhjlWLr0s7grg/54URfjpQ5z/bpT
RLvyxrlZ8lx6Sjqyn4GkIOrvXbKHsdvoUoQVDmUe7EiGGrzlq2lpp/bxGxO4HqLY
VNm7gI8V6Q5/QOegUN3mnlw7XHHV9R527uOjdZbZwmnqDj8CIPTHq8dvlK8RDh9c
AS0kYNFKoMQaf5o2Rg2jtMZk3QE3sIQBv4kW05cxKsvrmvNK4pyS1h3jKwIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFL641wbFEeUytF7GS7o5+mjXEXsOMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvdnJqWEJzVVI1VEswWHNaTHVqbjZhTmNSZXc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAF
aRADBAAFaRIDBAAFaRUDBAAFaSgDBAAFaTIDBAAFaTkDBAAFaT4DBAAFaVQDBAAF
aXMDBAEFaXoDBAAFaX8DBAAFaYMDBAAFaYYDBAAFaYgDBAEFaYoDBAAFaY4DBAAF
aZ0DBAAFaaIDBAAFaaQDBAAFabsDBAAFacUDBAAFacsDBAAFac8wDAMEAAVp7wME
AAVp8AMEAQVp9AMEAAVp/QMEAAW0sAMEAMEu0jANBgkqhkiG9w0BAQsFAAOCAQEA
PH5LwdrEZadiJdP47p4id9fZtW4nTPjKK7y+pP9G8B7QNvUv59ZBrzo/kyi28xoR
ZqmqdFRiz+VV6FFWsUL7HMGK+DlSYNDqe1GlKy5QCkmvmO5NYuoh/FypDmrc0N2X
6rpnLuuILhgN5VGoz6rdQiln1VfHeLhtopi9Hil6SkO6MGIfO8JOM+GCFZqXi1Gg
W6TDodb214+Z07Vit0B8Ug84/iBiPes3LOKmL9EEna29kdUqiYz1DtnrM7Tu19AE
zUYMIlMEDx3r5tABRB98qUujZ1BNMzVew031rwDLYPUccLwBTBGmSxETcTxT3YsL
mHWaBIDOUw8dS/8EWsPjww==
Generated at Mon Sep 11 20:04:10 2023 by rpki-client on console-fra.rpki-client.org