Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xfQXUroz04kgNq6cgbw7UlUeMMc.roa
File: xfQXUroz04kgNq6cgbw7UlUeMMc.roa (raw, json)
Hash identifier: X25SwHvlosTEmyRliZfIEvrGKCGhzNDJZ7dO7PMro1M=
Subject key identifier: C5:F4:17:52:BA:33:D3:89:20:36:AE:9C:81:BC:3B:52:55:1E:30:C7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 0188D92B78A4AAF0067A7CF276791BA060FE
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xfQXUroz04kgNq6cgbw7UlUeMMc.roa
Signing time: Tue 20 Jun 2023 14:18:04 +0000
ROA not before: Tue 20 Jun 2023 14:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 5.105.24.0/24 maxlen: 24
5.105.25.0/24 maxlen: 24
5.105.33.0/24 maxlen: 24
5.105.40.0/24 maxlen: 24
5.105.43.0/24 maxlen: 24
5.105.50.0/24 maxlen: 24
5.105.57.0/24 maxlen: 24
5.105.168.0/24 maxlen: 24
5.105.81.0/24 maxlen: 24
5.105.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d9:2b:78:a4:aa:f0:06:7a:7c:f2:76:79:1b:a0:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jun 20 14:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5f41752ba33d3892036ae9c81bc3b52551e30c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:84:01:17:7f:8f:df:de:63:67:9f:bb:23:
5c:9f:8e:f2:2d:4d:b6:22:d8:73:8b:ff:c2:42:f9:
03:e8:e9:05:b4:c4:8c:56:71:90:14:a9:4b:ed:d4:
0b:de:f3:be:b3:76:63:16:9e:1e:a6:52:24:da:0b:
b0:65:47:10:73:8d:a8:f7:05:3f:c0:69:a8:99:04:
d9:f7:1d:3a:bd:44:27:d8:f7:09:0d:e6:f7:64:43:
c3:cd:8c:ab:9d:ce:35:78:85:08:c8:4a:06:91:24:
6e:e6:8a:b3:4c:12:09:2e:89:ed:0b:a2:38:20:e5:
82:e8:a2:a4:19:e1:53:d0:e9:cb:18:b9:d1:1f:05:
30:fc:ee:5f:45:12:9e:25:7f:49:ab:a8:cd:4e:49:
56:23:93:0a:dd:b6:36:e6:64:da:7f:08:a3:a8:0d:
36:c7:94:87:f5:17:77:dd:36:e1:08:7e:26:65:9e:
01:40:e9:29:0b:d9:bb:51:97:ed:0a:52:a6:17:14:
10:52:97:dd:96:9b:fc:c2:0e:fa:ab:56:75:4e:92:
96:73:0b:90:1b:2a:2c:bb:3f:e0:03:7e:8d:97:f8:
7b:20:a3:8f:49:8e:34:dc:e5:3b:50:c9:4d:a1:1e:
7b:9d:ab:fe:20:88:ec:e0:3b:3f:ff:87:74:64:40:
09:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F4:17:52:BA:33:D3:89:20:36:AE:9C:81:BC:3B:52:55:1E:30:C7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/xfQXUroz04kgNq6cgbw7UlUeMMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.24.0/23
5.105.33.0/24
5.105.40.0/24
5.105.43.0/24
5.105.50.0/24
5.105.57.0/24
5.105.81.0/24
5.105.96.0/24
5.105.168.0/24
Signature Algorithm: sha256WithRSAEncryption
61:85:2b:d6:a8:70:7f:a0:52:c8:bd:9d:7b:2f:29:a7:14:3f:
b5:79:5d:b1:42:c6:38:f8:6f:95:c2:2f:38:f2:38:dc:57:f3:
f0:30:a1:ec:81:97:78:91:4a:7c:81:e0:a8:67:af:3a:d8:5e:
b0:5a:4b:04:bb:76:2e:db:60:75:7d:b9:cf:db:24:d2:1d:33:
11:ca:5b:0f:4e:19:20:b5:b0:f0:55:ad:6a:4a:55:f4:1b:01:
4d:0b:20:29:2d:56:63:33:78:81:b9:e1:6d:91:40:cb:dd:48:
6e:ff:57:97:8d:37:14:7a:99:b8:cb:c9:0b:11:a2:5e:55:08:
95:03:cf:db:d9:ab:78:0e:72:22:93:44:6e:a8:8d:6b:84:cb:
9a:71:f4:62:54:b9:5c:af:68:de:96:58:bc:58:f9:db:2a:f8:
40:47:90:a7:cc:4f:0f:d6:00:b8:b7:df:21:88:b4:a8:34:99:
8c:0c:f6:ce:36:aa:80:7a:f6:40:a6:a9:ce:95:f7:68:d1:a3:
4f:98:40:e8:74:e4:c4:44:35:88:50:15:19:9a:26:d0:d9:cb:
c8:1a:8b:10:69:81:6a:cc:c9:ab:71:c1:98:e6:97:39:eb:8e:
96:3c:b5:35:be:b0:b1:c9:2f:96:26:0a:26:31:a6:9f:b8:37:
4f:30:b1:f7
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYjZK3ikqvAGenzydnkboGD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNjIwMTQxODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWY0MTc1MmJhMzNkMzg5MjAzNmFlOWM4MWJjM2I1MjU1MWUzMGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8aEARd/j9/eY2efuyNcn47yLU22
Ithzi//CQvkD6OkFtMSMVnGQFKlL7dQL3vO+s3ZjFp4eplIk2guwZUcQc42o9wU/
wGmomQTZ9x06vUQn2PcJDeb3ZEPDzYyrnc41eIUIyEoGkSRu5oqzTBIJLontC6I4
IOWC6KKkGeFT0OnLGLnRHwUw/O5fRRKeJX9Jq6jNTklWI5MK3bY25mTafwijqA02
x5SH9Rd33TbhCH4mZZ4BQOkpC9m7UZftClKmFxQQUpfdlpv8wg76q1Z1TpKWcwuQ
Gyosuz/gA36Nl/h7IKOPSY403OU7UMlNoR57nav+IIjs4Ds//4d0ZEAJjwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFMX0F1K6M9OJIDaunIG8O1JVHjDHMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEveGZRWFVyb3owNGtnTnE2Y2didzdVbFVlTU1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBBWkYAwQA
BWkhAwQABWkoAwQABWkrAwQABWkyAwQABWk5AwQABWlRAwQABWlgAwQABWmoMA0G
CSqGSIb3DQEBCwUAA4IBAQBhhSvWqHB/oFLIvZ17LymnFD+1eV2xQsY4+G+Vwi84
8jjcV/PwMKHsgZd4kUp8geCoZ6862F6wWksEu3Yu22B1fbnP2yTSHTMRylsPThkg
tbDwVa1qSlX0GwFNCyApLVZjM3iBueFtkUDL3Uhu/1eXjTcUepm4y8kLEaJeVQiV
A8/b2at4DnIik0RuqI1rhMuacfRiVLlcr2jelli8WPnbKvhAR5CnzE8P1gC4t98h
iLSoNJmMDPbONqqAevZApqnOlfdo0aNPmEDodOTERDWIUBUZmibQ2cvIGosQaYFq
zMmrccGY5pc5646WPLU1vrCxyS+WJgomMaafuDdPMLH3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:19 2023 by rpki-client on console-fra.rpki-client.org