Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yhCv1Oqwyc36FFpV8G3ORBcAc_c.roa
File: yhCv1Oqwyc36FFpV8G3ORBcAc_c.roa (raw, json)
Hash identifier: oz4R+ZKgp1xlRuaWfjWf92JStSeUJIRMl3vY2YZXFuU=
Subject key identifier: CA:10:AF:D4:EA:B0:C9:CD:FA:14:5A:55:F0:6D:CE:44:17:00:73:F7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01856BE5B8F3C38F5E69011C0D30E8AF078B
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yhCv1Oqwyc36FFpV8G3ORBcAc_c.roa
Signing time: Sun 01 Jan 2023 05:54:55 +0000
ROA not before: Sun 01 Jan 2023 05:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 5.105.104.0/24 maxlen: 24
5.105.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b8:f3:c3:8f:5e:69:01:1c:0d:30:e8:af:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Jan 1 05:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca10afd4eab0c9cdfa145a55f06dce44170073f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:10:e5:cc:9a:90:ee:e1:d3:e5:33:9c:5c:52:
f9:2b:39:be:2e:3a:6b:bb:64:f5:33:18:8b:86:88:
74:70:7c:be:f6:df:69:e8:28:98:cd:26:99:0c:75:
f0:43:d1:c7:cd:9b:94:13:3a:76:20:5b:de:58:4c:
ba:e0:3c:26:90:5d:9a:07:3e:37:80:47:a7:7b:b1:
36:35:fd:15:ff:90:30:26:ea:e4:06:cb:3c:8b:e6:
1b:39:56:85:77:c6:b5:3e:17:79:6f:3b:e8:53:df:
c5:d0:ab:93:1a:c4:f0:36:a5:ea:e6:6f:d2:ac:3f:
2e:63:0a:95:59:27:88:c2:82:d4:1f:44:24:af:dc:
37:ff:70:33:fa:6e:bb:0e:58:5c:f9:6a:d3:34:66:
56:4d:fd:b2:26:6d:92:10:2e:02:71:78:b1:92:f7:
d0:5f:cd:44:33:86:28:bb:20:c2:82:18:82:41:b8:
fc:9a:61:90:91:58:ee:d5:b9:dc:8d:5a:da:8a:ab:
05:98:bb:b5:d1:75:94:c4:23:6b:48:a3:ae:9b:64:
93:8e:e8:87:34:5b:c3:7e:fd:db:7e:dc:37:46:85:
57:24:99:78:40:77:1a:56:51:8f:e2:45:1a:61:43:
b1:c9:23:9a:de:54:6c:f8:46:fd:9f:c5:db:49:54:
b2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:AF:D4:EA:B0:C9:CD:FA:14:5A:55:F0:6D:CE:44:17:00:73:F7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/yhCv1Oqwyc36FFpV8G3ORBcAc_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.100.0/24
5.105.104.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:6b:49:1c:78:85:e7:d4:a3:ce:5b:84:3b:ab:72:04:f3:6b:
da:a4:01:74:a7:29:04:18:23:c2:95:3f:08:c0:61:d9:90:d3:
9f:28:e3:3a:1e:55:9a:9f:77:f9:72:fc:0f:cf:86:be:dc:1e:
5e:be:c7:72:32:9e:0e:a7:46:e4:c5:16:88:45:e0:79:6d:ac:
f0:72:a0:b3:e0:11:de:04:5d:0e:78:14:89:06:57:8f:c3:4c:
ae:3c:07:ce:51:64:2a:4f:48:05:b7:44:e5:2d:5d:7e:93:67:
29:45:c5:57:89:98:bf:60:ce:64:85:b5:d9:10:9c:51:e6:a5:
74:dd:71:01:47:21:0c:2e:2c:11:b9:cd:93:70:7a:28:42:c4:
f9:6f:49:4d:26:bd:95:81:b7:0b:0f:9e:2b:b7:8d:49:b6:d0:
1e:e1:6b:a8:f1:b1:f5:5d:54:d1:04:d8:8e:d9:59:4c:6c:3a:
d2:f5:f5:78:bf:46:71:99:ed:6e:6a:8f:38:95:47:34:4d:f3:
fa:43:84:60:c9:db:f8:42:e9:a8:81:58:55:6c:60:13:e7:07:
2d:d7:71:61:14:07:82:ab:95:8a:93:10:ab:81:b4:23:f4:28:
c3:c4:28:18:db:88:4c:35:f5:b5:ae:27:9a:77:36:e6:ec:21:
f0:cc:8f:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVr5bjzw49eaQEcDTDorweLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwMTAxMDU1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTEwYWZkNGVhYjBjOWNkZmExNDVhNTVmMDZkY2U0NDE3MDA3M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhDlzJqQ7uHT5TOcXFL5Kzm+Ljpr
u2T1MxiLhoh0cHy+9t9p6CiYzSaZDHXwQ9HHzZuUEzp2IFveWEy64DwmkF2aBz43
gEene7E2Nf0V/5AwJurkBss8i+YbOVaFd8a1Phd5bzvoU9/F0KuTGsTwNqXq5m/S
rD8uYwqVWSeIwoLUH0Qkr9w3/3Az+m67Dlhc+WrTNGZWTf2yJm2SEC4CcXixkvfQ
X81EM4YouyDCghiCQbj8mmGQkVju1bncjVraiqsFmLu10XWUxCNrSKOum2STjuiH
NFvDfv3bftw3RoVXJJl4QHcaVlGP4kUaYUOxySOa3lRs+Eb9n8XbSVSyXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMoQr9TqsMnN+hRaVfBtzkQXAHP3MB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEveWhDdjFPcXd5YzM2RkZwVjhHM09SQmNBY19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABWlkAwQA
BWloMA0GCSqGSIb3DQEBCwUAA4IBAQDJa0kceIXn1KPOW4Q7q3IE82vapAF0pykE
GCPClT8IwGHZkNOfKOM6HlWan3f5cvwPz4a+3B5evsdyMp4Op0bkxRaIReB5bazw
cqCz4BHeBF0OeBSJBlePw0yuPAfOUWQqT0gFt0TlLV1+k2cpRcVXiZi/YM5khbXZ
EJxR5qV03XEBRyEMLiwRuc2TcHooQsT5b0lNJr2VgbcLD54rt41JttAe4Wuo8bH1
XVTRBNiO2VlMbDrS9fV4v0Zxme1uao84lUc0TfP6Q4Rgydv4QumogVhVbGAT5wct
13FhFAeCq5WKkxCrgbQj9CjDxCgY24hMNfW1rieadzbm7CHwzI8g
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:01 2023 by rpki-client on console-ams.rpki-client.org