Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5yL6GCRpWbtDfPRnHzhUzv0WBMs.roa
File: 5yL6GCRpWbtDfPRnHzhUzv0WBMs.roa (raw, json)
Hash identifier: eCeRzyRRpALtUa3/Iki245RUZkOeoMavhhucJ3Rd+4c=
Subject key identifier: E7:22:FA:18:24:69:59:BB:43:7C:F4:67:1F:38:54:CE:FD:16:04:CB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188E94E39C98B1EE487628393E851467DA5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5yL6GCRpWbtDfPRnHzhUzv0WBMs.roa
Signing time: Fri 23 Jun 2023 17:29:57 +0000
ROA not before: Fri 23 Jun 2023 17:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e9:4e:39:c9:8b:1e:e4:87:62:83:93:e8:51:46:7d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 23 17:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e722fa18246959bb437cf4671f3854cefd1604cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:06:37:7b:b4:52:2b:a7:f4:da:48:52:06:c3:
37:71:82:a7:8f:5c:5b:7b:66:ae:2f:fe:2c:22:ed:
e5:00:b9:6a:e6:e2:94:b7:67:59:43:39:16:56:cb:
17:49:74:ce:67:58:f0:5a:f6:84:a4:7a:ee:20:71:
f3:b4:ce:98:b0:0b:78:30:67:7d:16:f0:8f:07:64:
dd:b3:47:f8:2b:db:c7:aa:cb:56:9d:f6:4a:0f:ec:
94:47:a8:30:fa:fd:f4:75:5f:7d:c1:e5:c3:d4:1b:
df:8e:4f:c9:3c:2f:0c:52:c1:9f:20:8d:f5:dd:4a:
d0:0c:3c:02:66:91:d7:1f:50:7f:49:f3:e2:2a:ae:
d6:1d:37:4e:ee:7f:2f:32:1e:87:d8:6c:d6:3e:d0:
9b:e7:77:73:4c:fe:a3:b0:dd:db:e1:f9:25:5e:72:
64:68:1a:3f:b8:af:db:43:0b:03:7d:c9:ff:95:fd:
0d:aa:ea:59:60:97:bd:eb:4d:13:99:d9:a4:11:b1:
22:69:d2:b2:a6:a8:97:90:1d:47:35:a2:ac:90:f9:
46:68:74:20:c2:45:3a:4f:14:11:8e:a5:3e:3d:7d:
0c:cf:df:57:b7:c4:db:82:1f:d0:66:f3:2f:1f:a6:
47:72:a5:7e:09:f5:dd:dc:11:0e:7c:c1:e4:ff:9b:
84:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:FA:18:24:69:59:BB:43:7C:F4:67:1F:38:54:CE:FD:16:04:CB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5yL6GCRpWbtDfPRnHzhUzv0WBMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.127.0/24
163.5.130.0/24
163.5.136.0/24
163.5.138.0/24
163.5.161.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/24
163.5.230.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cc:0e:ab:5c:a4:2a:3a:3a:4e:36:4f:e9:29:b4:59:36:c3:
a7:98:3e:cf:43:e4:76:f7:f8:e1:73:43:52:6d:5b:4e:77:85:
23:5e:0f:98:b0:ab:84:98:ff:16:87:c4:18:63:52:38:8a:d3:
9b:e7:ed:82:bf:f5:ef:16:b4:82:84:79:5e:be:a1:83:eb:76:
72:3c:ae:5b:e2:45:6b:64:cc:95:ab:a9:ec:f1:a7:38:1a:25:
f3:22:e6:77:7c:fc:f6:4b:89:fe:35:57:72:8c:4b:f3:fc:de:
13:f1:ea:79:1f:66:f6:32:0b:54:04:47:b0:c2:b2:68:4f:2d:
50:fd:22:f5:39:35:24:84:d1:8b:76:0f:5b:96:f5:f2:dd:81:
a9:b5:f0:95:56:0a:6e:a1:6d:f9:e1:d9:84:39:28:8a:b2:81:
f6:a3:dd:57:d4:d8:6a:e3:50:0c:ce:e8:06:71:97:76:f7:9f:
a2:35:19:08:51:73:11:8d:f3:5b:08:23:6f:60:8c:c3:d4:7e:
17:61:a8:ef:7d:d3:f0:5b:6a:e2:de:9c:20:ce:3b:a6:6f:cb:
16:58:f4:c3:51:32:64:f7:53:66:c5:08:25:0c:c5:ee:e2:4a:
34:c2:f8:d8:01:d0:53:74:cb:1d:ce:f8:de:3b:e0:75:0f:cc:
9d:9b:8c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org