Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-Lk69UGkXsuOa7_l0CYQRqMdyUE.roa
File: 1-Lk69UGkXsuOa7_l0CYQRqMdyUE.roa (raw, json)
Hash identifier: BM/7JMx1FD8keUJz3bQ20NqMDL7GqCVX7Lru8On7Isw=
Subject key identifier: F8:B9:3A:F5:41:A4:5E:CB:8E:6B:BF:E5:D0:26:10:46:A3:1D:C9:41
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01881482BEF4BEA4A47DB110CD9F1ABAD588
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-Lk69UGkXsuOa7_l0CYQRqMdyUE.roa
Signing time: Sat 13 May 2023 09:48:12 +0000
ROA not before: Sat 13 May 2023 09:48:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204968
IP address blocks: 163.5.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 14:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:82:be:f4:be:a4:a4:7d:b1:10:cd:9f:1a:ba:d5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 13 09:48:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8b93af541a45ecb8e6bbfe5d0261046a31dc941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:32:7e:54:db:80:86:a5:d8:24:a0:9f:1f:72:
58:a8:0b:13:eb:d8:80:d9:88:f4:42:5e:de:d9:d3:
68:4b:7a:df:a1:87:55:53:bc:c4:de:e7:f6:cc:c8:
e9:7a:29:97:14:a0:bd:8f:00:29:c2:02:2d:3d:49:
4b:4e:53:d4:53:15:49:4a:ad:d5:2d:57:37:29:ef:
87:93:42:a9:c2:79:bd:04:1c:08:04:b6:a3:9c:5c:
8f:42:dd:4f:80:e7:67:87:c1:be:8b:17:7d:33:57:
31:5e:cd:8d:c5:27:6b:f2:c6:ab:c0:bd:7e:4b:ab:
19:9d:8f:62:11:06:b1:67:be:c4:31:06:bf:54:dd:
4f:39:a2:d8:0c:10:45:27:af:26:fb:d3:88:17:7f:
75:50:1c:ac:c4:ea:2f:d6:c5:09:ba:54:27:46:f1:
78:9d:ed:75:9b:c9:a8:2b:25:bb:75:e4:4e:f0:39:
30:f0:32:96:cc:b2:18:50:98:fe:36:b2:df:c7:02:
87:ef:b7:90:83:a7:ed:4f:f5:ea:b0:b1:d1:d9:d6:
0c:83:8a:0f:3c:19:37:5a:49:f5:44:50:75:ab:3e:
fd:be:ba:f8:0e:3d:3b:45:65:1e:0f:94:55:ee:d0:
c7:48:83:bf:e7:77:2a:ba:ec:be:65:f6:b9:9d:42:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B9:3A:F5:41:A4:5E:CB:8E:6B:BF:E5:D0:26:10:46:A3:1D:C9:41
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-Lk69UGkXsuOa7_l0CYQRqMdyUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
92:1f:de:4e:47:81:67:f2:9b:11:80:f1:51:c4:aa:d9:1a:65:
5b:59:7b:be:ef:cf:9e:3f:a6:93:13:5c:63:73:87:39:7d:32:
7c:1e:12:53:40:09:72:67:dc:1c:98:dc:c3:10:81:40:ce:c9:
9e:bb:15:98:fb:63:2b:76:fe:fb:eb:1b:20:21:3a:e4:0a:74:
46:33:d5:0e:13:2c:1a:d0:78:38:0e:8a:42:71:03:b4:be:34:
2e:f4:e5:13:0c:e6:6a:5a:83:90:40:9a:d1:78:a9:c6:a3:43:
2f:5b:f3:10:4a:b2:9f:a8:97:73:2a:d3:11:3b:04:28:0d:0e:
35:d3:6c:5f:b8:a0:1d:cd:74:bd:7c:dd:81:24:ab:d6:58:a4:
79:17:27:01:a7:d9:dc:8d:67:0b:bb:e1:c4:64:4f:63:3d:74:
ea:b5:1a:29:e7:ca:ee:8a:ad:eb:05:a0:c4:9b:8d:25:bd:63:
93:f9:1e:c1:bd:51:cb:aa:4a:65:90:55:ad:43:62:5f:ea:e9:
17:0b:f1:3b:d6:ea:57:54:62:0c:f1:d5:d4:58:12:a2:de:34:
5c:4c:5c:67:a7:40:ce:89:37:38:9f:e3:69:0c:ba:67:8f:16:
f3:50:10:a0:f4:68:98:85:38:60:36:34:34:e2:0c:27:42:5e:
91:22:70:87
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYgUgr70vqSkfbEQzZ8autWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNTEzMDk0ODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGI5M2FmNTQxYTQ1ZWNiOGU2YmJmZTVkMDI2MTA0NmEzMWRjOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTJ+VNuAhqXYJKCfH3JYqAsT69iA
2Yj0Ql7e2dNoS3rfoYdVU7zE3uf2zMjpeimXFKC9jwApwgItPUlLTlPUUxVJSq3V
LVc3Ke+Hk0Kpwnm9BBwIBLajnFyPQt1PgOdnh8G+ixd9M1cxXs2NxSdr8sarwL1+
S6sZnY9iEQaxZ77EMQa/VN1POaLYDBBFJ68m+9OIF391UBysxOov1sUJulQnRvF4
ne11m8moKyW7deRO8Dkw8DKWzLIYUJj+NrLfxwKH77eQg6ftT/XqsLHR2dYMg4oP
PBk3Wkn1RFB1qz79vrr4Dj07RWUeD5RV7tDHSIO/53cquuy+Zfa5nULeuwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPi5OvVBpF7Ljmu/5dAmEEajHclBMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMS1MazY5VUdrWHN1T2E3X2wwQ1lRUnFNZHlVRS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw
MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKMF1TAN
BgkqhkiG9w0BAQsFAAOCAQEAkh/eTkeBZ/KbEYDxUcSq2RplW1l7vu/Pnj+mkxNc
Y3OHOX0yfB4SU0AJcmfcHJjcwxCBQM7JnrsVmPtjK3b+++sbICE65Ap0RjPVDhMs
GtB4OA6KQnEDtL40LvTlEwzmalqDkECa0XipxqNDL1vzEEqyn6iXcyrTETsEKA0O
NdNsX7igHc10vXzdgSSr1likeRcnAafZ3I1nC7vhxGRPYz106rUaKefK7oqt6wWg
xJuNJb1jk/kewb1Ry6pKZZBVrUNiX+rpFwvxO9bqV1RiDPHV1FgSot40XExcZ6dA
zok3OJ/jaQy6Z48W81AQoPRomIU4YDY0NOIMJ0JekSJwhw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:27 2024 by rpki-client on console-ams.rpki-client.org