Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/93Sm2kpr-WZl7T1MM5aHbdbFFpM.roa
File: 93Sm2kpr-WZl7T1MM5aHbdbFFpM.roa (raw, json)
Hash identifier: z/0wPOwTTo7QM6SI2hQKSt0KnDUurK5WcH/47/UawDM=
Subject key identifier: F7:74:A6:DA:4A:6B:F9:66:65:ED:3D:4C:33:96:87:6D:D6:C5:16:93
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C3745FE34C456128F942309F021F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/93Sm2kpr-WZl7T1MM5aHbdbFFpM.roa
Signing time: Mon 02 Jan 2023 02:15:01 +0000
ROA not before: Mon 02 Jan 2023 02:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 163.5.103.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 10:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c3:74:5f:e3:4c:45:61:28:f9:42:30:9f:02:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f774a6da4a6bf96665ed3d4c3396876dd6c51693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:09:18:72:ea:08:8d:53:e4:78:01:b5:f8:a5:
6f:40:39:6e:2b:cb:3f:9b:45:1e:9b:96:82:55:74:
16:bb:f4:38:c1:e6:78:a7:98:04:1b:af:25:91:61:
fe:4d:e4:66:b8:2c:4b:89:dc:f9:73:24:1d:d9:3b:
9e:0f:4a:2d:47:7a:f7:af:7e:89:bf:30:16:67:c1:
11:78:06:3d:44:2a:07:7f:ca:ec:79:82:ef:1a:c3:
00:03:6b:0c:e9:22:74:d6:06:86:bb:83:f3:5b:41:
99:c3:0a:16:d6:d4:71:2f:cc:60:ca:1c:c6:13:65:
4c:d2:1e:8e:a1:63:1a:96:55:4e:40:d0:76:c1:a7:
cc:08:19:19:70:d8:ad:e2:e2:94:be:23:9d:9f:7f:
ef:b3:28:90:38:cd:2b:33:a6:a5:f0:a0:38:25:68:
f1:22:e8:6b:e0:f8:52:57:f6:64:2c:3a:99:92:23:
46:f4:a2:af:70:54:8f:2a:59:c7:57:6c:10:f4:d0:
ca:d1:33:df:55:29:8f:5b:11:3c:7a:74:57:83:b9:
5b:f2:a6:d4:14:d5:f4:7d:c4:83:62:91:5d:7e:77:
6e:e8:1e:e9:78:9f:36:06:f4:f9:af:a7:fc:ea:eb:
67:01:b5:57:7d:dd:d0:8d:c6:2a:6e:e8:49:69:ea:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:74:A6:DA:4A:6B:F9:66:65:ED:3D:4C:33:96:87:6D:D6:C5:16:93
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/93Sm2kpr-WZl7T1MM5aHbdbFFpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.103.0/24
163.5.109.0/24
163.5.235.0/24
Signature Algorithm: sha256WithRSAEncryption
55:07:96:49:7f:c9:e0:b1:ff:66:3b:24:f6:41:10:e4:ec:0a:
c7:77:ab:f0:c5:36:23:21:63:10:62:f9:73:fa:39:c4:02:3b:
36:67:08:52:bc:a1:3a:5c:51:30:be:7c:f5:c6:cc:54:a7:8a:
37:e1:c5:b5:6a:1a:15:73:d7:b3:c0:12:9b:de:36:64:fe:1a:
cb:a6:ff:16:b4:5b:66:3e:04:0c:78:0b:2d:28:36:f0:28:5b:
1b:00:b0:9b:6b:26:46:75:d5:40:05:92:a5:5f:0c:f0:ec:b5:
9d:66:01:75:f4:69:f6:ec:b5:9a:f0:ef:7d:30:39:7a:0e:c4:
e2:4e:2c:a3:d4:30:ea:e7:98:2a:e2:39:1e:7c:22:eb:b8:19:
40:1f:7b:2a:c7:1c:9e:68:c8:d7:26:ad:c4:52:30:01:8b:8e:
a0:f1:cc:b9:28:d4:72:d5:f8:f1:52:d1:51:48:a2:0e:d8:27:
44:1c:07:ac:8e:7d:e8:db:cd:38:70:a4:39:dd:9e:15:93:e3:
d3:7d:df:3a:2d:70:a8:13:6d:c9:63:a3:35:93:c6:28:19:26:
e9:a6:bf:70:3c:64:29:e2:cf:d0:cc:b4:ce:67:80:8d:32:b0:
bf:6c:b7:53:57:fe:8d:66:a9:0e:f3:9b:cb:b1:c7:df:99:6d:
74:fe:58:94
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwQsN0X+NMRWEo+UIwnwIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTAyMDIxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzc0YTZkYTRhNmJmOTY2NjVlZDNkNGMzMzk2ODc2ZGQ2YzUxNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwkYcuoIjVPkeAG1+KVvQDluK8s/
m0Uem5aCVXQWu/Q4weZ4p5gEG68lkWH+TeRmuCxLidz5cyQd2TueD0otR3r3r36J
vzAWZ8EReAY9RCoHf8rseYLvGsMAA2sM6SJ01gaGu4PzW0GZwwoW1tRxL8xgyhzG
E2VM0h6OoWMallVOQNB2wafMCBkZcNit4uKUviOdn3/vsyiQOM0rM6al8KA4JWjx
Iuhr4PhSV/ZkLDqZkiNG9KKvcFSPKlnHV2wQ9NDK0TPfVSmPWxE8enRXg7lb8qbU
FNX0fcSDYpFdfndu6B7peJ82BvT5r6f86utnAbVXfd3QjcYqbuhJaeokGQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPd0ptpKa/lmZe09TDOWh23WxRaTMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvOTNTbTJrcHItV1psN1QxTU01YUhiZGJGRnBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVnAwQA
owVtAwQAowXrMA0GCSqGSIb3DQEBCwUAA4IBAQBVB5ZJf8ngsf9mOyT2QRDk7ArH
d6vwxTYjIWMQYvlz+jnEAjs2ZwhSvKE6XFEwvnz1xsxUp4o34cW1ahoVc9ezwBKb
3jZk/hrLpv8WtFtmPgQMeAstKDbwKFsbALCbayZGddVABZKlXwzw7LWdZgF19Gn2
7LWa8O99MDl6DsTiTiyj1DDq55gq4jkefCLruBlAH3sqxxyeaMjXJq3EUjABi46g
8cy5KNRy1fjxUtFRSKIO2CdEHAesjn3o2804cKQ53Z4Vk+PTfd86LXCoE23JY6M1
k8YoGSbppr9wPGQp4s/QzLTOZ4CNMrC/bLdTV/6NZqkO85vLscffmW10/liU
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:29 2024 by rpki-client on console-ams.rpki-client.org