Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9_xoRhndjCzWOC4ef6Ad0lYThdY.roa
File: 9_xoRhndjCzWOC4ef6Ad0lYThdY.roa (raw, json)
Hash identifier: jvFiuubXYGSkh89P9n3mltIg+gsVz/Q3ArHflLx8+ps=
Subject key identifier: F7:FC:68:46:19:DD:8C:2C:D6:38:2E:1E:7F:A0:1D:D2:56:13:85:D6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B9F09022FF8978491576BD462E72
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9_xoRhndjCzWOC4ef6Ad0lYThdY.roa
Signing time: Mon 02 Jan 2023 02:14:59 +0000
ROA not before: Mon 02 Jan 2023 02:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.183.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b9:f0:90:22:ff:89:78:49:15:76:bd:46:2e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7fc684619dd8c2cd6382e1e7fa01dd2561385d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:a4:db:0d:57:bc:a7:8a:20:e4:76:58:2b:
4d:5c:06:c8:d9:ed:2d:44:09:68:b2:e3:4b:e3:62:
21:31:ce:79:d3:a2:7b:e2:18:93:63:d1:3b:d3:5e:
fc:38:fc:81:24:e9:42:76:6a:82:f3:ab:eb:50:23:
78:a3:a3:3a:e7:17:9e:22:29:4b:5d:e0:03:da:65:
96:4c:bf:5a:5f:21:86:85:2e:6f:20:4d:a0:58:a8:
ec:3d:3c:79:d0:eb:12:71:66:2e:8a:6a:de:c8:1c:
d7:4e:1d:e4:a3:a3:84:64:10:f5:af:05:45:c7:ed:
2c:fc:50:8b:d6:41:3b:29:ef:8a:a7:e4:16:81:0e:
8d:f2:28:43:69:b9:dd:ba:ee:50:02:6b:6c:f3:53:
ec:5e:62:7b:12:5f:4f:fa:17:28:86:c1:53:cf:55:
7b:91:b5:34:11:42:58:ac:ca:92:b8:2a:05:88:11:
f0:34:c0:59:19:48:49:ee:d5:14:3f:01:25:48:f7:
a1:a7:88:a2:a9:6d:ce:1a:b4:d8:68:c3:af:67:42:
c7:81:0e:f6:c2:17:7f:21:5a:81:d5:de:96:32:28:
ad:1a:0e:56:b7:07:68:f8:dc:90:c0:ce:17:49:ed:
74:08:0c:a1:f8:e8:5d:2b:9e:8c:eb:9c:fc:c4:03:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:68:46:19:DD:8C:2C:D6:38:2E:1E:7F:A0:1D:D2:56:13:85:D6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9_xoRhndjCzWOC4ef6Ad0lYThdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.122.0/24
163.5.139.0/24
163.5.183.0/24
163.5.238.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:65:42:f3:ee:6f:9e:ba:74:3d:6d:41:0a:fb:08:dd:4e:8b:
c4:5c:1c:99:2a:fe:3b:13:48:07:8a:b4:23:36:c2:7b:65:41:
01:57:c3:1a:23:f1:15:c3:e8:e6:08:53:da:c4:88:d5:6c:4d:
11:c3:f9:51:b4:5e:7b:47:63:be:26:70:c1:61:ab:76:ca:4f:
02:ae:e7:39:ea:a5:54:15:bd:86:ec:a1:3c:ea:d1:20:ad:19:
a0:bc:d2:e4:96:cc:61:29:e0:a1:ba:a9:71:70:fc:df:10:cd:
75:21:b4:78:7a:36:dd:7c:49:23:98:d8:5b:b1:af:6e:b9:3c:
e1:53:6b:08:d8:f4:55:eb:46:f3:0f:5c:df:53:ba:ad:b5:42:
9e:c6:0c:2b:5b:55:58:19:d2:24:38:c2:f1:56:7e:cb:c7:92:
88:20:b2:81:0f:aa:ab:09:61:ab:41:23:c7:03:b8:ad:f0:c8:
3f:0d:79:cc:55:00:bb:f2:3d:9a:c5:6a:82:a1:99:c4:a5:75:
ab:e4:e3:b3:6b:6d:44:48:c6:ce:6d:8e:f9:5b:88:9d:02:c0:
8c:7b:f8:85:96:2a:9a:28:20:54:c0:8b:f5:e7:28:48:3f:e1:
c6:d3:1b:29:23:14:f2:fb:c0:54:c7:75:6e:64:55:ca:33:c6:
f7:23:a8:80
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVwQrnwkCL/iXhJFXa9Ri5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTAyMDIxNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2ZjNjg0NjE5ZGQ4YzJjZDYzODJlMWU3ZmEwMWRkMjU2MTM4NWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJik2w1XvKeKIOR2WCtNXAbI2e0t
RAlosuNL42IhMc5506J74hiTY9E70178OPyBJOlCdmqC86vrUCN4o6M65xeeIilL
XeAD2mWWTL9aXyGGhS5vIE2gWKjsPTx50OsScWYuimreyBzXTh3ko6OEZBD1rwVF
x+0s/FCL1kE7Ke+Kp+QWgQ6N8ihDabnduu5QAmts81PsXmJ7El9P+hcohsFTz1V7
kbU0EUJYrMqSuCoFiBHwNMBZGUhJ7tUUPwElSPehp4iiqW3OGrTYaMOvZ0LHgQ72
whd/IVqB1d6WMiitGg5Wtwdo+NyQwM4XSe10CAyh+OhdK56M65z8xAPXlQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFPf8aEYZ3Yws1jguHn+gHdJWE4XWMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvOV94b1JobmRqQ3pXT0M0ZWY2QWQwbFlUaGRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowV6AwQA
owWLAwQAowW3AwQAowXuAwQAowX/MA0GCSqGSIb3DQEBCwUAA4IBAQCjZULz7m+e
unQ9bUEK+wjdTovEXByZKv47E0gHirQjNsJ7ZUEBV8MaI/EVw+jmCFPaxIjVbE0R
w/lRtF57R2O+JnDBYat2yk8Cruc56qVUFb2G7KE86tEgrRmgvNLklsxhKeChuqlx
cPzfEM11IbR4ejbdfEkjmNhbsa9uuTzhU2sI2PRV60bzD1zfU7qttUKexgwrW1VY
GdIkOMLxVn7Lx5KIILKBD6qrCWGrQSPHA7it8Mg/DXnMVQC78j2axWqCoZnEpXWr
5OOza21ESMbObY75W4idAsCMe/iFliqaKCBUwIv15yhIP+HG0xspIxTy+8BUx3Vu
ZFXKM8b3I6iA
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org