Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9nqtyXXSDOEZk5vzR9RkDSz_34o.roa
File: 9nqtyXXSDOEZk5vzR9RkDSz_34o.roa (raw, json)
Hash identifier: ObzOZeIiiyvf5uTj/DgFQfG2KBiXHuUFpDjdMl9x7aY=
Subject key identifier: F6:7A:AD:C9:75:D2:0C:E1:19:93:9B:F3:47:D4:64:0D:2C:FF:DF:8A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188CB6E034EF6A5E01FD39586F94C53B1DE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9nqtyXXSDOEZk5vzR9RkDSz_34o.roa
Signing time: Sat 17 Jun 2023 22:16:04 +0000
ROA not before: Sat 17 Jun 2023 22:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.111.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cb:6e:03:4e:f6:a5:e0:1f:d3:95:86:f9:4c:53:b1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 17 22:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67aadc975d20ce119939bf347d4640d2cffdf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3a:25:67:0c:0b:9d:cb:97:59:49:fa:b1:ea:
77:a7:09:12:18:38:98:06:aa:1e:8b:a0:e0:85:20:
6f:10:95:8f:d8:1f:e6:42:9d:8e:b3:11:ef:75:fe:
2a:d6:4e:7d:31:c6:8a:44:68:14:5a:df:ee:3f:e0:
b6:84:1b:44:7d:19:d9:a5:98:d5:1b:a5:76:98:23:
fa:e9:06:39:07:87:33:56:ad:9a:04:57:7d:9f:d5:
92:20:29:a7:19:fa:35:2c:2e:a1:44:d9:5a:4c:78:
f9:19:05:14:a8:cc:67:f6:e7:8f:7c:db:d8:3e:83:
f3:18:5b:61:1d:ad:db:48:c8:6b:54:3b:d5:58:47:
32:00:d4:f5:72:15:f7:4d:00:dc:8b:60:a6:f2:bf:
56:38:6d:56:00:0e:60:6c:9c:4d:19:d5:61:16:a3:
a8:c7:28:10:21:22:87:1c:e7:f3:03:80:69:76:80:
ce:3d:43:b5:0e:d8:4c:5b:90:ea:54:49:88:f4:15:
25:6c:5d:8b:a8:3d:4c:ea:73:52:36:e9:25:40:ef:
64:73:34:70:38:a6:1f:bf:ca:f2:f2:35:c5:20:38:
3a:80:3f:71:d3:7f:09:80:c5:a8:e5:6b:0c:fa:22:
ce:be:fe:91:18:75:da:87:35:68:03:17:f7:25:da:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7A:AD:C9:75:D2:0C:E1:19:93:9B:F3:47:D4:64:0D:2C:FF:DF:8A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9nqtyXXSDOEZk5vzR9RkDSz_34o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.242.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:30:34:61:29:b0:8d:8b:ae:4d:02:63:fe:a5:88:d6:10:1c:
42:5e:69:fd:c0:60:b1:c8:79:ac:42:12:a6:6f:27:33:2c:90:
7b:b9:74:92:40:70:60:5b:6f:2d:c3:4b:18:24:af:85:64:12:
36:1d:1e:f9:8c:39:0a:29:19:6d:a4:c3:01:96:05:a4:3c:5c:
71:bc:4d:f5:cb:a0:dc:03:7b:98:35:4f:35:7c:4e:fa:05:62:
25:c0:34:98:0d:41:f3:71:5f:5e:06:49:b4:d5:85:be:fd:d3:
97:0c:c3:9a:23:0e:1e:91:75:97:8e:5c:09:3b:1e:dc:8a:c2:
59:76:c0:70:02:95:a8:89:14:0b:38:27:b4:dd:78:a0:53:c3:
58:cd:72:b7:db:7a:eb:e5:68:f6:c7:2b:b1:a4:3e:28:7d:c5:
5f:10:d9:c5:e4:b2:98:de:06:7e:3b:20:cf:af:a0:23:eb:76:
4b:74:57:c9:5a:d9:ef:b6:60:7a:93:b5:94:09:d8:67:23:55:
6b:84:f2:91:9c:37:ea:73:79:9d:a2:d4:9c:20:9b:df:18:86:
10:07:22:46:9f:b0:6d:ff:c9:fa:17:a0:c5:b7:db:50:7a:00:
29:51:0a:43:6c:ea:b4:61:9e:ce:aa:a8:bf:05:7c:cf:d4:48:
ba:14:8f:5f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYjLbgNO9qXgH9OVhvlMU7HeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjE3MjIxNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjdhYWRjOTc1ZDIwY2UxMTk5MzliZjM0N2Q0NjQwZDJjZmZkZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzolZwwLncuXWUn6sep3pwkSGDiY
Bqoei6DghSBvEJWP2B/mQp2OsxHvdf4q1k59McaKRGgUWt/uP+C2hBtEfRnZpZjV
G6V2mCP66QY5B4czVq2aBFd9n9WSICmnGfo1LC6hRNlaTHj5GQUUqMxn9uePfNvY
PoPzGFthHa3bSMhrVDvVWEcyANT1chX3TQDci2Cm8r9WOG1WAA5gbJxNGdVhFqOo
xygQISKHHOfzA4BpdoDOPUO1DthMW5DqVEmI9BUlbF2LqD1M6nNSNuklQO9kczRw
OKYfv8ry8jXFIDg6gD9x038JgMWo5WsM+iLOvv6RGHXahzVoAxf3JdrvMQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPZ6rcl10gzhGZOb80fUZA0s/9+KMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvOW5xdHlYWFNET0VaazV2elI5UmtEU3pfMzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAowU6AwQB
owVuAwQAowV+AwQAowWAAwQAowXyAwQAowX6AwQAowX9MA0GCSqGSIb3DQEBCwUA
A4IBAQALMDRhKbCNi65NAmP+pYjWEBxCXmn9wGCxyHmsQhKmbyczLJB7uXSSQHBg
W28tw0sYJK+FZBI2HR75jDkKKRltpMMBlgWkPFxxvE31y6DcA3uYNU81fE76BWIl
wDSYDUHzcV9eBkm01YW+/dOXDMOaIw4ekXWXjlwJOx7cisJZdsBwApWoiRQLOCe0
3XigU8NYzXK323rr5Wj2xyuxpD4ofcVfENnF5LKY3gZ+OyDPr6Aj63ZLdFfJWtnv
tmB6k7WUCdhnI1VrhPKRnDfqc3mdotScIJvfGIYQByJGn7Bt/8n6F6DFt9tQegAp
UQpDbOq0YZ7Oqqi/BXzP1Ei6FI9f
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org