Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9tDLgwuSKHoTbq2_Nc5VY5tTgdA.roa
File: 9tDLgwuSKHoTbq2_Nc5VY5tTgdA.roa (raw, json)
Hash identifier: tTzMuvB63nyQ2JzmmAQnu9I/azMQMyyw4o27zn/OI+E=
Subject key identifier: F6:D0:CB:83:0B:92:28:7A:13:6E:AD:BF:35:CE:55:63:9B:53:81:D0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189F41473A3A1EDCBD523504B0B3AA390F7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9tDLgwuSKHoTbq2_Nc5VY5tTgdA.roa
Signing time: Mon 14 Aug 2023 12:45:28 +0000
ROA not before: Mon 14 Aug 2023 12:45:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.202.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:14:73:a3:a1:ed:cb:d5:23:50:4b:0b:3a:a3:90:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 14 12:45:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6d0cb830b92287a136eadbf35ce55639b5381d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:66:b1:da:5f:fc:54:d8:14:bd:cb:3c:76:a2:
67:b2:6a:b9:b3:5c:75:a6:a8:b4:b8:f6:ad:1e:24:
62:36:9f:d1:c5:30:c2:28:0a:4e:86:a9:c6:a5:d8:
18:9c:79:8c:72:5d:c9:aa:65:7c:ad:68:c9:ad:2d:
d8:f1:65:48:5b:87:b2:4c:bb:c2:a6:e7:bf:8b:f0:
07:54:8a:b6:55:88:5f:03:8c:a9:cc:df:98:0b:b3:
05:ee:04:0d:98:83:4d:0b:43:db:96:26:5a:80:67:
59:4d:8b:81:ac:53:bf:58:a2:fa:0e:18:02:89:24:
be:50:ca:24:f8:ea:26:a4:bc:7b:10:96:84:e9:f0:
89:31:e4:76:5c:ac:b6:3f:f5:7e:e9:b8:25:11:17:
a6:e1:4d:ab:2e:b2:4e:d4:d7:3a:15:5d:91:53:64:
e7:5f:d7:0d:bb:3c:ad:76:66:f9:00:d0:19:46:f3:
8d:df:6e:49:6a:46:01:50:4a:b7:34:92:67:6f:48:
16:15:26:6e:5e:b2:50:fc:f0:55:2d:6d:69:64:6e:
f1:47:08:65:b2:4b:2d:ff:02:dd:21:db:3a:3f:67:
fc:75:e9:d5:3e:a1:88:6c:87:bc:a6:ec:da:85:2a:
90:7a:08:dd:f0:54:1e:fa:2e:fa:2d:c7:07:5a:e3:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D0:CB:83:0B:92:28:7A:13:6E:AD:BF:35:CE:55:63:9B:53:81:D0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9tDLgwuSKHoTbq2_Nc5VY5tTgdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.62.0/24
163.5.99.0/24
163.5.161.0/24
163.5.202.0/24
163.5.216.0/24
163.5.221.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c1:9f:5f:eb:f3:3c:bd:bc:a7:d2:f0:94:fd:13:11:3c:a5:
0d:f5:6c:ab:3d:b6:4c:6c:b7:83:25:b1:06:82:90:fe:90:d1:
c7:52:bf:65:b8:95:da:c2:4b:87:b5:75:e8:a9:02:2b:77:20:
24:91:88:ee:4c:22:c0:23:94:64:48:ad:b4:14:aa:be:0e:f0:
8c:45:ed:27:0f:1f:2c:11:5d:66:03:7e:ae:d4:cf:ed:f9:48:
62:64:5d:9b:a3:c3:e9:61:c0:23:7b:de:46:cd:49:c3:64:e4:
d9:32:b5:f0:cc:e6:86:6b:eb:03:7a:5c:85:72:5b:94:3e:6b:
1b:1a:88:71:be:8c:a5:aa:5e:93:df:e7:fb:32:4d:ff:ee:10:
3d:4a:47:97:d1:c1:e9:f5:8c:5a:6a:b5:56:46:42:50:35:3d:
02:9b:0b:a5:68:8e:99:3b:36:02:75:a9:30:cc:ca:6b:61:21:
69:30:4e:39:ce:cd:67:81:6e:24:6c:36:0c:46:f4:46:67:40:
5f:8d:e0:dc:5b:ad:77:7f:d8:b6:68:2a:a5:15:cf:de:b1:0e:
fe:53:e9:46:d1:da:e5:ec:1f:bb:23:f0:2d:88:90:6a:02:98:
07:84:23:83:4b:48:57:69:20:f4:60:92:32:3a:01:44:b9:5b:
fd:ec:22:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 08:16:12 2023 by rpki-client on console-ams.rpki-client.org