Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DRm4zBu1YimwBz56TEcX2oiPV8g.roa
File: DRm4zBu1YimwBz56TEcX2oiPV8g.roa (raw, json)
Hash identifier: G8A0i6Ahn9CirpPiNNMI5TxxaB38xkjTdSANtT3ALvw=
Subject key identifier: 0D:19:B8:CC:1B:B5:62:29:B0:07:3E:7A:4C:47:17:DA:88:8F:57:C8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187B16382B9655D5D848FB3EF76C986775E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DRm4zBu1YimwBz56TEcX2oiPV8g.roa
Signing time: Mon 24 Apr 2023 03:51:41 +0000
ROA not before: Mon 24 Apr 2023 03:51:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.212.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b1:63:82:b9:65:5d:5d:84:8f:b3:ef:76:c9:86:77:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 24 03:51:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d19b8cc1bb56229b0073e7a4c4717da888f57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:83:69:07:02:57:d9:4a:b1:76:25:b6:74:
81:7e:fb:ad:41:59:2b:9a:b3:03:99:1a:82:46:18:
b5:9b:a9:34:14:43:22:57:5e:64:8c:92:86:19:5b:
cf:ed:87:cb:7f:06:bd:14:30:8f:86:ac:bf:a1:d7:
df:a9:44:d7:89:da:02:19:cc:42:56:cc:36:91:52:
8a:df:88:7f:53:ca:d0:1c:68:1a:b9:e1:f1:42:3f:
a8:82:3d:09:23:7f:85:10:dc:cc:7c:f6:80:0e:a4:
3f:49:1e:56:3f:c5:7e:1a:ff:6f:47:3c:ce:3c:6e:
f0:43:6c:d5:22:b4:9e:cb:99:5d:2f:b6:ec:a0:df:
8d:f8:26:b5:10:a0:32:24:41:a2:70:45:0f:f4:21:
a7:6e:b2:b8:14:77:40:ea:72:c3:64:60:fe:32:0b:
1c:00:1c:f0:50:ed:d9:2c:1c:78:78:e6:e0:db:57:
98:f1:3f:71:a6:a6:eb:ac:cd:9e:14:05:d0:91:52:
6b:0a:94:f1:23:c2:ad:83:3f:f1:2e:eb:bc:2a:26:
9d:fe:19:3c:1b:71:f2:e5:1c:ef:a2:db:be:d4:e5:
04:97:a5:aa:f0:6f:58:3a:7b:c9:15:03:09:b5:89:
c8:31:87:33:75:27:5b:83:ff:4b:00:47:f9:00:47:
1d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:B8:CC:1B:B5:62:29:B0:07:3E:7A:4C:47:17:DA:88:8F:57:C8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DRm4zBu1YimwBz56TEcX2oiPV8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.105.0-163.5.106.255
163.5.115.0/24
163.5.118.0/23
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.212.0/24
163.5.220.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ac:a4:be:c2:79:fb:97:0c:2a:a5:6f:dd:9d:5f:1c:7e:85:
43:8e:f1:ac:ac:22:0b:b9:9c:37:dd:1a:9d:a0:f2:8a:20:e0:
91:6d:f7:06:f2:db:d1:7b:be:19:c5:8e:11:79:c4:ab:bd:d6:
1d:6c:b7:82:76:0d:6a:5d:fa:72:c1:e9:e4:bc:83:61:26:5a:
14:74:0e:9e:a9:ae:e3:5b:e3:17:ec:11:13:0c:7a:40:88:d2:
ec:d7:f4:7f:34:3a:48:1c:7f:54:c4:7b:fe:6a:bb:f8:a4:3d:
95:0b:ce:ab:a2:8d:06:cc:af:bb:37:f4:55:62:bc:1a:96:7b:
fb:9b:1b:47:18:64:a1:2b:5e:23:43:b5:93:fe:d5:43:c1:b0:
6e:61:9d:c6:36:fb:0a:5e:7f:4e:56:0c:21:b4:b6:7e:f4:b9:
37:52:ae:92:f6:8a:00:ad:71:c0:91:bf:2b:c1:c8:e0:3b:3a:
03:c1:85:7c:64:bf:62:03:38:8f:e0:40:df:f5:c9:30:24:55:
52:32:e0:20:5f:ae:35:29:7c:44:3a:ed:40:97:6c:fa:ab:77:
2e:65:6a:a9:6e:8c:cc:ef:10:a8:23:05:f5:c2:e9:0a:9e:4d:
dc:e9:de:a0:fe:1d:9c:86:09:91:cd:61:e9:57:cd:8f:fc:9a:
74:fe:a5:f9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org