Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DzZ3yWtVPwSF51ThfqPuB2ITKcI.roa
File: DzZ3yWtVPwSF51ThfqPuB2ITKcI.roa (raw, json)
Hash identifier: ueonZ04EbtpLHj9OXnRtLnxAMTkqysAYJAGoK79i/CI=
Subject key identifier: 0F:36:77:C9:6B:55:3F:04:85:E7:54:E1:7E:A3:EE:07:62:13:29:C2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018BE277C5AEAF6AC84422490C3BD48C1F80
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DzZ3yWtVPwSF51ThfqPuB2ITKcI.roa
Signing time: Sat 18 Nov 2023 12:46:21 +0000
ROA not before: Sat 18 Nov 2023 12:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e2:77:c5:ae:af:6a:c8:44:22:49:0c:3b:d4:8c:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 18 12:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f3677c96b553f0485e754e17ea3ee07621329c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4c:2b:fa:9a:f4:92:0e:1f:ee:87:fb:60:44:
2f:8e:49:c4:be:b6:19:1e:3d:69:f2:04:97:ff:b4:
81:a3:7e:66:59:28:12:04:20:49:da:63:ca:33:5b:
58:15:22:e0:74:ed:e8:d1:91:84:e0:e4:36:70:23:
f8:31:8e:bc:82:36:41:e1:9f:89:37:e6:e6:e4:d1:
ec:72:28:20:2c:ce:68:e1:ab:4e:fb:a3:e4:f2:a2:
a2:09:bb:5a:a0:64:a6:5e:38:11:ed:19:11:fc:b1:
46:4e:e3:6b:a6:dd:f7:6d:9b:b5:5b:78:d7:10:70:
81:a5:84:2f:29:11:c3:09:c0:4f:97:39:c0:88:0e:
3d:b1:67:51:01:be:35:01:95:7b:c5:07:54:85:a1:
d0:9d:8f:0f:f2:66:28:13:48:4c:0d:8d:24:81:cb:
76:ae:5b:47:6c:9f:49:03:81:c1:3f:f9:ce:ba:6a:
94:28:c5:f5:b7:13:a6:16:d5:d6:84:d6:75:58:a7:
5f:bb:0b:2c:c2:b6:ee:5c:bc:ed:58:de:58:66:76:
02:fa:44:67:b1:37:fe:cf:a4:fb:ed:2a:e0:96:08:
d6:3d:38:eb:41:69:2c:c6:06:7b:b6:a6:15:1b:53:
fa:b5:7f:7a:3f:57:a2:3b:b7:ec:7e:03:e7:7a:f3:
ea:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:36:77:C9:6B:55:3F:04:85:E7:54:E1:7E:A3:EE:07:62:13:29:C2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DzZ3yWtVPwSF51ThfqPuB2ITKcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/22
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.161.0/24
163.5.171.0/24
163.5.174.0/24
163.5.177.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
22:57:a0:65:02:f4:2c:12:41:f1:70:65:25:27:dc:36:df:b8:
88:b4:cb:ab:7d:c5:03:33:e7:7e:89:a4:f9:49:76:a9:48:61:
bd:80:e0:10:37:79:52:60:44:d2:fa:ee:ba:c8:65:ae:03:12:
dc:e5:7a:b8:c2:af:1b:f8:c7:d1:94:c2:c2:f0:4c:e9:f8:ac:
58:64:4b:bb:47:30:b8:12:c2:d4:7c:3a:92:cf:69:3f:3d:1b:
4d:27:0d:2a:20:2e:2e:ac:59:64:63:0b:c4:8c:4a:ee:04:4b:
7f:96:d1:61:e7:5a:a2:50:2f:e4:45:1b:9c:c1:b3:b6:ec:dc:
7f:72:46:9f:af:8b:41:d4:00:cc:6c:fb:5e:2c:b5:4e:f1:7a:
37:bd:a8:8c:dc:60:cd:84:05:a0:62:d4:b0:a2:ee:92:ca:cc:
0b:99:e8:7e:f7:ee:a5:23:03:91:4e:97:51:ad:39:33:75:b4:
66:6f:4b:91:b0:bb:30:7c:ab:73:c8:f8:0f:a4:88:25:ef:f6:
e8:93:f0:14:62:a2:4e:b3:93:a8:4e:20:be:57:fa:1f:f8:3f:
b3:0e:d6:fe:18:38:04:01:ad:25:5e:55:a4:04:a5:ad:be:1a:
48:d6:bb:92:e1:c3:64:dd:dc:93:b5:09:95:7f:cc:21:0f:0a:
40:53:bd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 16:53:05 2023 by rpki-client on console-ams.rpki-client.org