Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GJ5WnPar2iduhBcA7QxprQj0Z0I.roa
File: GJ5WnPar2iduhBcA7QxprQj0Z0I.roa (raw, json)
Hash identifier: zzQJ2sWrEYTVKOdHt2rppabO4WeG8KzY2AUg5YcQpLI=
Subject key identifier: 18:9E:56:9C:F6:AB:DA:27:6E:84:17:00:ED:0C:69:AD:08:F4:67:42
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018692F6AF6E6E1354E55E64489E586AAAE2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GJ5WnPar2iduhBcA7QxprQj0Z0I.roa
Signing time: Mon 27 Feb 2023 13:01:25 +0000
ROA not before: Mon 27 Feb 2023 13:01:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.84.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:f6:af:6e:6e:13:54:e5:5e:64:48:9e:58:6a:aa:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 27 13:01:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=189e569cf6abda276e841700ed0c69ad08f46742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:c1:c6:26:44:44:bd:f1:61:9f:da:cd:ba:
d7:e3:ea:1a:cb:86:a2:be:09:43:73:10:27:b1:28:
30:2a:10:f7:67:ec:90:00:e7:58:24:95:f2:bd:02:
2b:d4:f0:0b:94:01:7f:4e:a0:ec:6e:c9:91:a0:22:
66:39:ab:6e:9d:fe:32:35:55:89:c4:d8:72:07:7c:
5c:38:ae:4a:91:0f:67:28:19:f6:1d:ee:e2:a4:90:
75:d1:e8:a1:c3:ab:8d:d1:8f:67:44:52:3e:ed:8b:
cf:b7:77:fe:0f:48:7e:e7:7e:e2:5b:09:59:3c:2e:
c9:44:99:df:cc:2d:5d:3f:39:77:41:a3:d8:f4:ad:
3e:d7:cb:90:15:b7:6c:b8:ef:4f:eb:b1:3b:9a:ec:
85:91:f5:b8:4d:68:31:db:f4:0c:7b:f1:4f:5b:b1:
de:6d:f9:69:a5:97:cc:10:95:68:6d:c4:32:7e:78:
8e:ec:43:73:77:5c:c6:2f:2d:80:d4:16:b9:26:cb:
3a:15:ea:f0:cc:4d:56:eb:7b:c1:27:66:07:64:cb:
e3:b8:0d:cb:f7:81:37:4e:38:c4:5a:4a:60:6e:08:
c3:f2:29:e2:84:a2:a2:f4:ca:be:d1:54:bb:86:cb:
eb:96:b8:a6:ee:b3:34:88:9e:95:55:5c:8e:a1:63:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:9E:56:9C:F6:AB:DA:27:6E:84:17:00:ED:0C:69:AD:08:F4:67:42
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GJ5WnPar2iduhBcA7QxprQj0Z0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.84.0/24
163.5.134.0/24
163.5.192.0/24
163.5.228.0/24
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
44:37:98:96:e5:60:e0:79:64:6b:43:e6:49:80:d2:be:16:47:
d1:d9:c0:c0:37:db:7f:53:8a:91:f5:2b:b3:3e:f9:06:c0:67:
6e:5c:07:73:bf:3b:64:b9:91:e8:f6:03:76:cb:78:8b:7b:2e:
2e:10:e9:f3:7c:48:b7:9b:eb:05:82:53:36:d0:c0:f6:41:0e:
77:52:44:54:69:91:ce:3c:8b:23:65:e0:07:2b:67:15:6d:5e:
26:ff:23:2d:af:e2:d1:2a:e2:cd:74:74:72:1a:d7:89:fd:a2:
db:eb:9d:3c:96:d8:1a:16:5b:35:36:a8:8b:fb:4e:8b:7e:cc:
10:5f:c5:c3:50:3e:65:6b:13:12:e6:b4:7a:4b:60:b2:57:8c:
5c:d9:80:61:d4:de:c2:f9:6e:1f:ac:dc:cc:82:11:eb:f8:f9:
12:87:8c:ec:5d:d5:85:74:ff:e7:f1:f2:7b:76:e1:3f:04:ac:
5f:ca:3b:7e:01:2f:34:85:8b:7f:dd:18:06:d3:02:24:9a:04:
97:58:1c:8d:f1:0d:e9:27:33:6a:59:fb:f5:81:d5:d4:c7:a8:
fd:39:6e:c9:4d:aa:d3:bb:e8:74:0e:7b:87:f5:41:14:a9:8c:
df:be:25:0f:bd:20:2d:a0:b2:e6:d0:44:4b:b1:87:95:00:32:
98:ed:7a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org