Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GVVVlq8DQOC7evTm5WS3UXlqZ1U.roa
File: GVVVlq8DQOC7evTm5WS3UXlqZ1U.roa (raw, json)
Hash identifier: loUK+6wIhFqJ18S3XPuvHDrlNGZVtR1E3HH1cFkI4qU=
Subject key identifier: 19:55:55:96:AF:03:40:E0:BB:7A:F4:E6:E5:64:B7:51:79:6A:67:55
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A4D99925160C2F5AD0DA9E3E8D55EF33A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GVVVlq8DQOC7evTm5WS3UXlqZ1U.roa
Signing time: Thu 31 Aug 2023 21:57:04 +0000
ROA not before: Thu 31 Aug 2023 21:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:99:92:51:60:c2:f5:ad:0d:a9:e3:e8:d5:5e:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 31 21:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19555596af0340e0bb7af4e6e564b751796a6755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:28:5f:2e:ac:07:22:54:c3:fa:bb:b3:d7:2c:
d1:43:04:9b:14:58:5c:a8:a0:a5:6a:e5:92:8b:40:
a6:54:ae:d7:a1:33:9b:77:d6:f5:07:70:57:69:5c:
fe:6a:cb:8d:b3:b1:93:65:8f:3f:36:da:38:1d:04:
1e:15:6a:ce:10:ce:30:f1:c8:bd:62:25:c2:c1:db:
b9:e9:f8:5c:4b:9f:3b:21:7f:0a:8f:28:2c:50:78:
55:4a:5f:23:1f:52:cc:5f:1b:e0:e5:af:07:db:50:
3a:83:8c:06:2d:59:2b:a4:b5:b3:b5:16:0f:bb:64:
ef:c1:4b:4b:1e:0c:d1:dd:43:97:b0:c0:1c:06:ca:
c2:ba:6f:3d:fc:20:86:aa:61:ec:21:b3:87:05:bd:
a4:80:22:19:96:0c:f8:c2:80:b6:86:2a:31:e7:ae:
5d:42:b1:7b:0d:fd:6d:b4:f9:51:7e:0c:86:61:81:
e1:b4:96:3b:8c:2b:22:98:b2:fd:81:0a:8a:0e:e4:
2b:bd:91:2e:61:e9:5d:3f:ce:c9:1e:b4:2a:83:d7:
94:52:60:58:f3:91:a1:2f:2a:49:e7:71:a9:72:60:
03:c1:31:50:62:df:ca:ad:60:7d:81:3f:d5:f2:d2:
0f:35:65:8a:bb:56:1c:f4:10:f1:4c:fe:97:12:a7:
03:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:55:55:96:AF:03:40:E0:BB:7A:F4:E6:E5:64:B7:51:79:6A:67:55
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GVVVlq8DQOC7evTm5WS3UXlqZ1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/23
163.5.116.0/22
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
7a:9f:f5:39:35:69:bd:30:4b:af:16:58:86:c6:d4:20:e6:40:
37:73:e9:45:a1:ed:49:a6:19:64:8b:5f:35:71:fd:5e:45:99:
2c:bd:6d:41:25:d3:60:a1:6e:ce:fb:32:8a:53:6d:89:d3:86:
b7:4b:dc:ac:47:9d:9f:5e:9c:73:55:95:b7:d3:56:2e:87:c3:
92:0b:93:d6:eb:93:2e:06:d5:ed:ad:1d:04:26:01:9c:a0:86:
73:93:a0:3b:d2:64:9e:00:bb:96:2a:6d:67:c4:cd:a0:14:2b:
06:3d:06:64:b0:87:26:d4:da:c1:6f:79:1c:76:34:97:e1:8b:
d1:b7:ce:70:fd:f6:69:eb:8f:d2:c2:70:23:a2:57:e0:29:a2:
d6:e2:4a:85:c6:ad:40:5f:46:1e:2f:8f:f7:5c:a3:6a:89:1a:
27:30:af:f2:a6:dd:3c:31:af:3b:a9:9a:b7:fd:de:cd:4e:e3:
ca:b4:f4:70:3a:ce:2b:ad:51:56:41:28:c0:28:28:92:c1:50:
fb:c6:fa:52:04:48:fa:ed:a8:21:f6:a7:b5:d0:f2:da:e4:61:
83:90:19:3f:42:d6:b1:3d:d5:5c:be:6e:f7:62:1d:01:bd:4e:
72:ed:25:f2:f5:b9:b6:e2:61:b1:f7:4b:73:5c:90:3d:de:5e:
3e:04:fc:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 25 18:10:43 2023 by rpki-client on console-fra.rpki-client.org