Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GW5V0_ozbfUE4OGwY7AyoxImqTI.roa
File: GW5V0_ozbfUE4OGwY7AyoxImqTI.roa (raw, json)
Hash identifier: OHGG9xRX+55mFoOQ37vXZNZnJIbtLMfmidamp3o7rLU=
Subject key identifier: 19:6E:55:D3:FA:33:6D:F5:04:E0:E1:B0:63:B0:32:A3:12:26:A9:32
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018622587E1C889B3FD21511DC41153B79CA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GW5V0_ozbfUE4OGwY7AyoxImqTI.roa
Signing time: Sun 05 Feb 2023 16:11:10 +0000
ROA not before: Sun 05 Feb 2023 16:11:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.84.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:22:58:7e:1c:88:9b:3f:d2:15:11:dc:41:15:3b:79:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 5 16:11:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=196e55d3fa336df504e0e1b063b032a31226a932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2a:f3:74:a9:79:39:21:0f:5a:05:6e:1f:be:
7d:12:e6:d5:dc:e8:d6:80:c1:00:7d:79:9a:19:c0:
91:4f:60:d6:de:14:b6:38:a1:39:b8:64:3e:26:5c:
61:84:c6:82:3e:1e:90:51:c8:83:4c:08:97:ef:bc:
1a:c4:d8:77:a4:99:e7:4a:33:4f:c7:60:e3:8c:7f:
87:ca:3b:ea:33:68:9d:6a:63:ab:c7:f3:6f:43:f4:
51:77:06:68:96:20:60:33:b4:a3:d1:08:79:c7:1b:
cd:cf:ec:6a:62:52:75:e3:b9:8f:e9:d7:46:3f:17:
93:c7:68:0f:d9:b0:c4:35:51:a7:df:f8:09:f4:ba:
f3:22:b7:44:75:69:d7:e5:28:c1:fa:74:cb:7f:a0:
48:7a:3b:47:c0:06:24:bf:27:80:b9:5f:cc:cc:96:
03:19:03:a2:dc:7e:19:9d:bc:e3:a9:12:b3:ac:c6:
ed:9f:47:d1:29:2f:91:46:70:25:89:34:f8:e2:17:
b7:97:c5:25:5e:23:a9:a7:fa:bb:8a:f2:2e:26:be:
2c:7e:45:98:df:e3:0b:ff:a8:cf:93:18:02:bf:ee:
d4:38:25:fd:91:d0:16:d2:6f:ce:c0:e3:13:40:f6:
31:81:e6:93:35:ab:20:1d:ac:a7:8e:79:7c:e6:9a:
83:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:6E:55:D3:FA:33:6D:F5:04:E0:E1:B0:63:B0:32:A3:12:26:A9:32
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GW5V0_ozbfUE4OGwY7AyoxImqTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.84.0/24
163.5.131.0/24
163.5.134.0/24
163.5.192.0/24
163.5.228.0/24
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:8f:06:28:f7:e9:11:8c:b7:81:ed:d4:66:ab:11:65:5e:57:
89:8a:cc:d5:b6:58:bc:46:92:99:a9:d2:a4:f3:f8:32:d5:5c:
59:8d:d3:e7:00:65:d0:2c:d6:28:f6:49:0e:7c:96:57:9f:ed:
b9:25:8f:b5:48:70:d6:15:e6:a6:da:de:2b:62:67:6d:13:0d:
9f:8b:19:e9:5d:00:62:ed:1c:78:cc:98:cf:75:f3:69:be:af:
7d:ab:d5:62:ec:fc:13:24:e7:70:d5:14:01:2a:98:6f:7b:ef:
4e:8f:20:70:ef:b1:86:79:0a:d7:0b:52:a9:1c:77:c1:25:f9:
03:5e:64:4d:78:b9:27:06:4b:35:3d:2b:a2:3c:04:7f:84:20:
e3:91:86:3b:3b:54:7b:42:91:55:6c:61:07:05:0f:ab:b0:4e:
3b:d2:48:da:13:84:8c:64:08:11:68:38:31:45:e0:3a:94:fa:
77:d4:38:cf:e0:74:59:a6:ef:02:6b:83:6c:7c:40:a8:7b:3a:
a9:96:1b:9f:45:f7:ac:5e:f0:74:01:fe:1c:a7:5c:c9:68:3b:
56:0e:18:2c:3d:73:61:2f:3b:05:3e:d3:09:b8:03:b4:1a:97:
63:68:6d:a0:55:06:15:bf:1b:e6:9f:fe:20:c6:cb:b6:d8:31:
a2:e8:17:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org