Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GvE1q3XAeqg6VPx-LipV5r6Fvao.roa
File: GvE1q3XAeqg6VPx-LipV5r6Fvao.roa (raw, json)
Hash identifier: v4vgaCtEBMcFowZwYKXmZoiMy3Z9rmXgRULucStwDe0=
Subject key identifier: 1A:F1:35:AB:75:C0:7A:A8:3A:54:FC:7E:2E:2A:55:E6:BE:85:BD:AA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01872F18D50D8ADBB6D35CA12DC736131B32
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GvE1q3XAeqg6VPx-LipV5r6Fvao.roa
Signing time: Wed 29 Mar 2023 20:39:29 +0000
ROA not before: Wed 29 Mar 2023 20:39:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2f:18:d5:0d:8a:db:b6:d3:5c:a1:2d:c7:36:13:1b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 29 20:39:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1af135ab75c07aa83a54fc7e2e2a55e6be85bdaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:11:00:c6:c8:a1:5a:95:a6:02:3b:87:22:
2a:91:cf:52:a9:b7:27:b3:63:79:b3:d0:52:32:38:
9c:73:be:1c:38:a6:09:0a:2b:e5:f1:aa:d1:49:05:
a3:7f:6e:7a:4c:33:3f:d7:27:6a:94:7a:cb:67:18:
d2:f8:f3:82:36:8d:2b:6a:ef:c6:56:4c:0e:ce:fa:
4c:d9:5e:93:15:f6:2e:fe:8e:77:89:fb:b1:10:e0:
a1:44:e1:cd:7f:3b:a5:f1:52:5a:1d:71:35:61:cb:
f1:58:2a:2a:5a:47:73:bf:fe:79:8c:81:cd:70:2a:
51:f6:5a:5e:6d:1e:e9:78:af:67:4e:46:6f:5b:b8:
1a:b6:11:d9:89:db:10:19:ba:48:c7:98:33:d5:89:
47:8c:77:a0:d4:7f:34:1e:ec:72:70:2a:b9:91:8a:
bf:bd:8a:9f:f0:82:54:6a:47:53:ae:e2:c1:38:33:
2f:b2:68:58:62:9e:0b:63:e8:3e:f5:a8:a2:1b:cc:
bd:02:88:a7:4c:0d:4a:29:f9:5c:0f:63:93:ba:cc:
29:ee:47:c8:57:8c:b0:06:fa:7d:bf:b1:e6:33:90:
6c:ba:13:89:32:73:a6:1e:7b:f6:f3:81:05:f5:81:
95:49:db:6d:78:af:90:1f:b7:64:1c:72:82:d7:31:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:35:AB:75:C0:7A:A8:3A:54:FC:7E:2E:2A:55:E6:BE:85:BD:AA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GvE1q3XAeqg6VPx-LipV5r6Fvao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
163.5.134.0/24
163.5.189.0/24
163.5.192.0/24
163.5.228.0/24
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:2d:59:6f:f9:f9:99:1f:78:fd:92:ec:72:c0:01:f7:2e:f6:
0f:f4:e9:33:8a:91:2c:35:fa:5f:af:6d:cb:ad:75:82:98:0c:
e2:59:aa:cd:4c:94:28:f2:ac:ec:55:c8:2d:ce:09:c3:df:59:
c8:a8:0e:be:9f:d4:d3:5c:5e:b6:2f:bf:f6:fd:b1:49:0f:f0:
97:c4:14:6c:a3:9c:fb:12:02:fb:5e:4a:66:d0:d2:b4:d0:2f:
e5:2b:d4:39:32:18:3f:2c:d5:cb:36:8d:9e:4f:cf:0b:26:62:
16:71:f9:32:00:47:3a:c0:58:27:d3:38:e0:72:fc:3a:a3:fa:
dd:e8:22:bb:5f:17:b7:54:c2:29:fb:26:6a:1e:f0:73:94:bc:
4a:2e:9b:5c:e2:2a:1f:8f:0f:b3:12:a0:99:1c:f6:ee:99:88:
a6:5f:73:9b:36:9f:d1:57:64:2b:e4:f8:a5:93:67:df:eb:b7:
37:d9:ae:21:95:77:b3:d7:d2:6a:94:27:da:d2:bf:74:da:67:
37:e1:88:4b:05:61:36:ec:a6:7d:cd:3c:9f:ab:5b:20:80:6f:
1a:54:34:c2:3c:00:ef:de:3c:f1:bf:42:d1:81:51:25:b8:15:
d0:58:58:4e:60:da:3f:31:93:ff:a2:76:9e:38:25:da:ae:94:
f6:04:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org