Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IApV_IZgqLeLel_d4NTdUpRVSe4.roa
File: IApV_IZgqLeLel_d4NTdUpRVSe4.roa (raw, json)
Hash identifier: +b3TdqOpualcm6UvVbT++Lzt95sBU4OlxmjMV3W8fn0=
Subject key identifier: 20:0A:55:FC:86:60:A8:B7:8B:7A:5F:DD:E0:D4:DD:52:94:55:49:EE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186262ED83E2BFCA152DDA3BC6FDB2124B6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IApV_IZgqLeLel_d4NTdUpRVSe4.roa
Signing time: Mon 06 Feb 2023 10:04:09 +0000
ROA not before: Mon 06 Feb 2023 10:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 163.5.184.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 06:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:2e:d8:3e:2b:fc:a1:52:dd:a3:bc:6f:db:21:24:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 6 10:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=200a55fc8660a8b78b7a5fdde0d4dd52945549ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f0:f0:5f:99:ed:24:6c:9e:5d:ff:60:06:05:
e0:5d:cd:89:72:8b:7d:7f:ed:06:e2:af:6f:eb:90:
97:3b:76:dc:3a:88:62:82:46:89:cf:6b:fa:9a:3c:
3a:f4:6c:60:95:ca:5b:96:8c:e9:39:39:0d:a5:90:
9a:38:8a:c9:cf:89:d0:63:e0:45:cb:20:9d:85:8d:
84:94:b0:cb:0e:10:b3:cd:02:19:e6:f7:8b:0f:11:
f5:bf:5f:6a:19:70:71:23:f0:ff:96:a8:89:ae:a4:
36:e6:1b:05:8b:27:33:d8:34:54:a8:dd:da:18:67:
d9:3a:d2:1e:2a:37:66:c7:69:f6:81:4a:27:f3:c5:
04:e9:a1:da:82:ab:43:82:f3:65:13:ce:39:87:b3:
37:1a:6f:23:9b:35:70:48:ce:8f:8d:f7:7e:b2:d0:
f9:c7:42:3a:af:ab:f3:a9:be:55:da:85:92:58:ca:
cd:c6:33:42:50:00:7b:a7:8b:0b:7f:21:3b:0b:43:
c4:cc:d6:be:ac:0b:55:0c:43:ac:8c:20:eb:f5:3f:
16:9b:9c:f9:8e:32:51:de:7d:0d:c5:a4:a5:d2:0e:
be:78:e2:95:b4:25:90:16:5a:71:5b:c5:b8:9c:29:
e6:8a:c7:15:9d:ff:b1:02:2a:58:ff:57:36:0d:d6:
b1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:55:FC:86:60:A8:B7:8B:7A:5F:DD:E0:D4:DD:52:94:55:49:EE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/IApV_IZgqLeLel_d4NTdUpRVSe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.184.0/24
163.5.217.0/24
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
31:d8:22:4c:87:fc:3a:5f:9c:cf:96:77:c4:25:bc:1a:aa:c8:
c4:96:66:01:ea:ab:d0:a9:69:bd:b6:e3:da:75:ab:b4:9b:ca:
57:ab:34:52:55:ef:f0:31:b6:83:c9:b9:0f:a2:b9:3a:62:49:
45:a0:20:3d:f8:c2:57:80:42:fb:a4:d8:10:94:28:40:f6:91:
66:94:8d:c2:9f:9a:e6:e5:2f:0b:61:6b:39:e4:14:33:4d:d8:
d9:f4:51:32:a4:a0:4e:e9:a6:c6:64:0a:61:73:88:33:1c:ea:
5c:b9:ff:b6:09:7b:11:18:ca:c5:02:ae:fc:dd:6f:b5:32:b6:
5c:e7:c9:9a:27:5a:e6:63:2d:6d:55:6e:5f:7e:ab:c4:6e:ed:
62:18:b0:7b:a1:f0:d0:9f:76:57:30:23:c0:28:51:05:a0:9f:
c5:aa:76:71:64:f0:70:74:68:85:66:d6:93:88:dc:e6:1d:2d:
75:5e:81:dc:8f:2a:dd:5e:20:3a:df:09:f5:5c:c5:dc:c8:03:
2b:73:f1:a2:d6:55:5f:3c:f5:04:8b:0c:1e:57:8f:37:9b:52:
a7:10:04:07:14:04:25:b1:dd:b9:39:19:0a:b4:f2:d0:b1:8f:
ce:88:5e:9a:99:6d:45:4f:94:4b:4d:c3:ed:78:e7:f1:f9:4e:
f7:5a:db:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYYmLtg+K/yhUt2jvG/bISS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMjA2MTAwNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDBhNTVmYzg2NjBhOGI3OGI3YTVmZGRlMGQ0ZGQ1Mjk0NTU0OWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfDwX5ntJGyeXf9gBgXgXc2Jcot9
f+0G4q9v65CXO3bcOohigkaJz2v6mjw69GxglcpblozpOTkNpZCaOIrJz4nQY+BF
yyCdhY2ElLDLDhCzzQIZ5veLDxH1v19qGXBxI/D/lqiJrqQ25hsFiycz2DRUqN3a
GGfZOtIeKjdmx2n2gUon88UE6aHagqtDgvNlE845h7M3Gm8jmzVwSM6Pjfd+stD5
x0I6r6vzqb5V2oWSWMrNxjNCUAB7p4sLfyE7C0PEzNa+rAtVDEOsjCDr9T8Wm5z5
jjJR3n0NxaSl0g6+eOKVtCWQFlpxW8W4nCnmiscVnf+xAipY/1c2DdaxZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCAKVfyGYKi3i3pf3eDU3VKUVUnuMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvSUFwVl9JWmdxTGVMZWxfZDROVGRVcFJWU2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowW4AwQA
owXZAwQAowXoMA0GCSqGSIb3DQEBCwUAA4IBAQAx2CJMh/w6X5zPlnfEJbwaqsjE
lmYB6qvQqWm9tuPadau0m8pXqzRSVe/wMbaDybkPork6YklFoCA9+MJXgEL7pNgQ
lChA9pFmlI3Cn5rm5S8LYWs55BQzTdjZ9FEypKBO6abGZAphc4gzHOpcuf+2CXsR
GMrFAq783W+1MrZc58maJ1rmYy1tVW5ffqvEbu1iGLB7ofDQn3ZXMCPAKFEFoJ/F
qnZxZPBwdGiFZtaTiNzmHS11XoHcjyrdXiA63wn1XMXcyAMrc/Gi1lVfPPUEiwwe
V483m1KnEAQHFAQlsd25ORkKtPLQsY/OiF6amW1FT5RLTcPteOfx+U73WttB
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:30 2024 by rpki-client on console-ams.rpki-client.org