Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmTeCWpmgtWJLe6VqmoX3Z6EePI.roa
File: KmTeCWpmgtWJLe6VqmoX3Z6EePI.roa (raw, json)
Hash identifier: O71g98/YoUTo5jB2V5uGSDB6gYDHLYl7rrj4o7MWAuc=
Subject key identifier: 2A:64:DE:09:6A:66:82:D5:89:2D:EE:95:AA:6A:17:DD:9E:84:78:F2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018857A8DED4B2DD9E97AA39005C22DFCA4A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmTeCWpmgtWJLe6VqmoX3Z6EePI.roa
Signing time: Fri 26 May 2023 10:44:24 +0000
ROA not before: Fri 26 May 2023 10:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:a8:de:d4:b2:dd:9e:97:aa:39:00:5c:22:df:ca:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 26 10:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a64de096a6682d5892dee95aa6a17dd9e8478f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:37:69:b6:ee:18:57:87:50:ef:fc:83:fe:
9b:49:80:67:fe:c0:84:48:b7:6d:6d:fb:b1:07:c2:
73:3c:05:e7:67:b8:be:9f:43:2f:1e:ab:a5:77:25:
83:f8:04:39:ac:22:94:38:95:f6:9e:99:26:3f:0e:
3e:76:d3:be:e8:b8:02:56:45:43:d7:d8:b4:18:39:
68:31:1c:e0:e4:b5:ae:82:47:1c:ff:b0:aa:15:b1:
5a:7f:01:4f:31:83:36:2c:ff:83:a4:2f:53:41:57:
98:c9:ff:83:2d:e5:82:ae:27:e1:36:46:fe:85:d6:
66:26:3a:69:20:c0:c5:7b:e7:5d:b9:42:68:5a:62:
03:3d:fd:be:28:55:7e:35:31:69:a4:09:92:9f:d1:
53:9b:76:e1:85:b6:94:21:55:54:4d:2c:a2:9f:bf:
78:32:42:10:a1:9e:c7:2b:b2:96:05:49:2e:cc:e3:
c7:56:b4:36:e0:30:62:c1:7f:f9:74:f9:67:4d:3c:
cc:c5:e8:30:55:f4:63:59:76:cd:23:db:ca:4e:b2:
97:0d:9e:f8:3d:7c:8e:a1:7e:c3:1e:b7:93:47:35:
23:da:b1:41:55:d8:23:84:78:5b:50:4c:b6:b9:5e:
4b:02:df:72:6f:f9:c6:2f:b0:af:ac:91:ea:77:a3:
87:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:DE:09:6A:66:82:D5:89:2D:EE:95:AA:6A:17:DD:9E:84:78:F2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/KmTeCWpmgtWJLe6VqmoX3Z6EePI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.71.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/24
163.5.116.0/24
163.5.131.0/24
163.5.134.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0/24
163.5.228.0/23
163.5.238.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:16:e7:49:b5:ca:0b:9a:98:15:44:dd:97:10:eb:c7:70:de:
78:c1:65:d8:69:9a:f8:f1:f5:61:59:af:90:77:d8:9e:48:b6:
4f:9a:0f:4b:00:54:7d:cc:68:77:88:3c:ee:7c:ee:2d:88:90:
1e:39:9f:0e:1a:45:41:b2:b4:d9:e4:c6:ee:58:55:2a:8f:ef:
49:4b:7d:d6:d5:a7:84:9c:93:6e:c4:7a:c8:5f:9a:22:b7:93:
d8:a6:a1:3e:18:b1:a1:82:5b:cb:4e:e0:b6:aa:e9:5a:ef:84:
af:fa:66:04:8d:b0:96:52:d6:88:ec:9f:f4:f8:57:f1:bf:97:
74:ea:4d:a9:12:91:78:78:4d:2b:56:55:4c:00:95:d7:15:f7:
9f:64:5d:06:d5:02:f2:d8:4e:5b:0c:70:dc:9b:08:8c:03:99:
29:0f:30:7f:31:7b:87:10:57:3f:80:b5:34:d8:90:ca:87:d0:
d4:1f:24:19:53:09:13:23:e5:0d:d9:cd:72:c0:c5:e3:e2:d6:
d9:58:99:03:52:68:d4:ef:c7:8b:a5:fb:e4:47:cf:47:50:87:
3d:c6:40:bc:b4:12:28:92:98:35:2b:f4:36:43:23:36:1d:8f:
94:0d:a4:97:38:eb:6d:8e:4d:51:2c:2e:2a:0e:62:21:df:33:
db:04:be:43
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAYhXqN7Ust2el6o5AFwi38pKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNTI2MTA0NDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTY0ZGUwOTZhNjY4MmQ1ODkyZGVlOTVhYTZhMTdkZDllODQ3OGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGM3abbuGFeHUO/8g/6bSYBn/sCE
SLdtbfuxB8JzPAXnZ7i+n0MvHquldyWD+AQ5rCKUOJX2npkmPw4+dtO+6LgCVkVD
19i0GDloMRzg5LWugkcc/7CqFbFafwFPMYM2LP+DpC9TQVeYyf+DLeWCrifhNkb+
hdZmJjppIMDFe+dduUJoWmIDPf2+KFV+NTFppAmSn9FTm3bhhbaUIVVUTSyin794
MkIQoZ7HK7KWBUkuzOPHVrQ24DBiwX/5dPlnTTzMxegwVfRjWXbNI9vKTrKXDZ74
PXyOoX7DHreTRzUj2rFBVdgjhHhbUEy2uV5LAt9yb/nGL7CvrJHqd6OH7wIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFCpk3glqZoLViS3ulapqF92ehHjyMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvS21UZUNXcG1ndFdKTGU2VnFtb1gzWjZFZVBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAaMFJgME
AKMFPAMEAKMFRwMEAKMFXTAMAwQAowVlAwQAowVmAwQAowVsAwQAowV0AwQAowWD
AwQAowWGAwQAowWrAwQAowWuAwQAowW9AwQAowXAAwQAowXhAwQBowXkAwQAowXu
AwQAowX2MA0GCSqGSIb3DQEBCwUAA4IBAQAvFudJtcoLmpgVRN2XEOvHcN54wWXY
aZr48fVhWa+Qd9ieSLZPmg9LAFR9zGh3iDzufO4tiJAeOZ8OGkVBsrTZ5MbuWFUq
j+9JS33W1aeEnJNuxHrIX5oit5PYpqE+GLGhglvLTuC2qula74Sv+mYEjbCWUtaI
7J/0+Ffxv5d06k2pEpF4eE0rVlVMAJXXFfefZF0G1QLy2E5bDHDcmwiMA5kpDzB/
MXuHEFc/gLU02JDKh9DUHyQZUwkTI+UN2c1ywMXj4tbZWJkDUmjU78eLpfvkR89H
UIc9xkC8tBIokpg1K/Q2QyM2HY+UDaSXOOttjk1RLC4qDmIh3zPbBL5D
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org