Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MCIwy8kq4R7db0WyG0W_Mt4RMow.roa
File: MCIwy8kq4R7db0WyG0W_Mt4RMow.roa (raw, json)
Hash identifier: +BeKt7uilnn2f+oJADfbKXZA9wQBha6Iv3dMMQSpkvM=
Subject key identifier: 30:22:30:CB:C9:2A:E1:1E:DD:6F:45:B2:1B:45:BF:32:DE:11:32:8C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188D433CE6E65AA167109C1F2B3FE1156A9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MCIwy8kq4R7db0WyG0W_Mt4RMow.roa
Signing time: Mon 19 Jun 2023 15:09:04 +0000
ROA not before: Mon 19 Jun 2023 15:09:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:33:ce:6e:65:aa:16:71:09:c1:f2:b3:fe:11:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 19 15:09:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=302230cbc92ae11edd6f45b21b45bf32de11328c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:5c:da:b2:f3:55:e5:3b:4d:cf:0b:03:d1:
71:32:04:c4:6a:3d:52:95:44:7e:01:2d:22:16:4e:
3f:a0:75:a4:de:36:75:32:f6:00:60:d3:4c:78:6b:
42:fc:be:8a:3a:13:f4:8e:1f:8f:97:37:fd:9a:92:
c1:90:ad:e8:2e:c0:40:e1:1e:8c:9e:e2:fc:80:a6:
48:13:3d:16:a5:de:e6:29:53:98:b4:8e:f0:98:3d:
a1:76:a2:80:7e:75:17:b8:25:63:4d:69:06:4a:cc:
3c:45:a3:7f:9f:a1:b8:da:89:e3:c7:1f:1a:a9:ab:
ab:52:26:5d:38:f6:6e:b6:21:1e:24:be:10:6b:a5:
f1:ff:20:57:4d:f1:d6:a5:9f:2c:f5:44:57:10:07:
f7:43:b4:97:8f:f7:62:5d:37:57:1f:ea:cc:5e:14:
49:2e:91:ad:88:3b:55:b1:8e:90:70:6c:ef:41:ad:
ba:84:3a:0d:41:ee:ed:d6:f3:02:3e:79:c0:b1:6d:
d2:c5:1e:16:cd:57:64:5f:29:55:1e:ab:e2:a1:5b:
cf:23:fd:12:86:f4:61:cb:3b:ed:02:15:44:97:07:
0d:90:e0:d2:33:e3:be:f1:39:8a:a8:fb:3e:12:2c:
0d:5c:8e:43:3b:6f:e7:b4:b9:c0:19:86:cf:6f:dc:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:22:30:CB:C9:2A:E1:1E:DD:6F:45:B2:1B:45:BF:32:DE:11:32:8C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MCIwy8kq4R7db0WyG0W_Mt4RMow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.127.0/24
163.5.130.0/24
163.5.132.0/23
163.5.136.0/24
163.5.138.0/24
163.5.145.0/24
163.5.161.0/24
163.5.198.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/24
163.5.230.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
49:7b:17:a8:5c:bd:73:0f:40:22:96:0a:73:30:37:0c:5a:93:
23:a6:b5:00:24:ae:86:8b:53:7f:59:f9:fe:cc:9f:64:bc:3f:
c7:1e:13:b7:25:4f:fe:f4:e6:b3:00:bf:20:49:28:76:c7:9b:
c5:b7:7a:1b:67:26:93:55:b4:c6:c6:d1:20:ea:6f:ed:11:db:
72:b2:ea:7b:b1:1b:cc:1d:bb:25:23:91:bc:98:f7:f5:9b:a7:
a0:ef:2e:45:0f:ee:db:cf:07:3a:e1:2b:28:15:d4:d1:a8:d2:
db:e1:a9:2b:ac:4f:ed:b4:8f:81:ff:40:bc:c9:33:f3:3b:a8:
33:6f:b8:ff:f2:e8:b9:0e:80:82:a4:2f:48:6d:13:19:dc:30:
f3:7c:5b:b2:31:dd:9d:0a:f7:cb:75:92:2e:33:f8:6d:b1:32:
41:bc:0e:9c:d4:31:4a:e2:4c:c2:14:6d:50:76:b1:09:a7:76:
92:8a:eb:c1:d7:59:cb:f0:a3:df:e4:0a:33:2c:8c:a2:82:d1:
38:60:13:0d:d6:58:27:b6:fe:73:0c:cf:31:aa:5c:fb:7f:d3:
5a:6d:63:1b:2e:7c:c5:5d:47:93:8b:9a:a4:41:6b:0a:00:eb:
1a:75:01:70:1a:dc:85:26:96:ac:70:6f:29:1c:9b:f1:1a:cb:
8e:1c:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org