Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O8OatYYYc0Ve__izLmqnJYH_Ka8.roa
File: O8OatYYYc0Ve__izLmqnJYH_Ka8.roa (raw, json)
Hash identifier: IrA7xh8VPi7/R29UCoLPAQi0weEBTHxaaA9tf+7OYdw=
Subject key identifier: 3B:C3:9A:B5:86:18:73:45:5E:FF:F8:B3:2E:6A:A7:25:81:FF:29:AF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018735C76BCD7DBA8BAFEA867F84D4D014C4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O8OatYYYc0Ve__izLmqnJYH_Ka8.roa
Signing time: Fri 31 Mar 2023 03:47:54 +0000
ROA not before: Fri 31 Mar 2023 03:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 163.5.217.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:35:c7:6b:cd:7d:ba:8b:af:ea:86:7f:84:d4:d0:14:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 31 03:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bc39ab5861873455efff8b32e6aa72581ff29af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:e2:56:0e:ec:f3:c6:0d:a0:44:45:4b:e7:
83:de:b5:99:de:bc:ee:ab:cb:60:32:f7:aa:88:d7:
95:54:d3:e2:17:ae:91:7c:00:a7:31:2f:bf:cf:57:
e0:19:27:89:f9:3c:f5:a6:5b:37:3b:d1:40:d4:af:
52:83:79:5b:45:64:f6:95:cc:45:1e:b6:8f:4a:68:
ac:5d:60:4d:67:ed:dd:3b:af:09:c6:2a:0e:19:89:
38:d6:a1:ab:bc:15:2b:66:5d:9f:ca:10:5b:72:d2:
b5:9a:d5:2a:4b:a7:18:23:9d:27:cd:53:f5:45:2b:
0e:78:0f:6f:32:5e:5b:fe:48:66:4b:79:9f:19:01:
2a:f7:ee:45:eb:d6:47:00:b9:b0:56:71:d0:fe:92:
88:d3:8d:42:0f:56:d3:85:67:c6:d1:35:4f:49:94:
68:3d:a9:35:24:26:63:82:1e:ec:e6:26:aa:de:a4:
59:c6:a0:4b:ab:a8:75:87:74:a5:78:3e:73:ac:db:
ff:85:50:e2:6e:7c:b9:c2:af:a9:3b:33:26:b5:56:
0f:da:29:b2:21:38:dc:10:0c:0b:9f:df:2b:76:ab:
e1:d1:eb:79:6a:af:48:4b:f1:54:c7:ed:d8:84:65:
e9:f0:bb:06:36:54:b3:b8:67:67:00:39:6b:fc:54:
95:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C3:9A:B5:86:18:73:45:5E:FF:F8:B3:2E:6A:A7:25:81:FF:29:AF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/O8OatYYYc0Ve__izLmqnJYH_Ka8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.33.0/24
163.5.217.0/24
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c1:1d:07:f2:1d:9e:0f:b6:e9:65:7d:99:0f:08:66:32:ba:
26:fd:c7:bc:39:c3:da:46:72:c9:22:2b:fa:7d:bd:b0:d6:c7:
f8:d8:4f:3b:30:fb:90:54:f9:27:f1:ba:10:c4:33:cd:7f:29:
7c:4d:7b:54:b3:24:b2:e6:e7:34:0c:b0:a5:6b:fe:e0:0c:6d:
0e:e6:ff:2f:7c:e5:c8:e5:89:ad:36:83:2a:96:bc:d6:b6:90:
c8:ff:4d:8e:c0:3d:91:6b:76:7b:a2:4c:ec:a7:f3:99:6a:fa:
90:a6:3c:42:55:71:e8:91:6c:b8:46:30:bf:18:ca:bb:30:0a:
97:c5:5b:86:58:ec:c4:61:bc:1d:f0:d2:dd:1e:a5:a1:69:69:
b8:54:cf:05:3f:48:b5:02:c8:23:f4:a1:82:37:db:44:e6:d1:
20:31:bb:3a:60:44:30:a1:c6:da:0e:a5:d8:fe:c4:29:aa:a4:
a3:9a:8b:60:1e:18:de:e1:65:f8:34:78:a8:02:35:b6:0a:b4:
59:b2:b3:f8:49:3d:f2:6e:de:00:5b:b9:97:b4:83:56:50:fd:
b7:92:fe:f0:52:75:bc:cb:2d:82:e8:cf:b3:86:90:13:30:3c:
2c:e9:96:04:95:d5:84:24:78:77:71:39:23:70:cd:ca:28:32:
fb:49:4a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org