Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ojj4rrHJbKbRSclSAaxb8acVApA.roa
File: Ojj4rrHJbKbRSclSAaxb8acVApA.roa (raw, json)
Hash identifier: c5EpKscEXmRzOqoXBSUBOdlfWjdmQx9B66/3AZtopCA=
Subject key identifier: 3A:38:F8:AE:B1:C9:6C:A6:D1:49:C9:52:01:AC:5B:F1:A7:15:02:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01885D0F9247D0B7162E9BDDA9150CD287F5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ojj4rrHJbKbRSclSAaxb8acVApA.roa
Signing time: Sat 27 May 2023 11:54:41 +0000
ROA not before: Sat 27 May 2023 11:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:5d:0f:92:47:d0:b7:16:2e:9b:dd:a9:15:0c:d2:87:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 27 11:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a38f8aeb1c96ca6d149c95201ac5bf1a7150290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:e4:07:66:30:65:bd:44:95:be:c2:06:e9:
13:21:7a:f4:e0:00:48:6f:11:3d:b9:f7:9d:be:cb:
e0:1d:c7:e3:49:34:ea:5e:91:bd:80:79:8c:c8:17:
c0:12:f0:12:71:0a:d9:22:8a:65:ee:e4:01:0e:72:
09:7c:e9:d4:79:d3:ae:42:6d:d2:35:93:14:78:5e:
d6:a0:bf:7e:97:dd:15:14:78:57:0e:b8:b0:57:aa:
18:68:d7:25:fc:72:fc:42:9a:86:0c:b7:a4:ba:47:
53:19:c2:c7:4e:78:0f:cc:be:f8:67:0a:db:e0:93:
d6:b1:09:c3:a0:ad:80:60:c1:7c:72:70:b7:70:8b:
52:42:04:78:e7:7c:f6:2d:63:46:a5:34:2f:04:76:
8b:e8:cc:74:c2:6c:24:d8:9a:c8:2d:a5:13:2d:a6:
6e:28:b3:91:2a:86:07:04:2d:58:a6:33:36:25:4d:
bf:14:9b:f6:82:f1:6c:97:dd:46:95:d8:90:38:b0:
f3:22:5d:6f:de:a1:be:fe:a0:40:da:96:9a:59:9c:
66:d2:13:0f:fc:54:38:c6:ba:c9:3b:28:72:89:82:
37:fb:17:ab:fb:c4:eb:4b:68:2d:6c:2c:60:6b:e8:
43:1b:5e:82:1c:52:0f:24:73:95:b1:5b:7a:f1:e5:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:F8:AE:B1:C9:6C:A6:D1:49:C9:52:01:AC:5B:F1:A7:15:02:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ojj4rrHJbKbRSclSAaxb8acVApA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.107.0/24
163.5.117.0/24
163.5.127.0/24
163.5.130.0/24
163.5.132.0/23
163.5.136.0/24
163.5.138.0/24
163.5.145.0/24
163.5.149.0/24
163.5.161.0/24
163.5.166.0/24
163.5.198.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/23
163.5.230.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:98:c3:ef:87:a4:e3:54:fe:ac:de:35:11:92:84:38:9a:78:
d6:f1:61:bb:c6:0a:cd:e1:2c:b0:40:ab:02:89:e7:fc:71:5c:
f3:c1:76:fb:8c:ca:0d:b2:be:34:7a:4f:78:43:15:20:93:ba:
a3:50:e0:1d:bb:dd:76:5e:f6:7d:06:b7:9b:7c:36:29:be:9f:
4f:f7:8c:a7:b6:72:a1:d7:8e:c6:74:45:77:b9:41:aa:bd:50:
89:20:91:1d:85:a6:c9:81:0d:28:97:b5:44:27:10:a0:54:5b:
be:9b:ab:d2:cd:cd:66:3b:31:a7:88:38:e0:ab:82:f4:23:70:
a4:44:5f:3f:34:d0:ed:69:29:b0:96:37:d4:72:43:bb:da:a5:
18:8e:88:ae:cd:a5:69:f5:0e:8a:7b:3c:1e:85:ec:ea:87:c3:
d7:6c:d9:51:e5:72:a3:bf:1a:d0:f5:25:ac:68:a7:1a:48:7b:
e5:90:28:cf:3d:dd:d0:85:01:78:e9:6e:7b:ca:56:f6:e9:52:
87:97:b1:92:5c:63:54:f1:39:5c:ed:a4:1b:fc:43:25:85:15:
31:16:6f:d5:15:bf:03:d0:fa:70:a4:65:99:0c:04:f9:c1:07:
26:2c:4e:a0:9a:5c:30:01:70:a2:8d:35:ad:50:b1:9d:c4:d1:
2d:56:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org