Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PzGcYu5DArdt-rsxN9YUm-7smVw.roa
File: PzGcYu5DArdt-rsxN9YUm-7smVw.roa (raw, json)
Hash identifier: oeMWEydHdkDRURrzKhhqukfb1f1SsEgQPF4Q/lMv7wI=
Subject key identifier: 3F:31:9C:62:EE:43:02:B7:6D:FA:BB:31:37:D6:14:9B:EE:EC:99:5C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018968AE1767079F32284A446C1A566D324D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PzGcYu5DArdt-rsxN9YUm-7smVw.roa
Signing time: Tue 18 Jul 2023 11:06:26 +0000
ROA not before: Tue 18 Jul 2023 11:06:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399486
IP address blocks: 163.5.112.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:ae:17:67:07:9f:32:28:4a:44:6c:1a:56:6d:32:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 18 11:06:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f319c62ee4302b76dfabb3137d6149beeec995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:80:e9:1b:03:bf:f2:2d:54:b0:42:8b:5e:
91:7e:99:6d:04:c1:75:08:b8:6b:2e:68:38:13:b6:
81:6d:fa:90:2e:9c:a3:5e:b0:1d:55:6a:6f:e6:ca:
42:62:b0:5f:b4:7f:ed:34:cd:de:d4:f9:71:da:4e:
17:37:89:48:0e:6f:38:0e:a8:19:f0:ab:28:7f:d1:
49:7d:9c:cb:af:c9:d2:d5:a7:4d:59:82:40:ae:3b:
36:b7:65:12:ec:81:f2:b4:92:f2:11:88:6c:e5:47:
b6:80:90:ab:ba:85:18:8f:e1:4b:f4:97:2b:80:ed:
72:f4:5b:43:f8:7c:63:86:91:d4:e5:87:93:2d:33:
74:1b:5e:1c:d8:1d:19:a6:90:17:b9:94:e1:91:4f:
78:ca:1a:8b:87:3b:b4:e4:51:53:d7:44:b5:66:46:
f4:ac:c5:17:55:be:a6:8f:15:7e:77:76:6c:fe:47:
9c:0d:97:7e:2d:e2:98:d3:0c:b3:17:06:7d:40:96:
66:5d:63:99:7d:e5:5d:50:51:c4:58:4d:74:e0:2d:
5a:47:36:c6:3e:5e:3e:40:fe:cd:2a:e5:c9:e4:d6:
8b:d9:8e:3d:ff:54:38:ab:bd:04:e8:ba:da:a9:9c:
81:69:34:e8:f8:11:59:7d:6c:f4:10:3d:ef:74:49:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:31:9C:62:EE:43:02:B7:6D:FA:BB:31:37:D6:14:9B:EE:EC:99:5C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PzGcYu5DArdt-rsxN9YUm-7smVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.112.0/24
163.5.160.0/24
163.5.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:dc:b3:5e:5c:b1:d0:db:d7:f5:dd:0e:9f:85:6c:46:1e:60:
99:4a:5e:26:c1:53:ad:a1:4f:e2:39:3f:17:73:0c:a6:80:ec:
4b:b7:e0:04:0d:6b:f3:56:84:69:fb:84:2f:0f:48:e0:1b:1c:
0f:1f:29:cd:c6:31:4a:85:8f:0e:4b:65:38:60:a1:69:95:6d:
b8:8e:1a:d6:1e:c2:80:62:24:3f:59:08:28:1f:84:fb:72:d2:
fd:7c:47:cf:17:83:4a:6b:05:88:3e:77:5a:6e:b7:76:f0:18:
28:67:21:16:c4:72:57:7f:b7:16:a2:a3:b0:b2:2a:5c:0a:07:
b1:92:65:b2:96:61:c6:44:6d:e5:7c:e9:7f:56:c6:d2:67:35:
b6:ec:e8:8f:7c:23:d3:15:e2:f0:ed:89:6a:7a:d3:a6:50:a4:
65:12:b9:03:67:69:ce:dc:73:fc:13:68:7e:29:6f:47:ef:96:
f8:00:44:18:3d:70:14:37:52:87:40:66:03:63:b1:14:65:63:
86:25:20:d6:f4:8f:71:90:ae:94:f8:d7:eb:a0:bd:a0:ab:40:
de:99:da:ea:63:ed:22:62:40:69:4f:2b:e3:11:5a:56:e0:e2:
28:be:37:f4:43:eb:76:8a:fe:0c:d1:0f:c1:b1:7d:49:37:87:
9d:5a:62:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 16:49:10 2023 by rpki-client on console-ams.rpki-client.org