Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QpIOWicFkIPHxE585g46RSxFHL4.roa
File: QpIOWicFkIPHxE585g46RSxFHL4.roa (raw, json)
Hash identifier: s0JXukKoSpLT0qnFOvANt0eq5e/ry6W5wihGjw1kAWA=
Subject key identifier: 42:92:0E:5A:27:05:90:83:C7:C4:4E:7C:E6:0E:3A:45:2C:45:1C:BE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B31515B970994220082E08ABCB4C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QpIOWicFkIPHxE585g46RSxFHL4.roa
Signing time: Mon 02 Jan 2023 02:14:57 +0000
ROA not before: Mon 02 Jan 2023 02:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.215.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b3:15:15:b9:70:99:42:20:08:2e:08:ab:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42920e5a27059083c7c44e7ce60e3a452c451cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:61:af:18:6e:fe:e4:83:d6:35:2c:e7:7a:
46:58:00:4e:0e:bd:18:c7:50:32:1b:a5:4e:7a:50:
be:e1:97:0d:e7:c6:89:83:04:ab:25:69:46:5a:22:
ba:8f:77:b5:8a:84:61:ad:ea:9f:35:a2:df:8d:dc:
33:c3:f0:d1:76:1b:12:5c:be:cf:ae:96:ac:38:0e:
60:df:ec:da:7a:d0:32:ae:48:ce:aa:83:12:68:b0:
db:e1:6b:e3:5a:ba:7f:54:16:78:ad:da:dc:22:0e:
ae:13:6d:2f:f9:d0:b3:e0:71:33:c5:92:b1:ce:4e:
bf:29:72:f2:b7:b0:ca:a3:61:fb:90:8b:e5:8a:b8:
84:56:cb:53:00:f3:81:13:b3:e3:70:c3:10:db:cc:
68:eb:f8:89:58:37:28:d1:61:c1:56:63:f5:b2:18:
b5:ee:c8:2a:62:1d:75:22:1d:88:f9:5b:d2:56:bb:
8e:a2:a5:bb:77:69:81:23:91:6c:97:82:65:4a:b2:
29:49:9a:2b:73:ae:4c:31:cf:2b:35:62:cb:ed:b6:
a6:ca:dd:89:73:b9:65:98:66:95:d6:fa:69:0e:3f:
f3:e7:33:9a:fa:5f:20:74:10:66:17:9a:9d:b4:f3:
b7:c4:12:c1:01:5d:e6:0a:d7:7b:58:50:70:ba:0a:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:0E:5A:27:05:90:83:C7:C4:4E:7C:E6:0E:3A:45:2C:45:1C:BE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QpIOWicFkIPHxE585g46RSxFHL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.106.0/24
163.5.118.0/23
163.5.121.0/24
163.5.159.0/24
163.5.215.0/24
163.5.225.0/24
163.5.229.0/24
Signature Algorithm: sha256WithRSAEncryption
21:4a:bf:40:2f:a0:25:70:40:23:96:cf:86:0f:9d:c8:68:90:
01:74:e8:55:ac:fb:bb:34:c7:52:16:b7:59:c7:80:f6:52:ed:
e6:14:87:6d:45:ec:69:b3:ed:ae:b8:cc:4a:92:ef:36:32:14:
65:8c:25:01:d4:28:5e:a6:03:b0:cf:cc:7f:05:74:53:b7:6d:
35:44:44:3b:26:93:62:f1:80:e8:ff:72:63:2f:4b:4d:79:6f:
80:58:7a:6b:e0:1f:f8:e8:67:4c:32:49:38:5c:bb:17:bd:48:
d8:69:ea:dc:fd:e7:26:f2:9d:58:95:a2:73:a1:a9:13:65:42:
23:2d:f7:cc:22:36:79:2b:61:9d:73:1e:dd:1e:4d:e6:86:b8:
13:80:a0:56:ef:82:d2:64:93:8e:67:a6:78:0e:46:87:98:47:
43:03:c7:86:97:a4:5a:1a:07:52:bc:5a:0a:cd:1b:f6:42:f2:
f7:52:2e:a3:7d:79:0b:a1:5b:bb:3d:4c:76:9d:08:50:44:e6:
a4:13:c8:a9:32:20:05:00:18:cf:5d:9f:22:49:4e:a9:6f:e4:
cc:80:6f:ac:4c:be:25:98:65:19:41:a8:c2:6a:fd:e5:e6:aa:
f5:b5:69:47:72:8d:2a:b3:70:aa:0a:aa:91:f7:ad:15:4d:50:
1e:7c:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org