Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/S5lRcoWzwfbwtrtzy8Ls2QFDqH0.roa
File: S5lRcoWzwfbwtrtzy8Ls2QFDqH0.roa (raw, json)
Hash identifier: oNN9Rp8b/K2eBFLdyP6O9U1e7jD/GY8LS2Rg+xCJ4qU=
Subject key identifier: 4B:99:51:72:85:B3:C1:F6:F0:B6:BB:73:CB:C2:EC:D9:01:43:A8:7D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188CB6B439F5F9CB433EB8F466D84DC9375
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/S5lRcoWzwfbwtrtzy8Ls2QFDqH0.roa
Signing time: Sat 17 Jun 2023 22:13:04 +0000
ROA not before: Sat 17 Jun 2023 22:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 163.5.66.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cb:6b:43:9f:5f:9c:b4:33:eb:8f:46:6d:84:dc:93:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 17 22:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b99517285b3c1f6f0b6bb73cbc2ecd90143a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d0:82:94:d6:56:76:47:ab:01:70:cb:2f:b0:
79:47:92:6b:3f:80:54:a4:c2:5b:f0:07:70:8f:9b:
11:f4:db:38:4b:d6:3e:e9:9f:2a:4f:5e:fa:91:83:
48:73:9a:92:dc:ec:f6:8f:41:19:85:38:c5:50:34:
02:a4:bd:6e:4b:97:b1:7e:f6:93:1c:fb:30:88:3d:
07:b1:27:09:77:64:af:f2:b1:db:a3:b2:db:5c:6d:
d8:e9:13:c3:39:98:d8:a8:75:8d:41:3f:2c:90:66:
ec:0c:ec:66:df:17:fe:de:e2:1d:f6:33:1e:02:73:
cc:11:80:4d:46:d1:2a:53:63:3e:b5:0a:ff:d9:33:
eb:e6:09:bc:de:20:33:3f:8f:12:49:3d:e7:db:bf:
76:20:09:69:8f:b2:f9:78:12:a1:e2:77:6c:f6:ae:
c1:3a:df:d4:ee:b6:f1:9d:e8:f5:bc:86:c3:ce:48:
18:66:8b:2f:14:0e:ae:e8:c6:22:16:17:68:17:99:
78:33:c8:36:9d:08:9d:78:44:7d:e5:1a:c4:9b:2b:
9f:fe:9a:c2:59:a4:95:4a:65:dc:43:6a:2b:3b:d6:
a0:1d:38:96:4d:7e:e6:e6:c7:79:a4:ff:3f:29:b0:
71:b0:ce:5a:ee:29:1c:94:81:84:21:1a:f6:e8:4a:
26:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:51:72:85:B3:C1:F6:F0:B6:BB:73:CB:C2:EC:D9:01:43:A8:7D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/S5lRcoWzwfbwtrtzy8Ls2QFDqH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.66.0/24
163.5.74.0/23
163.5.84.0/24
Signature Algorithm: sha256WithRSAEncryption
58:92:70:64:b7:9c:a1:33:51:34:58:b7:14:28:56:79:97:f4:
92:c7:55:b8:55:d1:ea:2c:93:86:e1:b8:0f:88:bc:a7:0e:d8:
3b:4e:37:4e:a3:6a:af:6b:14:65:9a:9a:00:a8:d7:96:20:d8:
26:70:cb:6b:5b:4e:ce:d4:2d:39:96:02:45:cc:59:e3:b1:c9:
b4:5b:9a:32:07:9f:ce:69:ad:24:a4:3d:e4:dc:00:ba:c2:bf:
84:55:c2:53:aa:16:96:2a:b8:33:ce:38:a8:45:02:da:d8:7d:
3f:50:9a:e0:db:8a:b0:48:ad:ad:fc:aa:2c:14:6e:b4:0c:2f:
ad:93:50:e6:0e:8d:eb:7b:db:67:0b:76:cf:1b:e3:2d:96:7c:
2e:78:52:52:70:5e:7c:01:ed:b5:dd:50:bb:fd:69:1d:d6:aa:
f2:b1:44:f6:83:c8:65:e0:33:01:80:d4:bf:4d:0e:e7:81:65:
0a:f6:be:00:f4:b9:ad:bc:ec:5d:59:6b:5e:f3:b5:a2:1f:79:
26:39:22:6a:94:e2:38:92:96:6c:8e:fd:68:a9:83:af:26:24:
25:67:5c:ee:b0:a4:68:fd:77:41:be:6d:8e:96:10:4b:2d:87:
aa:6c:13:11:0d:2c:1c:ac:26:e3:8a:7f:e6:41:fe:6f:a7:fd:
e7:c3:dc:4c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjLa0OfX5y0M+uPRm2E3JN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjE3MjIxMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yjk5NTE3Mjg1YjNjMWY2ZjBiNmJiNzNjYmMyZWNkOTAxNDNhODdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNCClNZWdkerAXDLL7B5R5JrP4BU
pMJb8Adwj5sR9Ns4S9Y+6Z8qT176kYNIc5qS3Oz2j0EZhTjFUDQCpL1uS5exfvaT
HPswiD0HsScJd2Sv8rHbo7LbXG3Y6RPDOZjYqHWNQT8skGbsDOxm3xf+3uId9jMe
AnPMEYBNRtEqU2M+tQr/2TPr5gm83iAzP48SST3n2792IAlpj7L5eBKh4nds9q7B
Ot/U7rbxnej1vIbDzkgYZosvFA6u6MYiFhdoF5l4M8g2nQideER95RrEmyuf/prC
WaSVSmXcQ2orO9agHTiWTX7m5sd5pP8/KbBxsM5a7ikclIGEIRr26EomSQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEuZUXKFs8H28La7c8vC7NkBQ6h9MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUzVsUmNvV3p3ZmJ3dHJ0enk4THMyUUZEcUgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowVCAwQB
owVKAwQAowVUMA0GCSqGSIb3DQEBCwUAA4IBAQBYknBkt5yhM1E0WLcUKFZ5l/SS
x1W4VdHqLJOG4bgPiLynDtg7TjdOo2qvaxRlmpoAqNeWINgmcMtrW07O1C05lgJF
zFnjscm0W5oyB5/Oaa0kpD3k3AC6wr+EVcJTqhaWKrgzzjioRQLa2H0/UJrg24qw
SK2t/KosFG60DC+tk1DmDo3re9tnC3bPG+MtlnwueFJScF58Ae213VC7/Wkd1qry
sUT2g8hl4DMBgNS/TQ7ngWUK9r4A9LmtvOxdWWte87WiH3kmOSJqlOI4kpZsjv1o
qYOvJiQlZ1zusKRo/XdBvm2OlhBLLYeqbBMRDSwcrCbjin/mQf5vp/3nw9xM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org