Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VV_8G7sXCuk5p4CVh0JyJXMyWTY.roa
File: VV_8G7sXCuk5p4CVh0JyJXMyWTY.roa (raw, json)
Hash identifier: O4Msexdz8AibDaFeQlrksxuWfqtyXGrYK696YDL9A8U=
Subject key identifier: 55:5F:FC:1B:BB:17:0A:E9:39:A7:80:95:87:42:72:25:73:32:59:36
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C54CC8D6BA72F2E2408BB6C603BABCE12
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VV_8G7sXCuk5p4CVh0JyJXMyWTY.roa
Signing time: Sun 10 Dec 2023 17:35:40 +0000
ROA not before: Sun 10 Dec 2023 17:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.38.0/23 maxlen: 23
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:cc:8d:6b:a7:2f:2e:24:08:bb:6c:60:3b:ab:ce:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 10 17:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=555ffc1bbb170ae939a780958742722573325936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:1d:6d:71:1d:0b:a0:ea:fd:d2:4a:34:4c:
a0:09:d1:f7:70:ae:d0:a5:0b:93:c1:42:66:3e:fc:
80:0b:e2:94:de:09:3e:7b:8e:5c:3d:25:8a:7f:7a:
42:9d:69:18:27:ca:ef:4f:6c:7b:24:ef:af:2e:f9:
8a:70:a0:0b:62:f2:73:6a:e4:65:b0:43:e2:70:3a:
72:d2:ea:27:7e:45:11:be:3e:d7:3d:12:7f:1c:b9:
b3:81:a1:92:25:42:9a:51:2b:2c:03:6f:7b:9b:5b:
2d:42:7d:c3:fa:dd:5b:d9:20:1a:52:79:9d:17:a7:
1c:1c:1f:d9:c7:8e:ee:df:c2:e7:0a:57:0b:51:a8:
87:4a:2c:7d:af:16:ba:c5:f7:97:60:02:59:9b:c4:
3c:33:db:95:8f:e5:dd:fc:12:eb:28:f8:e3:35:32:
28:6b:eb:0d:db:03:a2:dc:bf:2b:b3:2a:34:dc:91:
54:4b:5a:5b:ef:1c:52:45:63:ef:7d:6c:f6:f2:74:
7a:9d:f5:e5:4d:a1:5e:bd:b2:60:a8:62:84:a6:f7:
9d:37:84:e3:06:38:5e:6c:8a:23:aa:48:4a:1d:f5:
13:b3:de:9b:a3:db:5e:af:76:89:53:c5:c9:21:73:
83:06:f9:d7:84:9e:74:87:e6:9b:b4:ec:5f:42:99:
02:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5F:FC:1B:BB:17:0A:E9:39:A7:80:95:87:42:72:25:73:32:59:36
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VV_8G7sXCuk5p4CVh0JyJXMyWTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/22
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.161.0/24
163.5.171.0/24
163.5.174.0/24
163.5.177.0/24
163.5.179.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
ab:df:8d:6d:32:da:51:4f:21:9d:78:38:11:30:8c:7b:19:b4:
a4:2b:f2:0d:e9:c3:55:34:b7:88:eb:8e:c2:52:8f:77:56:08:
8c:c5:fd:8d:00:62:64:b9:4e:d1:84:03:65:ba:e1:a4:d1:92:
ac:b8:1b:c1:87:ab:4b:3e:8c:c1:24:e4:70:13:63:51:38:42:
16:9a:4a:bf:57:9a:ec:56:29:80:cb:13:8c:d0:0a:b0:3d:d4:
3f:e9:00:9a:4d:79:37:8b:42:bf:ff:ec:5a:10:f4:61:41:08:
a8:16:c3:ed:60:eb:ef:f4:89:7a:5c:77:6d:98:20:b4:99:7c:
3b:f0:e4:7d:00:72:e5:45:43:77:28:9e:80:9f:ff:2e:08:69:
df:14:b7:91:ba:59:6a:0c:cc:36:47:b9:fc:cf:16:d5:bf:d6:
39:ef:68:09:21:03:78:28:fe:4d:83:ab:4d:88:cf:8d:6f:a6:
23:e2:cc:3e:1d:19:eb:50:df:11:27:ac:be:a6:9a:c9:6d:9f:
b5:f2:68:68:88:61:c5:59:03:0f:e0:29:21:1c:90:67:2f:7b:
fb:b0:fa:e2:99:94:d3:e6:40:0b:c3:3c:b3:64:e0:46:85:c5:
f4:28:8e:1a:c9:09:a6:ed:78:b9:e1:c5:a0:e4:f9:77:e0:87:
6b:b5:dc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 17:00:10 2023 by rpki-client on console-ams.rpki-client.org