Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V_IgPObacVoZQSiR3EVezIqVCvY.roa
File: V_IgPObacVoZQSiR3EVezIqVCvY.roa (raw, json)
Hash identifier: tB+J8Zlqck+YHny7pHsw0qYRw1wH5zStXrtvBfvOpvc=
Subject key identifier: 57:F2:20:3C:E6:DA:71:5A:19:41:28:91:DC:45:5E:CC:8A:95:0A:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187643EAFCC86807929DECE279B16BBAFC1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V_IgPObacVoZQSiR3EVezIqVCvY.roa
Signing time: Sun 09 Apr 2023 04:20:42 +0000
ROA not before: Sun 09 Apr 2023 04:20:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:64:3e:af:cc:86:80:79:29:de:ce:27:9b:16:bb:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 9 04:20:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57f2203ce6da715a19412891dc455ecc8a950af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3a:f4:75:83:7b:5f:66:9d:f2:3f:b9:11:f3:
24:c4:64:a9:91:03:fd:97:45:45:2e:2e:80:ed:af:
e8:d9:46:c2:25:06:df:56:44:f4:6f:56:5c:54:02:
ef:2d:bf:92:14:17:32:8b:ad:e1:fc:b6:87:29:87:
ba:c9:43:3b:b7:09:6f:48:83:45:41:7d:bf:78:f0:
1f:db:d4:24:68:0f:90:88:08:e5:f5:ab:98:b4:76:
6b:eb:d7:bc:8b:4e:f4:99:62:fc:5c:28:4d:7d:02:
29:16:1b:05:45:d3:25:9a:50:d2:1e:c8:01:c2:17:
16:75:cc:ba:b0:e0:b8:89:20:8c:bb:3e:cf:73:d1:
cf:8d:fc:97:5f:1d:11:be:51:18:d8:b6:89:a2:df:
f5:f7:8f:43:49:32:28:b8:11:3c:ac:ad:09:0e:fa:
73:8a:0f:51:23:1e:b2:6d:cd:29:c0:ee:da:11:bc:
e8:ba:c6:b5:75:f2:98:67:ef:b9:73:b9:c3:31:8c:
bd:76:fa:e5:9d:53:4c:0d:2c:a3:6e:9a:03:73:29:
fa:08:36:db:a3:ab:7f:b8:ca:aa:4b:d5:7f:d4:fa:
f6:2f:bd:e5:6e:ee:1a:78:70:78:84:f4:a7:2c:06:
5e:27:c6:f9:b0:44:0e:dc:66:d8:c7:19:76:88:97:
51:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F2:20:3C:E6:DA:71:5A:19:41:28:91:DC:45:5E:CC:8A:95:0A:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V_IgPObacVoZQSiR3EVezIqVCvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.165.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:a2:24:ec:ab:6f:0c:aa:38:68:8f:81:3c:cb:6f:7b:68:54:
4a:81:09:74:4f:01:a2:3c:8d:22:21:cb:bb:a2:14:5f:49:96:
24:68:66:f9:20:34:2b:be:5f:87:f8:d2:91:35:59:c7:27:c6:
64:9e:d1:8a:ae:be:f6:a9:04:b3:e2:b8:d4:cb:7c:b3:f2:a9:
22:a7:e0:90:a8:f2:f6:2b:35:42:1b:aa:a8:62:df:06:22:c9:
3c:86:bf:12:26:e9:2f:22:5b:d6:ad:a7:84:3a:91:0f:f7:3e:
1c:59:0b:de:33:d0:a5:f6:3c:19:5d:20:76:3a:60:41:e5:82:
26:28:a5:5f:10:0b:ba:bf:9a:1d:f1:aa:1b:6d:2f:72:aa:a5:
51:59:d7:1e:e3:f2:c2:3a:32:16:4f:6b:30:27:9e:6c:bf:68:
48:c5:4e:e5:03:98:6e:01:ef:0d:ff:22:4a:c3:7f:81:67:eb:
70:4b:ab:5c:ca:56:2f:6f:5b:b4:10:31:b8:c1:b4:4c:29:aa:
d8:6f:b1:5f:53:49:4d:1d:21:b3:60:eb:12:33:21:01:0b:3e:
1e:20:c9:bc:03:16:5e:7f:34:63:83:04:6f:73:40:bd:42:d9:
e9:30:8b:4b:2a:98:f3:ce:b3:7c:e0:56:b3:4c:07:e1:f4:a5:
fe:cc:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org