Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vzcui0h916-q-knTlKtMUCmQbcw.roa
File: Vzcui0h916-q-knTlKtMUCmQbcw.roa (raw, json)
Hash identifier: YwkjDk6jQFggkYxuxkRgLLLltYm+93NzggVloR95blQ=
Subject key identifier: 57:37:2E:8B:48:7D:D7:AF:AA:FA:49:D3:94:AB:4C:50:29:90:6D:CC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01888C699F6D9AD0C429D91166284D4F63DA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vzcui0h916-q-knTlKtMUCmQbcw.roa
Signing time: Mon 05 Jun 2023 16:35:12 +0000
ROA not before: Mon 05 Jun 2023 16:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:69:9f:6d:9a:d0:c4:29:d9:11:66:28:4d:4f:63:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 16:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57372e8b487dd7afaafa49d394ab4c5029906dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:a2:d0:2c:ec:10:8e:2e:2c:53:e6:76:66:
8b:43:ca:60:a5:7a:bf:ce:4e:6e:c3:fe:f1:20:df:
dc:82:96:42:91:46:d7:54:03:79:a6:46:76:f4:84:
e7:ee:79:0e:12:b8:68:24:99:08:69:b7:77:9c:17:
12:75:52:0f:bb:6f:d2:78:09:ab:55:83:06:67:7e:
c6:f2:7f:57:60:c9:1a:bf:1d:8f:e4:f0:46:87:68:
f8:55:75:0b:0f:43:0b:89:9d:10:9d:fd:b5:3c:42:
12:34:95:27:cd:4a:28:10:e2:a4:9c:5a:6c:ea:63:
49:b6:06:00:79:26:49:ba:50:7d:ad:d1:ba:1a:16:
67:85:35:81:ab:ca:d0:2a:33:c4:a9:2f:b8:0a:57:
7e:99:0e:26:5e:af:7c:d8:15:dd:7f:97:bf:b2:38:
a1:ee:04:73:1d:00:e1:2d:71:ea:50:58:63:37:3e:
44:85:28:ac:5b:a5:80:60:38:0e:51:d9:17:a4:93:
77:5e:53:a4:09:48:57:fa:c9:2b:60:41:2c:58:af:
d7:a1:9d:d6:7d:59:1e:fa:ca:56:b5:e5:3a:95:c7:
6a:22:64:16:16:5c:fa:8b:5d:36:81:59:60:a4:18:
af:68:58:69:05:22:cf:7a:97:75:ea:4e:3b:3a:fd:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:37:2E:8B:48:7D:D7:AF:AA:FA:49:D3:94:AB:4C:50:29:90:6D:CC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Vzcui0h916-q-knTlKtMUCmQbcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.71.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/23
163.5.116.0/24
163.5.119.0/24
163.5.131.0/24
163.5.134.0/24
163.5.147.0/24
163.5.171.0/24
163.5.174.0/24
163.5.187.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0/24
163.5.228.0/23
163.5.240.0/24
163.5.246.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:11:86:d2:37:e1:7a:cf:27:1f:ee:77:07:0c:79:96:13:00:
44:bf:0b:5d:fd:15:8a:52:13:3e:15:25:d5:c1:f4:99:59:75:
54:46:1f:86:a1:42:b6:51:42:52:31:9e:2d:99:45:a3:7b:8c:
9c:44:1e:24:86:b0:40:da:00:f7:1e:22:b1:e2:8a:ea:ad:f3:
42:55:95:2e:14:c6:da:a3:17:15:af:d5:45:1f:cc:cd:59:e5:
9f:41:7b:ba:6d:f3:21:32:51:f2:11:93:b6:0f:c6:99:1f:34:
02:08:2a:d6:3a:7f:d3:22:28:b2:b4:a3:ca:30:bf:04:41:2b:
5e:51:89:39:fe:22:c5:2a:e2:9e:23:8a:73:5c:59:ad:ce:46:
71:85:b8:d3:b9:d6:5b:3f:cb:f8:76:eb:6e:39:87:7a:6c:00:
1f:e1:b8:fa:fa:0e:6d:2b:f6:ed:9f:b3:1a:8e:87:27:85:fd:
ab:8a:a7:e2:cf:17:f5:a5:e6:9c:53:41:1c:92:e4:d3:e5:e6:
67:4c:19:c7:9b:7c:66:f0:fc:0c:94:a5:46:a1:e7:85:35:33:
be:30:d7:77:74:c8:0e:46:87:fc:ca:23:d5:39:c7:f8:02:ed:
12:67:9c:c3:dc:b3:bc:67:3c:77:cc:4c:1f:4b:3b:a3:43:cf:
89:2f:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org