Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wcd-tUHLpjd6_Bm7Mmvvki1wbUw.roa
File: Wcd-tUHLpjd6_Bm7Mmvvki1wbUw.roa (raw, json)
Hash identifier: ll/5mEYG/VruO8L0rlqxLLmuv0t0gvput5IrBpShWdg=
Subject key identifier: 59:C7:7E:B5:41:CB:A6:37:7A:FC:19:BB:32:6B:EF:92:2D:70:6D:4C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01873C54AB6D12647218818F50608547EF14
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wcd-tUHLpjd6_Bm7Mmvvki1wbUw.roa
Signing time: Sat 01 Apr 2023 10:19:54 +0000
ROA not before: Sat 01 Apr 2023 10:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:54:ab:6d:12:64:72:18:81:8f:50:60:85:47:ef:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 1 10:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c77eb541cba6377afc19bb326bef922d706d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e3:01:d3:51:07:c0:bf:58:c1:5a:e2:bc:2a:
d9:e3:27:f0:67:69:cd:92:79:f6:50:75:1c:f9:97:
c5:b4:2b:5b:fd:09:f1:1d:aa:12:7a:cf:c3:88:42:
71:ee:50:7d:82:56:f0:06:8e:c7:01:35:74:ac:b7:
a8:6e:d7:85:95:a8:9c:38:54:d6:df:78:0f:cd:6d:
e5:63:28:90:43:ca:cb:dc:3f:ec:b9:22:96:4e:17:
3b:0d:27:2e:cd:0f:d4:51:74:55:da:f5:61:47:ce:
93:14:35:68:d5:46:bb:08:21:ee:c7:0d:a2:e9:5a:
56:f3:85:42:71:e7:da:55:36:cf:5f:c2:9c:af:4e:
1f:94:6c:fa:5e:42:2a:eb:4d:e2:e8:b5:b2:de:85:
77:48:b6:99:33:b8:ed:af:46:e2:25:0b:bb:cc:56:
d8:71:e5:42:cb:65:0b:4c:88:17:e7:90:8f:5a:52:
02:af:17:ef:2d:dd:6f:c4:5c:4e:3d:be:d3:c6:4d:
a1:2d:f6:9d:99:0c:e6:d3:e5:5a:2e:cd:9c:4c:09:
92:86:75:dc:a9:00:df:18:da:e4:37:48:dd:a1:b8:
e3:bf:02:7d:9d:66:4c:a4:55:17:d0:a2:e2:96:7d:
79:8b:9a:fa:12:50:07:49:d3:8a:8c:1e:6f:78:08:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:7E:B5:41:CB:A6:37:7A:FC:19:BB:32:6B:EF:92:2D:70:6D:4C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wcd-tUHLpjd6_Bm7Mmvvki1wbUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.39.0/24
163.5.91.0/24
163.5.97.0/24
163.5.169.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:5a:c5:d2:85:46:da:f4:f6:3e:db:27:27:42:87:81:ac:3c:
b0:6f:9a:32:7d:c7:9a:8a:2b:32:90:5f:6d:f7:86:32:c1:27:
eb:db:89:bb:e7:14:74:3a:28:7f:7b:fc:03:65:2d:57:95:38:
fe:15:e0:69:42:0b:cf:79:53:65:2d:c7:6e:9b:e1:cd:ed:65:
1f:99:fb:19:a2:79:8c:4c:69:15:65:d8:25:ac:70:f6:9c:62:
b9:da:86:f2:c4:43:0e:d2:73:8e:d8:5e:c8:24:af:3e:11:3c:
b3:65:87:c4:bf:26:4f:f3:f5:e6:79:9b:f5:5c:ff:4a:00:64:
83:5d:75:cb:0f:3e:29:e2:9e:a9:59:01:a3:54:c2:a2:86:3d:
09:1a:41:14:05:27:9c:d6:06:0f:34:13:61:e2:d4:21:e7:d7:
ec:75:09:c0:0e:89:a1:94:2b:91:6b:b4:63:96:34:ab:26:e0:
38:fb:51:98:d0:18:b4:ce:21:5a:87:37:a9:19:c4:bd:6a:55:
2a:b9:de:58:4f:ff:24:d7:5a:91:fe:4f:b4:09:6f:35:01:af:
19:ed:f4:84:7a:e7:a0:51:eb:d9:90:40:80:9d:b1:79:40:df:
ea:f1:da:22:55:7d:6a:86:f9:95:c4:32:3d:52:2e:c8:da:4f:
c8:de:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org