Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y6_ol0igs1kYrEP1MyVAHliMSpw.roa
File: Y6_ol0igs1kYrEP1MyVAHliMSpw.roa (raw, json)
Hash identifier: hgC++M526JuG9B3h+uKB5uclTyofCDomolHccEDqf4I=
Subject key identifier: 63:AF:E8:97:48:A0:B3:59:18:AC:43:F5:33:25:40:1E:58:8C:4A:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187BD7D047052F1588A06F4C81FBA25A6A9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y6_ol0igs1kYrEP1MyVAHliMSpw.roa
Signing time: Wed 26 Apr 2023 12:14:59 +0000
ROA not before: Wed 26 Apr 2023 12:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:7d:04:70:52:f1:58:8a:06:f4:c8:1f:ba:25:a6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 26 12:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63afe89748a0b35918ac43f53325401e588c4a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:e8:ef:c1:20:e4:3e:9d:28:f4:23:5b:75:
0a:c2:fb:4e:7a:eb:1a:0a:47:ec:f8:5e:5a:91:2f:
23:78:f2:42:78:d4:73:fb:10:46:40:1e:c4:b3:85:
7f:67:6f:bd:a2:23:06:4d:bd:e6:5e:1a:af:5c:95:
06:36:fa:9c:a8:e7:36:90:65:3a:40:31:d0:6b:f5:
eb:47:e3:d9:70:b3:c8:4d:5a:a2:79:5b:fe:03:a9:
77:c6:e8:ae:b6:fc:37:b1:65:da:a1:c2:c9:4b:53:
19:7c:91:85:51:e3:0e:57:a0:81:aa:cd:44:59:84:
ec:c2:9c:51:f5:81:a3:5c:c4:be:cc:c0:ac:37:2c:
b0:a5:c5:ff:4b:d4:9a:45:75:66:86:43:75:e7:54:
ac:c9:5c:7c:0c:40:e5:82:98:ef:e6:c6:38:fe:10:
69:d3:29:03:2c:5e:d5:e3:9d:bd:a9:b8:be:62:3f:
05:8d:61:08:b7:25:4a:8c:2c:4b:dd:71:f6:ac:c0:
84:b4:62:ba:39:69:f3:6e:af:86:e3:56:0c:3b:3c:
54:8e:7e:1f:f6:f4:45:0a:4b:29:8e:b2:d4:7f:a0:
69:4f:83:4d:6d:3c:54:f4:08:fe:33:e0:c7:2d:dd:
25:e8:7b:77:0c:b9:fd:b5:01:f2:ac:22:82:fe:42:
07:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AF:E8:97:48:A0:B3:59:18:AC:43:F5:33:25:40:1E:58:8C:4A:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y6_ol0igs1kYrEP1MyVAHliMSpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.113.0-163.5.114.255
163.5.141.0/24
163.5.146.0/24
163.5.162.0/24
163.5.194.0/24
163.5.224.0/24
163.5.234.0/24
163.5.236.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a5:ca:cb:1a:74:5a:3b:8a:c3:b7:fd:8d:7f:5d:7b:3f:9b:
44:f1:a4:c0:c3:7a:6e:a7:04:eb:44:e3:50:0c:cc:52:d3:95:
23:47:31:e4:78:2b:53:cc:f6:cc:8a:ea:bf:a2:4d:9e:24:19:
2e:9a:a7:74:ee:d7:d8:54:4e:f8:f8:51:26:e1:31:73:c5:ac:
6c:12:1d:36:c3:0d:87:45:ea:a8:77:a8:be:ea:f9:0e:fc:bc:
46:92:89:c5:74:d1:ef:c0:e8:13:32:13:06:7d:90:d3:66:a8:
54:19:03:99:70:a2:4c:21:e4:01:9c:19:5e:e8:f2:9e:7e:43:
a0:c6:b5:bf:42:a0:5c:7b:1a:11:9e:33:03:e5:2d:c5:b4:70:
50:99:e3:fe:06:3c:9f:c1:ec:a4:c9:36:02:08:8b:ad:c1:cd:
54:99:3e:d0:7d:61:9c:e8:ec:0c:3f:3a:85:1a:85:f6:38:89:
d3:fd:54:9c:1e:85:ac:9c:87:d6:20:1f:7d:80:ab:2e:33:67:
9b:f8:0e:a3:4c:0c:eb:43:ad:43:21:59:23:c4:0a:c2:9d:90:
6f:65:d1:0f:f2:43:7d:d8:c3:b0:d1:f8:b8:73:db:1d:fb:35:
94:7d:5c:b2:96:33:f5:97:8e:6b:ba:e1:7e:2e:d7:4f:2d:64:
26:bf:5a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org