Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zfi0zzyXDwzXzCcEHG1Xs7LL3cU.roa
File: Zfi0zzyXDwzXzCcEHG1Xs7LL3cU.roa (raw, json)
Hash identifier: PXzk4dGf88x4FTIijwqpfyRmrddBCG3MWu0XQD4dKbM=
Subject key identifier: 65:F8:B4:CF:3C:97:0F:0C:D7:CC:27:04:1C:6D:57:B3:B2:CB:DD:C5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187E60AB0D09068462A79048F3AEB1EDC63
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zfi0zzyXDwzXzCcEHG1Xs7LL3cU.roa
Signing time: Thu 04 May 2023 09:14:32 +0000
ROA not before: Thu 04 May 2023 09:14:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204968
IP address blocks: 163.5.206.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:0a:b0:d0:90:68:46:2a:79:04:8f:3a:eb:1e:dc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 4 09:14:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f8b4cf3c970f0cd7cc27041c6d57b3b2cbddc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:ea:81:a5:0e:85:9c:a7:68:57:02:13:62:
12:7e:db:12:44:9d:aa:f0:cb:3e:5e:21:b0:eb:e0:
18:d9:5e:0a:59:36:95:b7:e9:87:b9:56:74:f0:cc:
a6:3d:bf:48:f1:4c:4a:3d:b4:58:72:44:40:4e:84:
ea:d5:46:20:06:36:99:82:a3:b2:d7:ed:f9:40:e1:
78:37:69:c5:12:87:fb:e8:cf:36:27:e5:6d:d5:89:
c9:49:ff:46:ea:ec:ac:e5:b8:4c:97:e8:02:b8:9e:
98:db:78:84:f2:b0:cb:49:45:d7:a6:20:ea:28:21:
b8:96:25:37:e9:29:ad:16:29:38:65:22:de:22:1b:
4c:6e:cb:7e:25:88:48:dd:05:87:92:3f:35:c1:7e:
1e:5e:f9:63:a2:a4:56:23:bd:a9:32:3c:5c:28:f9:
68:69:d4:52:d0:a7:8f:9a:89:ba:28:2f:89:d1:b2:
1e:6d:ce:8b:a8:28:a0:c9:79:22:20:14:63:a9:3a:
11:14:11:a7:6b:41:a1:c9:3a:1f:f0:90:63:a2:eb:
9c:ed:4c:2f:d0:97:e1:1d:b9:10:2a:fa:ec:0d:12:
63:5c:51:5b:8d:16:4d:8c:69:56:e7:85:19:08:d8:
19:eb:6a:fd:81:bf:06:a2:b8:9a:9c:57:6c:1b:d6:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F8:B4:CF:3C:97:0F:0C:D7:CC:27:04:1C:6D:57:B3:B2:CB:DD:C5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zfi0zzyXDwzXzCcEHG1Xs7LL3cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0-163.5.157.255
163.5.206.0-163.5.209.255
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d2:ec:ee:ef:55:31:4c:9c:79:da:ba:0e:bd:b3:15:45:2d:
45:bd:cc:5e:ce:5f:35:88:67:f3:04:2a:0a:52:48:15:e3:76:
b7:4c:a8:05:f0:7a:c5:2c:36:57:3c:54:9b:6c:84:da:be:dc:
3f:56:a6:c2:65:5e:1f:ca:8e:9c:f7:b3:26:8d:80:1f:de:59:
8a:cb:c6:89:c0:e7:86:20:a5:13:cb:c3:c4:65:40:7b:a7:75:
15:cc:56:e8:6a:18:9e:09:4d:ae:b4:de:4c:31:12:ba:93:96:
14:50:d1:13:ff:e6:a4:56:f9:91:f0:7a:b9:04:b6:f9:b9:ab:
86:f4:4e:f3:4b:e4:06:fb:ad:2f:af:6b:b4:ed:f2:aa:08:5e:
8f:56:e0:ca:a6:c6:f2:cb:63:90:e0:a9:74:d5:08:e2:1c:0e:
0f:53:15:21:57:e5:7d:91:59:18:eb:9d:bb:c3:72:77:16:66:
14:27:46:48:b0:51:e3:78:2a:22:b9:99:f2:22:89:cd:e2:d7:
f3:b0:ea:03:bd:fa:24:5b:96:38:08:f9:9c:66:a1:f2:be:2a:
98:f8:bd:33:2e:e7:5d:8b:65:c7:00:90:63:26:6a:81:2a:d7:
84:cf:3a:58:df:a1:7b:a3:a2:86:07:29:8f:66:7f:49:73:61:
83:16:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org