Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zpm3655B4bStbp-C9DjIOCmii_s.roa
File: Zpm3655B4bStbp-C9DjIOCmii_s.roa (raw, json)
Hash identifier: H06VVWoxNS5kCczk1DUlHnfi5nRajwY3OWtAVhpBmnU=
Subject key identifier: 66:99:B7:EB:9E:41:E1:B4:AD:6E:9F:82:F4:38:C8:38:29:A2:8B:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018945BB053BFF43783AD588B2B685AD2DE2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zpm3655B4bStbp-C9DjIOCmii_s.roa
Signing time: Tue 11 Jul 2023 16:13:51 +0000
ROA not before: Tue 11 Jul 2023 16:13:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:bb:05:3b:ff:43:78:3a:d5:88:b2:b6:85:ad:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 11 16:13:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6699b7eb9e41e1b4ad6e9f82f438c83829a28bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:fb:e0:48:3b:d1:83:3c:5b:c2:a8:ec:fe:
7c:c6:f8:b0:94:79:18:b9:a3:41:b5:6e:36:ce:e2:
a9:d5:86:b2:a8:03:b0:6b:98:66:a4:49:b6:b1:cd:
76:ee:9f:8c:12:ed:8b:45:23:6f:a3:03:16:8c:9e:
0c:f6:3f:40:af:43:73:47:b1:7c:e2:b4:8d:a2:8a:
d4:16:d7:82:d0:10:55:4f:b9:df:87:ce:5d:fe:3e:
d6:2b:0e:00:b0:00:ea:07:ed:ce:e9:a0:e4:67:ad:
bb:4f:e5:81:9c:bd:77:94:b2:08:35:5e:81:a4:de:
d5:3a:f0:12:23:25:a1:e2:ce:f4:f9:f8:22:57:1a:
ed:cf:60:63:2e:82:43:da:3e:0e:d5:29:ba:0f:d8:
49:3d:64:0d:49:58:93:03:2e:24:6f:33:87:db:00:
ca:9f:32:92:6c:17:9a:7b:fa:3e:d9:be:85:f3:a6:
5b:a8:bb:6b:56:88:52:ec:61:e0:85:a7:73:4d:44:
f4:ca:f9:cc:47:2b:5b:42:66:44:d1:bb:48:28:3e:
29:cd:96:99:97:20:a9:b9:a8:93:eb:8f:d7:ff:62:
c5:06:a7:de:8d:9e:9d:d7:ab:21:10:48:28:08:e1:
51:f3:09:cc:e7:52:9a:6b:40:1a:90:af:71:03:b4:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:99:B7:EB:9E:41:E1:B4:AD:6E:9F:82:F4:38:C8:38:29:A2:8B:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zpm3655B4bStbp-C9DjIOCmii_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
14:de:69:15:89:93:b2:40:89:6d:96:2e:c8:57:6f:b6:07:b4:
ba:42:fd:5c:bb:cb:8c:64:4a:36:ad:3f:b2:63:4a:12:a1:3f:
ec:c8:ce:97:aa:0e:bd:69:97:7c:c0:91:b4:09:00:78:66:ed:
6e:2c:71:64:7f:9b:bb:b9:a0:5b:a0:e4:9f:ac:ec:03:54:0e:
97:74:fb:43:e2:f3:a7:a3:cc:03:42:c2:90:6e:76:a5:f9:89:
9e:8f:db:e1:f7:33:e0:5c:fc:e4:ff:c6:47:b2:1c:4c:b1:c6:
80:4c:d2:9c:5f:c7:af:c3:3a:b0:16:9a:39:c0:05:94:73:67:
89:af:3e:e3:23:53:d3:8d:26:f1:17:1a:c8:30:76:bb:23:15:
bd:d5:aa:12:4c:0a:e2:54:7e:59:f7:cf:44:73:f5:a2:9c:cf:
52:ab:a7:c5:63:bd:f6:3e:3f:64:ac:ba:80:d2:b7:2c:10:54:
ac:8c:c3:bc:5a:03:c1:ff:58:40:b8:89:aa:0c:62:e2:ad:89:
2d:2b:1d:63:f6:31:67:db:8c:d5:cc:b6:34:af:be:89:7c:38:
ba:89:b8:77:5a:f2:7d:22:d8:fa:c5:f5:07:57:a0:3d:1f:bf:
f3:a2:61:e3:00:b7:0b:41:25:b8:84:7c:31:13:b3:a1:e5:65:
45:3d:36:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlFuwU7/0N4OtWIsraFrS3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNzExMTYxMzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Njk5YjdlYjllNDFlMWI0YWQ2ZTlmODJmNDM4YzgzODI5YTI4YmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gv74Eg70YM8W8Ko7P58xviwlHkY
uaNBtW42zuKp1YayqAOwa5hmpEm2sc127p+MEu2LRSNvowMWjJ4M9j9Ar0NzR7F8
4rSNoorUFteC0BBVT7nfh85d/j7WKw4AsADqB+3O6aDkZ627T+WBnL13lLIINV6B
pN7VOvASIyWh4s70+fgiVxrtz2BjLoJD2j4O1Sm6D9hJPWQNSViTAy4kbzOH2wDK
nzKSbBeae/o+2b6F86ZbqLtrVohS7GHghadzTUT0yvnMRytbQmZE0btIKD4pzZaZ
lyCpuaiT64/X/2LFBqfejZ6d16shEEgoCOFR8wnM51Kaa0AakK9xA7QnwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGaZt+ueQeG0rW6fgvQ4yDgpoov7MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvWnBtMzY1NUI0YlN0YnAtQzlEaklPQ21paV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW7MA0G
CSqGSIb3DQEBCwUAA4IBAQAU3mkViZOyQIltli7IV2+2B7S6Qv1cu8uMZEo2rT+y
Y0oSoT/syM6Xqg69aZd8wJG0CQB4Zu1uLHFkf5u7uaBboOSfrOwDVA6XdPtD4vOn
o8wDQsKQbnal+Ymej9vh9zPgXPzk/8ZHshxMscaATNKcX8evwzqwFpo5wAWUc2eJ
rz7jI1PTjSbxFxrIMHa7IxW91aoSTAriVH5Z989Ec/WinM9Sq6fFY732Pj9krLqA
0rcsEFSsjMO8WgPB/1hAuImqDGLirYktKx1j9jFn24zVzLY0r76JfDi6ibh3WvJ9
Itj6xfUHV6A9H7/zomHjALcLQSW4hHwxE7Oh5WVFPTZI
-----END CERTIFICATE-----
Generated at Fri Jul 28 10:22:00 2023 by rpki-client on console-ams.rpki-client.org