Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cCpaKdBN6IGJgjggLfzVNxRbTw0.roa
File: cCpaKdBN6IGJgjggLfzVNxRbTw0.roa (raw, json)
Hash identifier: d51pyexcq73tA0IrS8Faf5YrEw6TstUMHO2jyJslxE0=
Subject key identifier: 70:2A:5A:29:D0:4D:E8:81:89:82:38:20:2D:FC:D5:37:14:5B:4F:0D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188147A753DA87853E262EDC5010C3C6F45
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cCpaKdBN6IGJgjggLfzVNxRbTw0.roa
Signing time: Sat 13 May 2023 09:39:09 +0000
ROA not before: Sat 13 May 2023 09:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204968
IP address blocks: 163.5.206.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:7a:75:3d:a8:78:53:e2:62:ed:c5:01:0c:3c:6f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 13 09:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=702a5a29d04de881898238202dfcd537145b4f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:ee:6d:3a:e7:74:58:30:38:80:9d:32:a9:
fc:3a:01:78:39:7c:21:93:58:13:f7:af:f4:db:ed:
32:a1:90:a0:00:97:6e:fa:46:2d:fb:05:58:17:e9:
93:ad:e0:aa:22:a5:7f:e0:6e:e1:39:bd:ce:40:3d:
d2:b2:0a:59:e5:97:5b:84:95:32:ef:fb:ed:df:87:
20:de:34:0c:3b:fe:02:00:2a:40:52:bb:8a:62:49:
2a:be:fe:c9:8b:5a:4e:6d:78:62:1f:c7:0a:cc:95:
4e:91:b6:2c:38:5c:d8:3a:96:16:b6:28:25:78:53:
9a:d5:46:50:2a:5c:cc:d5:e1:f0:9b:1a:02:82:58:
a4:66:9f:67:42:60:8e:9d:f1:e4:16:c7:22:15:97:
38:cf:d5:61:61:a5:ba:4e:39:9d:a5:8d:8b:e0:f4:
18:56:19:b0:e8:5f:78:ad:3e:5e:a1:6e:dd:a7:56:
ec:40:7d:37:6d:7f:95:b7:b0:cc:4b:7b:d2:37:53:
b7:ee:10:9d:f3:8e:e8:17:e9:20:07:09:59:11:66:
70:82:9c:f2:5a:fe:48:72:88:9d:bb:db:f8:bf:56:
8b:32:14:bf:ae:70:c7:12:25:3a:fc:ce:61:81:95:
8d:3c:b4:e8:0d:48:1b:6f:cb:e4:7c:47:82:de:63:
af:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2A:5A:29:D0:4D:E8:81:89:82:38:20:2D:FC:D5:37:14:5B:4F:0D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cCpaKdBN6IGJgjggLfzVNxRbTw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0-163.5.156.255
163.5.206.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:27:4b:93:a4:ae:d1:04:5b:8e:ed:d5:ac:7a:fb:d8:ff:29:
90:f2:b4:11:c1:49:c9:29:b4:3e:12:6a:7a:cc:3f:a1:94:ff:
26:08:9d:1c:f7:eb:11:03:3f:a0:5a:a5:d1:e8:59:6c:67:91:
5e:c3:fa:5d:44:df:bc:bd:a0:28:e5:2d:74:bb:b7:d2:18:94:
f8:d1:d4:1b:93:70:66:28:d8:45:8e:38:b5:81:a9:3c:c8:64:
5e:e3:dc:af:c5:bd:8e:df:21:4a:fb:4d:10:44:94:67:ba:ed:
6a:59:e8:6f:c4:a7:2a:e6:fe:bd:77:89:5f:a9:f9:a6:84:8c:
a3:6e:8a:7b:16:47:92:d6:ec:ef:f8:96:71:c9:29:51:4b:45:
2b:4f:d5:d8:2d:6f:ac:df:52:37:47:87:1e:5a:30:cf:1b:4d:
b1:63:37:0f:29:83:85:c7:82:e3:28:0f:80:89:cc:58:f1:55:
5b:66:20:a7:55:11:00:6f:db:57:5d:59:1a:f0:10:51:58:22:
db:21:24:04:53:c3:54:8e:cb:a6:fe:74:2d:9e:94:80:42:99:
a3:a7:25:af:01:4f:26:19:55:86:a7:4c:3e:a2:24:bc:4e:df:
7f:91:a8:a0:22:70:12:00:e0:20:eb:2d:5f:dc:dc:3b:a4:37:
ba:e7:60:d1
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYgUenU9qHhT4mLtxQEMPG9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNTEzMDkzOTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDJhNWEyOWQwNGRlODgxODk4MjM4MjAyZGZjZDUzNzE0NWI0ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+fubTrndFgwOICdMqn8OgF4OXwh
k1gT96/02+0yoZCgAJdu+kYt+wVYF+mTreCqIqV/4G7hOb3OQD3SsgpZ5ZdbhJUy
7/vt34cg3jQMO/4CACpAUruKYkkqvv7Ji1pObXhiH8cKzJVOkbYsOFzYOpYWtigl
eFOa1UZQKlzM1eHwmxoCglikZp9nQmCOnfHkFsciFZc4z9VhYaW6TjmdpY2L4PQY
Vhmw6F94rT5eoW7dp1bsQH03bX+Vt7DMS3vSN1O37hCd847oF+kgBwlZEWZwgpzy
Wv5Icoidu9v4v1aLMhS/rnDHEiU6/M5hgZWNPLToDUgbb8vkfEeC3mOv3QIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHAqWinQTeiBiYI4IC381TcUW08NMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvY0NwYUtkQk42SUdKZ2pnZ0xmelZOeFJiVHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACjBZsD
BACjBZwDBACjBc4DBACjBdUwDQYJKoZIhvcNAQELBQADggEBADonS5OkrtEEW47t
1ax6+9j/KZDytBHBSckptD4SanrMP6GU/yYInRz36xEDP6BapdHoWWxnkV7D+l1E
37y9oCjlLXS7t9IYlPjR1BuTcGYo2EWOOLWBqTzIZF7j3K/FvY7fIUr7TRBElGe6
7WpZ6G/Epyrm/r13iV+p+aaEjKNuinsWR5LW7O/4lnHJKVFLRStP1dgtb6zfUjdH
hx5aMM8bTbFjNw8pg4XHguMoD4CJzFjxVVtmIKdVEQBv21ddWRrwEFFYItshJART
w1SOy6b+dC2elIBCmaOnJa8BTyYZVYanTD6iJLxO33+RqKAicBIA4CDrLV/c3Duk
N7rnYNE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org