Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cUGwO78hbgetv50e81-vtjIlMks.roa
File: cUGwO78hbgetv50e81-vtjIlMks.roa (raw, json)
Hash identifier: YIyGXzRN8+mHoCrNJUHIFF7BoxjPL1Wnxf/KozKIWdw=
Subject key identifier: 71:41:B0:3B:BF:21:6E:07:AD:BF:9D:1E:F3:5F:AF:B6:32:25:32:4B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01878F35D12D603F12954F7B821A3FAC48B2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cUGwO78hbgetv50e81-vtjIlMks.roa
Signing time: Mon 17 Apr 2023 12:34:41 +0000
ROA not before: Mon 17 Apr 2023 12:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:35:d1:2d:60:3f:12:95:4f:7b:82:1a:3f:ac:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 17 12:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7141b03bbf216e07adbf9d1ef35fafb63225324b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f1:88:96:49:38:64:a3:82:3b:a8:09:63:6e:
a6:06:17:11:b8:a6:e4:dc:c9:b9:d5:b0:98:9c:8b:
5c:51:66:d3:ee:03:c4:d8:20:b5:5a:18:c0:e5:18:
fe:d8:83:f5:bf:c8:bf:6a:ce:47:cd:b4:b5:5c:89:
3a:45:b6:ae:95:51:12:85:50:0d:ef:d9:67:e2:27:
a2:81:3d:c4:5f:52:f5:2a:94:50:10:54:c4:46:db:
e5:d2:e9:d4:94:07:7b:c3:b6:ca:17:42:eb:b8:22:
15:2e:ee:13:58:b9:c9:41:bc:79:d9:c0:8b:cf:87:
c3:89:a2:59:0d:b9:92:cf:44:34:d0:31:03:50:75:
a1:aa:01:a7:16:5e:54:6d:61:14:18:fd:ee:11:71:
d1:0b:a9:41:75:ba:54:b5:0f:45:ee:09:4a:07:34:
d1:5e:39:d9:2c:2b:ea:6f:08:3d:6b:56:64:a5:ea:
16:c3:b3:c6:2a:77:af:b7:03:22:66:06:ae:19:c5:
2d:14:f3:12:fd:49:00:d3:d3:94:da:62:77:fd:93:
be:f2:92:da:6a:ed:1c:56:ce:bb:0d:61:d7:61:91:
fe:0e:e5:8c:3b:42:c7:1c:05:a9:35:a2:a8:e0:af:
b0:fb:fb:3b:0f:7d:6c:ab:c4:14:b9:05:24:90:f7:
47:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:41:B0:3B:BF:21:6E:07:AD:BF:9D:1E:F3:5F:AF:B6:32:25:32:4B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cUGwO78hbgetv50e81-vtjIlMks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.105.0-163.5.106.255
163.5.115.0/24
163.5.118.0/23
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.212.0/24
163.5.220.0/24
163.5.225.0/24
163.5.229.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:db:59:7a:25:11:d4:58:54:f8:f8:f2:d4:7a:b5:f6:b5:9b:
23:e1:2d:99:14:93:78:3e:c5:a5:df:89:08:f9:d9:03:b4:5e:
d9:c3:da:ae:a4:16:ab:a1:bc:48:3d:56:b0:0e:ec:46:ab:39:
2a:f1:c7:5a:41:20:44:a2:f1:81:37:9c:6b:9e:93:58:ec:01:
54:1b:72:95:87:55:79:3e:e7:9c:7d:49:dd:85:a4:29:c3:0a:
39:68:57:0e:8d:1d:b2:56:a4:eb:1f:66:6c:97:01:21:08:e4:
7c:4b:4c:9b:e9:79:34:a4:ff:57:98:85:c9:70:63:44:a5:e2:
18:93:ff:1e:ac:f2:51:93:6e:d5:4c:86:dc:cc:61:83:f2:4b:
78:49:96:10:10:9f:e2:03:5d:26:26:69:60:a2:38:b0:6c:fe:
b0:1a:f0:dc:09:59:40:6e:1a:fe:e4:0a:49:41:f8:9c:ea:76:
ac:34:de:2a:6c:9b:7e:9d:66:1b:f7:83:ee:0e:ed:43:c0:89:
1e:ba:54:bd:c7:9d:f5:8a:8a:6a:4e:50:cb:a7:e3:b2:6a:0b:
96:89:06:6c:8d:65:92:e0:bd:02:e3:ed:46:8d:44:07:43:cd:
52:41:31:d6:44:57:de:b8:9d:c7:85:d4:c6:95:ad:5e:20:5c:
11:54:92:65
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAYePNdEtYD8SlU97gho/rEiyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNDE3MTIzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQxYjAzYmJmMjE2ZTA3YWRiZjlkMWVmMzVmYWZiNjMyMjUzMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvGIlkk4ZKOCO6gJY26mBhcRuKbk
3Mm51bCYnItcUWbT7gPE2CC1WhjA5Rj+2IP1v8i/as5HzbS1XIk6RbaulVEShVAN
79ln4ieigT3EX1L1KpRQEFTERtvl0unUlAd7w7bKF0LruCIVLu4TWLnJQbx52cCL
z4fDiaJZDbmSz0Q00DEDUHWhqgGnFl5UbWEUGP3uEXHRC6lBdbpUtQ9F7glKBzTR
XjnZLCvqbwg9a1ZkpeoWw7PGKnevtwMiZgauGcUtFPMS/UkA09OU2mJ3/ZO+8pLa
au0cVs67DWHXYZH+DuWMO0LHHAWpNaKo4K+w+/s7D31sq8QUuQUkkPdHjQIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFHFBsDu/IW4Hrb+dHvNfr7YyJTJLMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvY1VHd083OGhiZ2V0djUwZTgxLXZ0aklsTWtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAowUgMAwD
BACjBWkDBACjBWoDBACjBXMDBAGjBXYDBACjBZkDBACjBZ8DBACjBagDBACjBdQD
BACjBdwDBACjBeEDBACjBeUDBACjBfIwDQYJKoZIhvcNAQELBQADggEBACvbWXol
EdRYVPj48tR6tfa1myPhLZkUk3g+xaXfiQj52QO0XtnD2q6kFquhvEg9VrAO7Ear
OSrxx1pBIESi8YE3nGuek1jsAVQbcpWHVXk+55x9Sd2FpCnDCjloVw6NHbJWpOsf
ZmyXASEI5HxLTJvpeTSk/1eYhclwY0Sl4hiT/x6s8lGTbtVMhtzMYYPyS3hJlhAQ
n+IDXSYmaWCiOLBs/rAa8NwJWUBuGv7kCklB+Jzqdqw03ipsm36dZhv3g+4O7UPA
iR66VL3HnfWKimpOUMun47JqC5aJBmyNZZLgvQLj7UaNRAdDzVJBMdZEV964nceF
1MaVrV4gXBFUkmU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org