Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d-E6v1xyT7u5ivtLqEbQly9CZcg.roa
File: d-E6v1xyT7u5ivtLqEbQly9CZcg.roa (raw, json)
Hash identifier: GPUh7RGjNAxZ4fdk4o3pHtWL2Eq/so666zbIrTv5hGk=
Subject key identifier: 77:E1:3A:BF:5C:72:4F:BB:B9:8A:FB:4B:A8:46:D0:97:2F:42:65:C8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185868A328415F3E727385229663E1671BB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d-E6v1xyT7u5ivtLqEbQly9CZcg.roa
Signing time: Fri 06 Jan 2023 10:04:41 +0000
ROA not before: Fri 06 Jan 2023 10:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.233.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:8a:32:84:15:f3:e7:27:38:52:29:66:3e:16:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 6 10:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77e13abf5c724fbbb98afb4ba846d0972f4265c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:ff:39:04:6a:07:42:60:22:66:7a:02:d3:
75:18:10:32:5f:e0:42:36:d8:c3:ed:05:bb:5c:70:
2f:ee:0c:06:20:d4:ce:bb:f9:4f:1f:18:3c:56:80:
61:6b:ce:04:07:c4:2a:0b:62:fd:10:24:1c:86:22:
9b:5a:b6:6e:a7:78:8a:f0:42:1c:c2:d8:06:2d:b5:
6f:f7:5d:25:55:88:20:b0:e2:c1:c6:93:41:88:25:
d8:a5:b1:03:65:f7:3f:31:fb:19:d3:06:27:47:47:
54:00:65:86:4a:f1:c0:69:f0:f4:4f:50:ac:f6:57:
c2:0f:30:f1:0e:f5:6a:6a:2c:36:39:73:d5:4a:54:
55:fd:6f:76:64:ef:96:44:cd:76:30:f4:32:d2:48:
92:72:f2:c7:fc:2a:94:55:47:53:91:f7:65:60:36:
1d:2f:4e:e9:6b:fc:22:70:f3:00:37:2e:f0:1d:d7:
f3:35:e5:0c:90:95:9f:56:c1:40:21:f2:20:0f:4e:
6d:aa:bf:54:fb:88:7e:d2:7f:fd:ed:e1:92:98:57:
cf:14:b0:7c:ac:57:29:72:a1:44:eb:66:78:de:6d:
db:d4:fa:06:2e:f3:e5:7c:05:08:2a:af:2f:c1:f4:
01:b6:0b:2f:23:f3:a6:19:02:60:e1:05:84:3a:f9:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:3A:BF:5C:72:4F:BB:B9:8A:FB:4B:A8:46:D0:97:2F:42:65:C8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/d-E6v1xyT7u5ivtLqEbQly9CZcg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.100.0/24
163.5.107.0/24
163.5.127.0/24
163.5.130.0/24
163.5.132.0/23
163.5.136.0/24
163.5.138.0/24
163.5.145.0/24
163.5.158.0/24
163.5.161.0/24
163.5.166.0/24
163.5.202.0/24
163.5.210.0/23
163.5.222.0/24
163.5.226.0/23
163.5.230.0/24
163.5.233.0/24
163.5.239.0-163.5.241.255
163.5.244.0/24
163.5.246.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
72:12:a8:5c:aa:02:10:52:c3:60:df:98:17:d0:e8:61:0f:50:
9e:2a:ae:db:58:3c:16:a7:64:da:aa:b0:a3:ed:56:81:d0:59:
e8:d8:0b:bb:69:d7:97:be:da:75:f6:8f:f2:cd:e7:f2:78:6e:
8d:db:8f:b8:37:a8:b7:1a:b8:71:94:cf:83:03:68:2f:d5:92:
5e:85:19:23:3f:94:ea:0c:9e:80:ff:8b:18:03:52:8a:7f:32:
9c:0d:8d:80:0b:70:23:83:14:98:d5:2c:28:b1:d5:a1:7e:88:
42:e1:23:f8:a7:51:d1:dc:85:1c:10:a8:38:d9:ec:91:d1:76:
a4:12:fa:de:68:a3:f8:62:12:c5:94:c8:98:95:28:44:b9:4f:
7f:b3:d2:a8:8d:a9:da:ce:2c:cf:ca:11:25:5b:e9:66:b3:86:
a2:3a:9e:d6:0f:33:29:97:a1:63:97:ea:81:83:cc:22:97:88:
63:da:7c:05:43:57:da:83:98:cb:0b:e6:96:44:36:4d:b8:ca:
47:b1:5a:22:36:a4:24:73:0d:2c:db:c8:c2:fa:20:a2:17:a2:
60:89:f9:36:45:31:47:9c:e4:49:fa:8f:d4:28:af:d6:89:17:
38:ef:3f:be:93:88:f1:85:21:27:e2:2c:70:2c:21:71:59:df:
b6:4f:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org