Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/el9pDaLPfgoGN_80zLTjZpO_0qg.roa
File: el9pDaLPfgoGN_80zLTjZpO_0qg.roa (raw, json)
Hash identifier: BG24W4QKLoAXMnYVhG33IdLeo43LmX+Kc/1HUJ4yuco=
Subject key identifier: 7A:5F:69:0D:A2:CF:7E:0A:06:37:FF:34:CC:B4:E3:66:93:BF:D2:A8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01895A90E2B858B95E09DCB6686BC930BFB0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/el9pDaLPfgoGN_80zLTjZpO_0qg.roa
Signing time: Sat 15 Jul 2023 17:19:51 +0000
ROA not before: Sat 15 Jul 2023 17:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.99.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:90:e2:b8:58:b9:5e:09:dc:b6:68:6b:c9:30:bf:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 15 17:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a5f690da2cf7e0a0637ff34ccb4e36693bfd2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:86:80:23:c8:3c:4c:d8:f8:b8:b8:3a:c4:
3c:2f:ce:50:fb:3d:9b:73:98:b8:f4:47:76:e9:e8:
30:e8:f3:15:c7:d8:05:26:20:d1:92:6f:db:cd:10:
bd:54:98:ff:d5:ee:0f:ab:74:d6:bf:7c:21:16:57:
fc:8d:db:21:80:c9:ee:70:a8:04:56:c7:ae:11:d5:
b2:76:07:15:fa:97:0e:25:f2:5b:17:7a:26:04:17:
e8:d9:33:5c:dc:fd:20:b5:2e:54:23:3a:70:10:1c:
43:13:7e:c3:a8:17:0e:b1:2c:a5:db:77:90:0c:ea:
75:fb:04:5f:48:3b:19:ef:a7:7d:7e:0a:ad:23:b5:
8d:70:b1:e7:c4:96:4c:1b:19:dd:ff:30:11:c9:8e:
95:28:da:84:0f:65:94:ac:16:96:8f:7d:ff:3a:cb:
f8:8f:43:a3:e7:82:27:d0:16:53:0f:cb:34:1f:7b:
42:b3:fb:52:a8:17:13:08:5e:20:21:8c:75:f4:b8:
e8:a5:cd:e8:3d:be:07:00:c0:5a:64:47:d9:a2:f4:
de:99:fd:a4:33:1e:f5:cf:bb:d5:ec:09:12:01:52:
87:74:4b:92:fa:d9:d0:b1:6d:d5:e9:96:31:ff:0b:
2f:23:b9:c0:d7:b2:57:de:56:54:0a:aa:7e:db:f0:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5F:69:0D:A2:CF:7E:0A:06:37:FF:34:CC:B4:E3:66:93:BF:D2:A8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/el9pDaLPfgoGN_80zLTjZpO_0qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.62.0/24
163.5.99.0/24
163.5.127.0/24
163.5.136.0/24
163.5.138.0/24
163.5.161.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0/24
163.5.223.0/24
163.5.226.0/24
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
15:2b:a6:d4:78:35:d5:64:63:0c:31:af:70:5e:ac:cb:05:13:
ad:4d:8d:dc:cf:c7:52:ab:19:30:9c:99:21:3f:cf:10:88:48:
36:b7:d9:70:02:07:45:fe:40:45:e8:1d:8c:0e:56:c1:1a:43:
b8:81:97:e6:3f:38:ff:af:ca:e5:81:a2:cd:57:38:80:7d:22:
c8:75:f8:4f:3d:b5:72:1f:63:32:bb:d6:97:c6:82:8a:91:a4:
c2:21:16:87:19:3a:46:15:23:21:8d:e2:54:ea:69:17:d2:64:
4a:61:79:4b:4c:16:c5:b8:19:de:72:9b:91:e7:c3:ab:11:f9:
76:cd:73:77:9c:64:b3:f9:78:7d:2b:c8:94:b5:04:9b:c7:fd:
21:63:0a:c0:48:e3:d4:eb:99:fb:22:80:85:bd:c6:48:11:27:
fe:42:4b:2b:33:5d:8f:3f:e5:f4:16:a2:95:bf:86:8f:d8:f0:
32:ee:de:88:70:96:39:eb:8c:f0:3b:95:e3:54:4c:6c:91:60:
c4:d0:08:34:9c:d1:39:62:ad:d5:58:52:6a:28:8a:bc:fc:f0:
46:a1:03:76:14:f4:d4:d2:57:34:9f:28:c3:7b:28:5a:25:65:
bd:7c:53:ad:b1:01:9c:c6:26:41:93:bc:5e:a1:be:92:74:8f:
07:5d:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org