Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fTG5msX0EzPHHgyA1s3fBpq2wYE.roa
File: fTG5msX0EzPHHgyA1s3fBpq2wYE.roa (raw, json)
Hash identifier: MMb43CPqLHkkrEHnE0ywL1sGpFvJjrdBN2l05WI+Iag=
Subject key identifier: 7D:31:B9:9A:C5:F4:13:33:C7:1E:0C:80:D6:CD:DF:06:9A:B6:C1:81
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188DF3D0010E72938A99AE8E60FA2418953
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fTG5msX0EzPHHgyA1s3fBpq2wYE.roa
Signing time: Wed 21 Jun 2023 18:34:56 +0000
ROA not before: Wed 21 Jun 2023 18:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:3d:00:10:e7:29:38:a9:9a:e8:e6:0f:a2:41:89:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 21 18:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d31b99ac5f41333c71e0c80d6cddf069ab6c181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2f:5b:f9:f0:16:84:80:ef:25:0e:7e:64:dc:
2e:17:b9:18:1c:c3:97:f3:fc:92:1b:2b:ed:4b:e5:
f1:57:87:0f:f7:19:7f:f7:ea:80:76:0a:18:26:d1:
40:d9:12:08:2e:70:9b:83:20:de:10:57:4c:2a:06:
96:64:b0:f3:93:8e:f8:f5:95:61:5a:b2:2e:8a:35:
bd:ba:9f:9d:c7:28:18:dc:44:a1:0b:e2:6f:b6:ac:
a7:ec:55:8a:97:d6:07:04:a8:d8:8b:f1:4f:a4:58:
d0:d9:6a:a5:98:1a:62:f1:0e:c6:2d:84:d8:e8:6d:
0f:8f:83:6e:5e:ad:29:78:7a:1a:3d:a3:48:b4:92:
b6:ef:f2:48:34:4f:d9:cb:69:bb:3d:16:7f:b8:90:
4e:de:80:d9:86:5f:c4:a9:ca:08:df:07:36:58:a3:
60:92:9e:c6:20:d0:ab:8b:57:56:d3:03:aa:32:67:
63:ca:04:3b:dd:68:b9:55:93:ed:57:38:8c:b3:cc:
86:f5:c4:da:44:59:9c:1d:85:ae:2a:91:d1:a5:58:
37:91:07:48:22:6e:7a:bf:24:c3:0b:a8:2a:6a:0b:
81:ad:8d:4a:94:80:2b:54:83:fd:c4:72:5d:d1:04:
13:d1:2c:49:46:15:51:14:f9:63:e5:41:c2:06:6c:
f2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:31:B9:9A:C5:F4:13:33:C7:1E:0C:80:D6:CD:DF:06:9A:B6:C1:81
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fTG5msX0EzPHHgyA1s3fBpq2wYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.127.0/24
163.5.130.0/24
163.5.136.0/24
163.5.138.0/24
163.5.161.0/24
163.5.198.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/24
163.5.230.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b3:db:7c:ce:97:c8:a4:13:9f:c5:d8:c7:99:9a:48:7e:bd:
3e:fa:31:6c:ed:88:b0:41:88:2d:6a:5c:76:72:00:fc:3a:64:
1b:b5:d9:3b:8b:c2:39:16:e7:d3:57:82:65:9f:f4:8c:b9:09:
b5:7d:71:a9:07:4a:a9:8c:18:10:7f:60:27:bd:e9:91:f4:c6:
63:dc:23:52:82:6e:4e:3d:8b:9c:88:14:d9:d6:5a:10:01:f6:
53:80:a2:38:51:ef:f6:1a:ed:a9:d4:13:25:79:29:f0:36:ec:
1e:fd:4a:bc:28:29:fa:21:cb:18:b9:ec:14:01:e9:57:42:f0:
7e:82:1e:f1:a1:7f:b1:ea:45:93:75:46:e3:a2:01:0d:20:0a:
6c:52:25:2d:51:c1:c0:ee:ca:16:23:bd:56:dd:f5:6e:3f:f1:
d4:21:ad:21:8f:8d:4a:b8:69:f2:e7:56:03:36:b0:04:ec:30:
13:1f:89:2d:9c:fc:84:03:b1:47:da:90:e6:03:04:99:33:52:
ff:b0:4a:fc:fd:73:11:45:55:d7:03:7e:41:70:86:a8:d5:81:
85:ae:ae:63:04:ea:b0:c5:aa:a4:7d:6e:d4:56:ed:da:ec:a7:
99:82:fd:1a:cf:5a:20:09:2c:9e:b6:72:86:5a:fd:23:78:4f:
bf:48:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org