Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kMyXm5VXk7PajfbF_g9w9n4VImA.roa
File: kMyXm5VXk7PajfbF_g9w9n4VImA.roa (raw, json)
Hash identifier: 7e7oskykBygIHvEJVMutOuYrEX0xNkv1XtE1lwAdyCs=
Subject key identifier: 90:CC:97:9B:95:57:93:B3:DA:8D:F6:C5:FE:0F:70:F6:7E:15:22:60
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01858C7738D7334B91E33CAC0545CC7A1447
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kMyXm5VXk7PajfbF_g9w9n4VImA.roa
Signing time: Sat 07 Jan 2023 13:41:41 +0000
ROA not before: Sat 07 Jan 2023 13:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208796
IP address blocks: 163.5.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8c:77:38:d7:33:4b:91:e3:3c:ac:05:45:cc:7a:14:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 7 13:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90cc979b955793b3da8df6c5fe0f70f67e152260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8c:ff:83:a2:f7:92:17:2e:1b:9c:06:61:36:
11:52:dc:e7:be:c3:0b:61:80:1d:56:90:74:18:fe:
93:b4:fa:4c:2c:5c:c8:69:9e:02:6a:f2:d1:62:04:
c1:26:75:7f:e8:79:b8:43:19:66:02:61:62:47:d2:
cf:54:90:3b:a5:95:f6:be:10:f8:4e:9c:87:b1:a3:
6b:79:9d:82:1b:b0:28:22:2d:8d:7f:3f:3c:37:c1:
72:c8:21:5c:bf:65:2d:2f:f8:36:c3:c3:9f:93:7a:
5d:8e:63:4b:b9:56:57:e9:3e:4e:22:ef:4a:78:bf:
5f:1e:48:f2:89:d5:e3:72:3a:94:c8:11:dd:7c:d2:
0c:48:b7:e0:78:cb:da:87:d1:50:6c:6d:da:81:d9:
53:48:70:f8:b3:a9:43:26:b5:54:91:7d:61:38:96:
c3:d3:8b:ce:d4:9b:c1:7a:5b:5a:92:26:dc:ac:14:
25:be:b0:ee:66:72:50:24:f6:bd:52:5a:fc:09:d2:
55:83:19:b0:f8:76:4d:70:73:c5:f4:0c:0d:b4:81:
0f:da:67:85:ea:67:6a:00:1f:f4:c7:65:c9:5d:13:
78:75:0b:92:60:7c:e5:07:95:74:50:d8:fe:16:2e:
02:62:73:32:a5:90:36:71:66:13:44:5f:ee:ba:71:
ed:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CC:97:9B:95:57:93:B3:DA:8D:F6:C5:FE:0F:70:F6:7E:15:22:60
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kMyXm5VXk7PajfbF_g9w9n4VImA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:59:76:32:73:55:fe:ba:2c:2b:99:2a:9c:76:ae:33:78:00:
27:9f:6b:b8:8f:b6:b4:9e:cf:73:52:21:e1:7e:94:3b:41:a1:
20:36:a2:01:80:f2:49:34:aa:2f:34:17:50:cf:a8:7f:cc:7c:
ff:a3:39:a7:77:56:5c:e7:39:d3:66:be:19:3e:10:9e:b9:47:
ff:55:db:c3:bc:48:73:55:33:d8:eb:2e:c1:ce:92:d5:02:d5:
60:03:01:18:28:59:ce:e7:b6:af:db:d2:fd:08:fd:51:05:ab:
dd:13:2b:be:a9:ed:ee:47:82:b6:f9:6e:f3:d5:c7:ff:52:80:
3e:14:52:4f:d8:54:b1:64:fd:24:6e:85:c1:71:0a:70:cc:85:
11:08:e0:f7:4f:3b:1e:8e:8c:d0:96:4f:b8:f7:a4:4b:7c:ea:
b7:78:86:4e:0b:cd:18:53:12:ae:4b:ae:b3:5b:94:e4:96:2e:
c2:19:99:33:fe:2c:07:4d:ed:04:1b:5e:31:41:8c:00:02:95:
2b:00:32:ed:5b:66:00:6d:79:b2:f1:1a:2a:39:51:46:99:63:
8d:39:ed:15:5e:26:04:86:0a:80:37:5c:ba:22:39:8d:5a:2c:
0e:c8:c1:27:c1:1e:af:36:02:d2:b6:d2:8d:8e:28:f8:5f:85:
94:af:c2:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWMdzjXM0uR4zysBUXMehRHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTA3MTM0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGNjOTc5Yjk1NTc5M2IzZGE4ZGY2YzVmZTBmNzBmNjdlMTUyMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloz/g6L3khcuG5wGYTYRUtznvsML
YYAdVpB0GP6TtPpMLFzIaZ4CavLRYgTBJnV/6Hm4QxlmAmFiR9LPVJA7pZX2vhD4
TpyHsaNreZ2CG7AoIi2Nfz88N8FyyCFcv2UtL/g2w8Ofk3pdjmNLuVZX6T5OIu9K
eL9fHkjyidXjcjqUyBHdfNIMSLfgeMvah9FQbG3agdlTSHD4s6lDJrVUkX1hOJbD
04vO1JvBeltakibcrBQlvrDuZnJQJPa9Ulr8CdJVgxmw+HZNcHPF9AwNtIEP2meF
6mdqAB/0x2XJXRN4dQuSYHzlB5V0UNj+Fi4CYnMypZA2cWYTRF/uunHtAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJDMl5uVV5Oz2o32xf4PcPZ+FSJgMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEva015WG01VlhrN1BhamZiRl9nOXc5bjRWSW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXBMA0G
CSqGSIb3DQEBCwUAA4IBAQBpWXYyc1X+uiwrmSqcdq4zeAAnn2u4j7a0ns9zUiHh
fpQ7QaEgNqIBgPJJNKovNBdQz6h/zHz/ozmnd1Zc5znTZr4ZPhCeuUf/VdvDvEhz
VTPY6y7BzpLVAtVgAwEYKFnO57av29L9CP1RBavdEyu+qe3uR4K2+W7z1cf/UoA+
FFJP2FSxZP0kboXBcQpwzIURCOD3TzsejozQlk+496RLfOq3eIZOC80YUxKuS66z
W5Tkli7CGZkz/iwHTe0EG14xQYwAApUrADLtW2YAbXmy8RoqOVFGmWONOe0VXiYE
hgqAN1y6IjmNWiwOyMEnwR6vNgLSttKNjij4X4WUr8KR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org