Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kmFgWKL3PZNcnEQRT8rDDG6xDHY.roa
File: kmFgWKL3PZNcnEQRT8rDDG6xDHY.roa (raw, json)
Hash identifier: k+JgKyD1425F7wMOE1nbQuBIhDNmqAzHDOdQDRULg8U=
Subject key identifier: 92:61:60:58:A2:F7:3D:93:5C:9C:44:11:4F:CA:C3:0C:6E:B1:0C:76
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188B64966B469995BAD6C7CFE35FB2E25CB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kmFgWKL3PZNcnEQRT8rDDG6xDHY.roa
Signing time: Tue 13 Jun 2023 19:44:03 +0000
ROA not before: Tue 13 Jun 2023 19:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 15:09:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:49:66:b4:69:99:5b:ad:6c:7c:fe:35:fb:2e:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 13 19:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92616058a2f73d935c9c44114fcac30c6eb10c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2e:0a:d9:58:6c:10:6b:01:3a:82:3b:d1:af:
85:1d:9b:6e:af:8f:e7:4f:02:3f:28:4e:39:8d:f3:
6d:3e:cf:57:58:2b:c6:01:b4:46:3e:a8:5e:0e:bb:
7b:e9:ae:0c:69:e4:2d:29:39:bc:fe:00:a0:05:45:
21:56:bd:48:eb:a9:a3:d7:e3:02:41:e5:55:64:0a:
9e:24:57:b9:a9:ee:77:05:35:b0:5b:dc:28:93:89:
5e:c6:57:61:62:e0:81:b2:1c:3a:92:40:37:d8:fa:
be:e0:85:a2:c2:e4:48:5e:b3:7c:f4:e6:9b:99:1b:
1f:5c:f3:2a:ba:75:57:81:3d:d9:0b:d6:1d:07:fd:
1e:2c:61:f6:83:1c:e0:a5:11:19:ab:04:7a:32:88:
2a:e7:76:e2:f2:39:a0:81:b4:16:2c:d0:00:8e:90:
b2:54:fc:c3:f2:5f:0b:b5:4e:af:87:d2:e9:75:b8:
5e:5c:9b:fc:23:b2:a4:9c:1a:c5:79:36:81:80:ea:
57:94:04:1f:7b:50:bc:33:64:91:87:02:bd:e8:82:
49:cc:28:66:6b:51:a1:1b:9f:81:8f:4b:56:93:62:
6e:08:01:85:43:c7:50:97:28:8b:3b:24:01:64:14:
4e:0a:84:05:05:ed:09:0f:fe:a9:3c:27:bf:fb:38:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:60:58:A2:F7:3D:93:5C:9C:44:11:4F:CA:C3:0C:6E:B1:0C:76
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kmFgWKL3PZNcnEQRT8rDDG6xDHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.117.0/24
163.5.127.0/24
163.5.130.0/24
163.5.132.0/23
163.5.136.0/24
163.5.138.0/24
163.5.145.0/24
163.5.161.0/24
163.5.198.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/24
163.5.230.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1f:8e:80:aa:f7:3c:ae:b0:f7:7a:21:14:79:71:9d:98:ec:
38:73:6c:98:b3:92:3b:61:b6:a9:ff:0d:f5:d3:f5:50:97:61:
18:c9:eb:0f:f1:20:14:40:e3:81:6c:8f:a9:07:b4:4a:0c:f9:
81:54:f1:73:6f:1c:23:3a:ff:17:56:a9:80:0e:4f:16:05:f2:
7b:d0:e5:a6:be:99:29:12:8b:32:2a:ef:5c:4c:da:e7:56:69:
6c:cd:ab:a2:fa:c9:86:44:46:2b:7b:26:85:90:aa:91:fa:cc:
b2:b9:9c:e8:c5:64:d9:2a:0f:9a:61:cf:eb:9a:e8:bc:5c:56:
0e:ac:ee:d6:ac:ff:0a:c6:a0:be:1f:d6:8b:db:f7:1f:a1:2f:
e0:d4:c5:8d:61:d7:b0:7c:42:fa:8f:5d:ce:12:23:b7:43:38:
d0:81:06:25:ca:9c:c0:79:f7:82:5e:12:55:4b:dd:3a:19:8a:
a1:78:bb:72:ab:f1:68:08:a9:66:a2:2c:19:a5:12:b1:3c:22:
f7:3b:0d:1a:e9:f3:a3:92:43:f5:64:a1:12:8b:25:aa:cb:be:
34:eb:72:b4:c3:4e:df:be:37:b8:0d:6a:23:f0:05:d1:77:8b:
db:2d:d7:0d:f8:aa:d6:76:ad:5b:60:70:59:15:c0:c1:95:f0:
00:89:1e:d4
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYi2SWa0aZlbrWx8/jX7LiXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjEzMTk0NDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjYxNjA1OGEyZjczZDkzNWM5YzQ0MTE0ZmNhYzMwYzZlYjEwYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvS4K2VhsEGsBOoI70a+FHZtur4/n
TwI/KE45jfNtPs9XWCvGAbRGPqheDrt76a4MaeQtKTm8/gCgBUUhVr1I66mj1+MC
QeVVZAqeJFe5qe53BTWwW9wok4lexldhYuCBshw6kkA32Pq+4IWiwuRIXrN89Oab
mRsfXPMqunVXgT3ZC9YdB/0eLGH2gxzgpREZqwR6Mogq53bi8jmggbQWLNAAjpCy
VPzD8l8LtU6vh9LpdbheXJv8I7KknBrFeTaBgOpXlAQfe1C8M2SRhwK96IJJzChm
a1GhG5+Bj0tWk2JuCAGFQ8dQlyiLOyQBZBROCoQFBe0JD/6pPCe/+zjP1QIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFJJhYFii9z2TXJxEEU/KwwxusQx2MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEva21GZ1dLTDNQWk5jbkVRUlQ4ckRERzZ4REhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBACj
BR8DBACjBSMwDAMEAKMFPQMEAKMFPgMEAaMFVgMEAKMFYwMEAKMFdQMEAKMFfwME
AKMFggMEAaMFhAMEAKMFiAMEAKMFigMEAKMFkQMEAKMFoQMEAKMFxgMEAKMFygME
AaMF0gMEAKMF2DAMAwQAowXdAwQFowXAAwQAowXiAwQAowXmAwQAowX4AwQAowX+
MA0GCSqGSIb3DQEBCwUAA4IBAQCHH46Aqvc8rrD3eiEUeXGdmOw4c2yYs5I7Ybap
/w310/VQl2EYyesP8SAUQOOBbI+pB7RKDPmBVPFzbxwjOv8XVqmADk8WBfJ70OWm
vpkpEosyKu9cTNrnVmlszaui+smGREYreyaFkKqR+syyuZzoxWTZKg+aYc/rmui8
XFYOrO7WrP8KxqC+H9aL2/cfoS/g1MWNYdewfEL6j13OEiO3QzjQgQYlypzAefeC
XhJVS906GYqheLtyq/FoCKlmoiwZpRKxPCL3Ow0a6fOjkkP1ZKESiyWqy74063K0
w07fvje4DWoj8AXRd4vbLdcN+KrWdq1bYHBZFcDBlfAAiR7U
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:34 2024 by rpki-client on console-ams.rpki-client.org