Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lRGLhS2PstVrC4RdMUWB1IsRiKo.roa
File: lRGLhS2PstVrC4RdMUWB1IsRiKo.roa (raw, json)
Hash identifier: RmkJs2eSeUb4JkFyLrwHII+/ri+p9WzAabBBZvUbJ8s=
Subject key identifier: 95:11:8B:85:2D:8F:B2:D5:6B:0B:84:5D:31:45:81:D4:8B:11:88:AA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018968AF028868E13E0395EC52B87478D1F1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lRGLhS2PstVrC4RdMUWB1IsRiKo.roa
Signing time: Tue 18 Jul 2023 11:07:27 +0000
ROA not before: Tue 18 Jul 2023 11:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:af:02:88:68:e1:3e:03:95:ec:52:b8:74:78:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 18 11:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95118b852d8fb2d56b0b845d314581d48b1188aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bf:37:ef:52:9c:2b:57:60:1e:d1:4d:51:36:
7b:ff:e7:d6:70:3f:2f:b9:84:ba:f3:cc:34:fe:c0:
40:70:78:a4:92:38:64:5c:d8:4c:5f:88:1b:07:e5:
48:39:30:37:87:bb:c1:9e:13:99:5e:80:45:ca:5b:
17:a9:e9:77:39:c8:b9:8c:c7:c1:2b:7a:87:eb:13:
25:a4:61:62:5b:84:d8:da:cf:1a:24:ab:d9:1c:e9:
fa:f7:9a:a9:65:5a:62:9c:ed:57:f0:2f:1e:39:26:
f3:4e:90:eb:39:6e:c1:9a:6c:e9:97:3e:1b:30:df:
33:95:80:e9:22:bc:1e:57:bf:6e:63:cf:f0:da:1d:
d9:26:49:15:20:1d:13:67:1e:10:1b:3f:4e:bd:a1:
04:08:ba:d8:62:9b:ae:ac:2d:c8:4f:29:de:8b:1b:
b9:95:f0:0a:3c:80:4b:5e:f3:5c:c8:16:2a:07:ec:
78:73:a0:81:df:d9:50:4a:78:4f:61:e9:2a:e7:c1:
49:d3:d2:fd:63:2e:e8:c0:4b:97:d3:bf:e2:52:fc:
8f:3c:c2:cf:3b:88:fe:46:cc:34:18:2c:58:9d:44:
20:f9:85:15:cc:c8:3b:9c:27:1e:e1:89:8f:7e:01:
aa:39:74:11:e8:a9:e9:50:a5:f8:3c:5c:bb:2f:3d:
94:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:11:8B:85:2D:8F:B2:D5:6B:0B:84:5D:31:45:81:D4:8B:11:88:AA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lRGLhS2PstVrC4RdMUWB1IsRiKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:b6:cd:8e:24:80:23:8c:4d:cd:31:d7:ed:11:8a:23:9a:93:
41:98:d4:b0:a3:f9:0e:48:6a:87:1f:17:ea:96:a8:81:f4:c8:
41:9f:a0:74:91:de:c5:55:28:64:44:6d:b9:60:6a:64:c5:bf:
85:9e:59:46:e9:bd:d7:0a:3b:50:9e:97:aa:e6:8e:7f:3f:10:
30:41:a5:90:2d:40:eb:82:5e:79:2c:20:ad:db:c9:0c:b2:ff:
65:a5:37:15:ef:43:f7:8a:83:23:01:75:9d:9d:34:62:b7:94:
af:4d:d0:0c:08:bc:15:4d:5a:ed:f5:c8:db:00:70:a3:58:08:
2e:e8:de:f5:8a:12:6b:b0:f0:42:5f:36:18:98:e2:b9:2f:23:
fa:9f:c2:fa:8d:c7:6c:e8:24:89:65:38:e7:5c:37:9f:95:a3:
24:d8:60:fa:14:e3:0c:87:84:2a:de:08:cf:ca:ab:b0:84:6f:
3c:fa:05:48:02:83:1a:0d:47:d2:7e:71:80:07:ca:ee:19:5f:
e7:fb:1a:81:d0:a5:b5:14:5b:d9:81:b8:62:7e:0a:dd:b4:6a:
3f:0a:a3:3b:91:f0:92:c4:e4:07:75:af:33:26:f8:18:d0:b5:
ca:d7:5f:90:99:a9:e1:ab:d6:d9:df:34:7e:38:9f:4e:eb:57:
9f:c3:e4:c2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlorwKIaOE+A5XsUrh0eNHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNzE4MTEwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTExOGI4NTJkOGZiMmQ1NmIwYjg0NWQzMTQ1ODFkNDhiMTE4OGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr8371KcK1dgHtFNUTZ7/+fWcD8v
uYS688w0/sBAcHikkjhkXNhMX4gbB+VIOTA3h7vBnhOZXoBFylsXqel3Oci5jMfB
K3qH6xMlpGFiW4TY2s8aJKvZHOn695qpZVpinO1X8C8eOSbzTpDrOW7Bmmzplz4b
MN8zlYDpIrweV79uY8/w2h3ZJkkVIB0TZx4QGz9OvaEECLrYYpuurC3ITyneixu5
lfAKPIBLXvNcyBYqB+x4c6CB39lQSnhPYekq58FJ09L9Yy7owEuX07/iUvyPPMLP
O4j+Rsw0GCxYnUQg+YUVzMg7nCce4YmPfgGqOXQR6KnpUKX4PFy7Lz2UKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJURi4Utj7LVawuEXTFFgdSLEYiqMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbFJHTGhTMlBzdFZyQzRSZE1VV0IxSXNSaUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUiAwQA
owWmMA0GCSqGSIb3DQEBCwUAA4IBAQCsts2OJIAjjE3NMdftEYojmpNBmNSwo/kO
SGqHHxfqlqiB9MhBn6B0kd7FVShkRG25YGpkxb+FnllG6b3XCjtQnpeq5o5/PxAw
QaWQLUDrgl55LCCt28kMsv9lpTcV70P3ioMjAXWdnTRit5SvTdAMCLwVTVrt9cjb
AHCjWAgu6N71ihJrsPBCXzYYmOK5LyP6n8L6jcds6CSJZTjnXDeflaMk2GD6FOMM
h4Qq3gjPyquwhG88+gVIAoMaDUfSfnGAB8ruGV/n+xqB0KW1FFvZgbhifgrdtGo/
CqM7kfCSxOQHda8zJvgY0LXK11+Qmanhq9bZ3zR+OJ9O61efw+TC
-----END CERTIFICATE-----
Generated at Sat Aug 12 22:00:11 2023 by rpki-client on console-ams.rpki-client.org