Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/npRUWTGvl3_DI3JyXd6fRQzeIZ8.roa
File: npRUWTGvl3_DI3JyXd6fRQzeIZ8.roa (raw, json)
Hash identifier: 8vqSvFE1S9lMonaqSuBEGo5nT6Gh4tlf/oX4A+pKfNI=
Subject key identifier: 9E:94:54:59:31:AF:97:7F:C3:23:72:72:5D:DE:9F:45:0C:DE:21:9F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01899BE55F89D85233D0595DE8E8AA1C3474
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/npRUWTGvl3_DI3JyXd6fRQzeIZ8.roa
Signing time: Fri 28 Jul 2023 09:47:27 +0000
ROA not before: Fri 28 Jul 2023 09:47:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.187.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:e5:5f:89:d8:52:33:d0:59:5d:e8:e8:aa:1c:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 28 09:47:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e94545931af977fc32372725dde9f450cde219f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:88:90:cf:a4:fb:2d:09:0d:7b:38:a9:1a:fb:
d3:1b:00:39:f3:a4:c6:cc:89:11:27:03:25:6d:ff:
0c:7f:94:e3:54:1a:a4:6c:a0:11:95:d5:44:5e:25:
c1:17:3b:f3:94:14:0f:01:15:74:1d:91:e2:79:15:
df:00:a9:57:84:ae:0e:f6:82:75:4c:6d:bd:13:7f:
45:c2:ae:5b:58:ee:13:ca:85:d8:ed:62:39:49:7e:
ef:58:fc:a3:76:55:19:aa:2d:f7:2e:4e:3c:37:1f:
af:2f:70:16:55:a9:58:da:21:f4:47:28:db:67:2a:
1f:2a:f0:77:99:61:d5:b6:86:1a:e9:eb:45:08:a0:
3f:d3:f0:fe:27:24:2f:23:4b:08:4b:12:9a:47:11:
84:ad:48:e2:95:b4:b3:6c:ec:8e:a1:07:93:6c:cf:
68:68:25:f2:6b:84:5a:c6:ff:00:c0:ff:b8:42:6c:
4f:54:15:56:9c:18:40:46:ed:e7:ec:04:97:a9:4a:
c9:34:a6:b6:1c:1d:e0:5a:f3:6a:e6:c9:b7:87:d4:
b2:f3:42:a4:a9:0d:f3:84:6d:0c:de:13:a4:81:db:
60:83:45:07:5f:60:10:58:ce:f0:ba:76:2b:b0:dd:
e8:49:17:d1:9f:fc:11:de:2e:5a:2e:5c:1f:8f:71:
99:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:94:54:59:31:AF:97:7F:C3:23:72:72:5D:DE:9F:45:0C:DE:21:9F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/npRUWTGvl3_DI3JyXd6fRQzeIZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.187.0/24
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
72:b5:b9:ec:73:1e:d9:ac:ea:ee:75:e0:7b:6c:dd:1a:6f:ab:
4e:81:31:40:ad:41:af:54:1c:0d:8d:5b:c4:2c:42:3e:c1:33:
18:21:db:ba:c0:8f:07:98:60:d2:62:de:55:7d:b6:27:ce:3c:
ec:91:28:ce:06:63:d7:96:bb:eb:90:40:90:56:10:97:66:ab:
c2:11:9d:74:c3:39:5d:f6:62:3e:26:5e:06:02:04:d0:53:a4:
d5:20:30:30:f2:62:0f:2a:49:bd:4b:27:4b:a1:11:8c:d2:02:
26:5a:4a:2a:73:e4:79:f3:71:5b:60:da:e8:85:eb:df:a5:5b:
22:2e:df:86:89:c5:6c:ee:21:ad:ef:3d:e7:a4:da:d0:09:16:
5a:a6:a4:93:63:42:ac:61:64:e4:3f:0d:d7:3c:52:4a:d9:da:
14:06:74:42:0c:8d:02:2e:1c:d2:17:f9:40:fe:1c:6e:4c:9d:
2a:70:23:41:00:a3:e0:57:56:34:1e:52:7b:00:f7:93:c0:53:
b4:86:ba:2c:6b:e1:08:9f:58:ee:d9:15:f6:86:84:b3:4a:c1:
96:42:72:b8:aa:6b:8f:92:f5:c8:cb:05:32:15:4a:7f:5d:dd:
63:a1:af:86:28:39:48:68:00:bd:fa:37:4f:a9:e3:17:9f:1b:
6e:f3:f5:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmb5V+J2FIz0Fld6OiqHDR0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNzI4MDk0NzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTk0NTQ1OTMxYWY5NzdmYzMyMzcyNzI1ZGRlOWY0NTBjZGUyMTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4iQz6T7LQkNezipGvvTGwA586TG
zIkRJwMlbf8Mf5TjVBqkbKARldVEXiXBFzvzlBQPARV0HZHieRXfAKlXhK4O9oJ1
TG29E39Fwq5bWO4TyoXY7WI5SX7vWPyjdlUZqi33Lk48Nx+vL3AWValY2iH0Ryjb
ZyofKvB3mWHVtoYa6etFCKA/0/D+JyQvI0sISxKaRxGErUjilbSzbOyOoQeTbM9o
aCXya4Raxv8AwP+4QmxPVBVWnBhARu3n7ASXqUrJNKa2HB3gWvNq5sm3h9Sy80Kk
qQ3zhG0M3hOkgdtgg0UHX2AQWM7wunYrsN3oSRfRn/wR3i5aLlwfj3GZWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ6UVFkxr5d/wyNycl3en0UM3iGfMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbnBSVVdUR3ZsM19ESTNKeVhkNmZSUXplSVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowW7AwQA
owXRMA0GCSqGSIb3DQEBCwUAA4IBAQBytbnscx7ZrOrudeB7bN0ab6tOgTFArUGv
VBwNjVvELEI+wTMYIdu6wI8HmGDSYt5VfbYnzjzskSjOBmPXlrvrkECQVhCXZqvC
EZ10wzld9mI+Jl4GAgTQU6TVIDAw8mIPKkm9SydLoRGM0gImWkoqc+R583FbYNro
hevfpVsiLt+GicVs7iGt7z3npNrQCRZapqSTY0KsYWTkPw3XPFJK2doUBnRCDI0C
LhzSF/lA/hxuTJ0qcCNBAKPgV1Y0HlJ7APeTwFO0hrosa+EIn1ju2RX2hoSzSsGW
QnK4qmuPkvXIywUyFUp/Xd1joa+GKDlIaAC9+jdPqeMXnxtu8/UT
-----END CERTIFICATE-----
Generated at Sun Aug 27 14:38:53 2023 by rpki-client on console-fra.rpki-client.org