Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pzGX69LNEqpqXvMFXzzHIs4DM-A.roa
File: pzGX69LNEqpqXvMFXzzHIs4DM-A.roa (raw, json)
Hash identifier: s2t+7zXdeuWJeg00CS8RTnzU0Xe1kl85J2ZBc8Ju3VU=
Subject key identifier: A7:31:97:EB:D2:CD:12:AA:6A:5E:F3:05:5F:3C:C7:22:CE:03:33:E0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186987E16C8C245B1FD2462FFC3A2189D5D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pzGX69LNEqpqXvMFXzzHIs4DM-A.roa
Signing time: Tue 28 Feb 2023 14:47:25 +0000
ROA not before: Tue 28 Feb 2023 14:47:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:7e:16:c8:c2:45:b1:fd:24:62:ff:c3:a2:18:9d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 28 14:47:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a73197ebd2cd12aa6a5ef3055f3cc722ce0333e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:39:4b:40:8b:b7:f4:84:93:38:62:14:cd:
75:e6:f3:e8:03:97:00:55:2c:9b:d1:b0:be:b2:c4:
39:f5:1b:bf:9d:f8:ab:f2:05:e3:48:a4:56:42:03:
de:7a:b7:13:4f:5a:e2:b3:f4:b3:65:60:7c:ec:c0:
64:9e:57:91:90:f7:dc:7d:b7:29:e6:7b:80:b1:dc:
92:38:53:72:72:1b:8b:c7:0c:75:6f:9a:19:20:e3:
ab:b4:1c:4c:97:75:99:f0:e4:c9:70:31:ae:a5:c0:
f2:ce:d2:91:80:c2:42:7b:92:e7:1b:8f:f9:46:33:
65:ad:39:a7:23:15:a7:04:f1:95:bd:5c:58:e1:0b:
14:c0:6d:8b:54:66:45:06:00:17:b8:f7:b8:99:ab:
22:1e:df:19:f4:e7:16:f9:da:66:5f:20:f5:b9:22:
db:f4:26:09:a5:fe:a6:bd:22:8a:24:04:5b:29:e2:
02:81:e4:cf:53:02:38:c8:42:f9:37:5b:bf:a0:45:
37:06:1e:bb:b9:e0:30:52:c2:ee:25:21:42:7e:c7:
29:02:e7:e4:2d:18:dc:a2:5c:a5:91:35:14:c7:78:
3b:6c:f0:76:b9:66:69:3a:90:f6:4c:12:99:58:9e:
11:e5:20:7c:99:bd:55:0e:1a:ac:02:66:a2:04:9f:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:31:97:EB:D2:CD:12:AA:6A:5E:F3:05:5F:3C:C7:22:CE:03:33:E0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pzGX69LNEqpqXvMFXzzHIs4DM-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.91.0/24
163.5.97.0/24
163.5.169.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
af:e1:50:52:f1:d0:d1:d4:0c:87:de:91:6c:1e:a1:3e:c3:33:
81:a7:29:0f:e3:8a:c4:b8:2a:f4:ec:89:49:ae:24:2a:15:42:
f3:a4:5f:55:ca:87:bc:6e:e1:ae:05:63:8c:69:39:af:60:37:
2f:ca:b1:29:58:50:3a:cc:c9:8e:2b:c6:c6:0f:6b:c5:33:6c:
5c:76:2d:03:36:84:3d:89:c4:33:ca:32:f2:41:4e:97:5b:e6:
89:15:d4:dd:87:70:38:e0:e5:93:d6:6c:0d:3a:7e:27:e3:89:
75:1c:84:69:08:3f:c6:a1:7f:07:be:4a:af:e5:6c:46:46:a4:
e3:77:f2:35:3b:83:84:85:f9:dd:f7:4d:5e:cb:30:1f:e0:fe:
4c:3f:ce:5c:13:ca:56:1b:7e:c0:1f:5d:be:00:ba:75:8e:d0:
b9:12:2e:26:95:ef:59:6f:61:28:ff:0a:57:94:ca:b9:e3:11:
58:51:7c:4a:2d:f5:fe:b5:c1:e5:7d:ba:ad:98:bf:67:16:e4:
cd:33:d3:37:d3:91:9a:75:d6:7f:11:cb:26:be:5f:27:6d:ad:
18:72:54:25:2c:c5:8b:fb:9a:75:ad:eb:d3:84:25:1b:27:7c:
ce:dc:60:ee:b2:4e:51:14:d1:0a:8a:4d:54:0a:25:35:2a:08:
d1:f4:6d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org