Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pzL3A7CSH-F-tuh3FLOSptkkCAk.roa
File: pzL3A7CSH-F-tuh3FLOSptkkCAk.roa (raw, json)
Hash identifier: JJA1o7iQ7piaTuIviuCylcEUzjhk9DgoKnICRjOj7pI=
Subject key identifier: A7:32:F7:03:B0:92:1F:E1:7E:B6:E8:77:14:B3:92:A6:D9:24:08:09
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185BB6F2670D37D74FE7225FB2448E75EA3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pzL3A7CSH-F-tuh3FLOSptkkCAk.roa
Signing time: Mon 16 Jan 2023 16:35:01 +0000
ROA not before: Mon 16 Jan 2023 16:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.183.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:6f:26:70:d3:7d:74:fe:72:25:fb:24:48:e7:5e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 16 16:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a732f703b0921fe17eb6e87714b392a6d9240809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:fe:69:3c:1b:c8:d8:7c:1c:4f:ee:f4:1f:
c3:89:d6:23:12:6c:b2:8c:c7:c6:26:8f:16:50:ba:
74:01:4e:1b:cc:9a:6a:11:76:29:1c:b6:17:0b:2f:
07:60:03:54:e7:fa:ca:51:e1:3a:dc:d1:52:2a:fb:
6b:9b:c6:0a:33:b6:1a:62:41:5d:ad:6a:34:20:3b:
0c:dc:ca:1e:8d:49:9b:89:2b:ea:b2:d7:cf:4b:5d:
3d:e0:48:cc:86:84:e7:9e:64:ac:c7:b6:7e:87:68:
79:f2:9d:67:f7:29:1e:43:89:a0:fe:af:f7:b3:be:
f4:00:03:21:db:c6:b5:49:7e:2e:1f:dd:b1:85:ca:
75:fa:08:60:bd:ae:da:56:ea:57:af:3d:79:6c:2a:
54:fc:a6:47:e0:23:95:22:1a:d4:be:17:d6:69:47:
34:c8:df:25:ae:35:c6:62:ea:b9:3b:58:16:b9:94:
55:9b:ea:c9:ac:6e:6e:df:a9:8a:89:50:f8:e9:87:
24:9f:43:10:46:e2:a8:b5:33:97:dc:c3:28:e4:8d:
6f:7f:49:a2:ba:26:71:c3:1b:2e:41:28:31:c7:5c:
08:a8:22:99:c6:61:8e:6f:b2:3b:94:09:8f:ae:9d:
85:80:f3:17:74:11:a6:fa:e5:1c:dc:e2:9e:fc:e3:
c5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:32:F7:03:B0:92:1F:E1:7E:B6:E8:77:14:B3:92:A6:D9:24:08:09
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pzL3A7CSH-F-tuh3FLOSptkkCAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.122.0/24
163.5.183.0/24
163.5.238.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3f:43:3a:9d:18:84:9b:55:d7:e4:57:ac:f9:97:8e:f3:93:
b4:f8:1a:98:7e:3a:70:bb:dd:9d:b3:72:d5:55:62:fe:b1:26:
b6:68:77:ee:d8:a3:d4:e7:cf:8f:64:87:82:7c:88:73:2a:05:
ad:9c:e7:45:16:d5:0d:e1:f8:e7:3d:1a:be:0e:5e:a2:73:db:
62:95:af:c5:b4:13:84:ba:da:db:90:2e:cf:a5:18:65:81:43:
e9:83:59:0c:8c:f8:d6:c7:b8:f4:53:48:33:20:6c:82:71:e9:
f1:8b:fc:f5:ee:14:3e:d7:1e:40:d6:a4:3f:c4:0d:7d:91:a5:
3d:56:13:3c:ca:f5:36:7c:63:c0:74:c9:a8:cf:c4:d6:7c:6c:
6f:8d:dc:52:76:ad:cc:7b:c6:34:9a:eb:38:05:2c:49:f4:a2:
14:bc:5d:20:b5:5f:f7:f8:26:58:62:7f:3a:3c:47:76:f5:8f:
e1:4a:ac:af:dd:54:3f:dc:34:88:b5:6b:db:5c:78:1f:9f:91:
8c:7a:bc:da:fc:0e:db:43:42:a8:8b:50:df:e9:be:5d:1d:73:
48:de:5b:00:5d:dd:e2:2b:74:dd:03:10:de:99:b6:16:5b:1f:
de:c1:03:e6:fa:22:15:d0:f4:66:44:e6:07:fd:fc:ca:85:07:
2a:e5:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org