Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qY07fMXJ-G_qdKhRq4fetzcrjvo.roa
File: qY07fMXJ-G_qdKhRq4fetzcrjvo.roa (raw, json)
Hash identifier: FcSi/6e3qAMtuC1pe3A78suNDPl2/nwnWVdUvm2HOYw=
Subject key identifier: A9:8D:3B:7C:C5:C9:F8:6F:EA:74:A8:51:AB:87:DE:B7:37:2B:8E:FA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187862F07B06A1592B996E6EA6F70034A47
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qY07fMXJ-G_qdKhRq4fetzcrjvo.roa
Signing time: Sat 15 Apr 2023 18:30:41 +0000
ROA not before: Sat 15 Apr 2023 18:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:2f:07:b0:6a:15:92:b9:96:e6:ea:6f:70:03:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 15 18:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a98d3b7cc5c9f86fea74a851ab87deb7372b8efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:b4:48:33:60:a4:9f:c0:eb:f8:ec:b4:b4:
97:a8:21:2f:6f:70:51:6e:f7:02:bb:d3:a4:5d:8a:
b8:d3:50:0e:e4:f5:be:dc:42:e6:9b:bb:c2:e7:2a:
90:6c:fc:a3:f6:ea:68:42:3a:be:e3:4d:da:f0:f7:
12:26:44:89:9d:34:8c:75:c9:8c:39:80:75:4c:cc:
63:e6:c6:4a:7a:90:b0:9b:4f:21:0d:83:a1:94:18:
1f:08:52:de:46:e6:49:7b:b8:60:55:97:66:e9:33:
8e:4c:8c:00:01:24:14:f3:ea:29:28:d3:d2:db:b5:
ab:af:13:9d:49:8f:31:de:d3:25:aa:a1:19:31:8d:
38:ed:b5:c9:8e:db:0e:b2:4f:e8:df:e9:18:61:21:
66:dd:1b:a2:08:87:42:92:a6:08:7a:c6:1d:0c:e3:
47:9a:cd:ca:d9:b9:1d:86:a6:8d:70:6f:c4:51:1c:
a3:5c:c8:f9:0a:d4:85:04:2c:2c:87:9f:4f:b6:6c:
1b:5f:21:26:63:8d:26:3d:06:68:35:6f:20:18:b8:
f0:e7:56:2c:4e:ae:90:85:13:76:34:73:f8:c2:36:
81:98:4d:30:b6:1c:c0:75:5f:63:43:cf:90:08:29:
5a:40:bc:e8:4a:6e:66:49:2f:3e:a0:07:ad:e3:db:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8D:3B:7C:C5:C9:F8:6F:EA:74:A8:51:AB:87:DE:B7:37:2B:8E:FA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qY07fMXJ-G_qdKhRq4fetzcrjvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.105.0-163.5.106.255
163.5.115.0/24
163.5.118.0/23
163.5.121.0/24
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.212.0/24
163.5.220.0/24
163.5.225.0/24
163.5.229.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:df:66:5b:1d:de:3e:e4:95:b4:67:dd:d7:e4:7e:92:9f:1f:
bb:75:c3:08:15:83:e1:34:ac:1b:15:bf:7d:3c:ab:36:01:5b:
b5:56:a4:c0:f7:06:09:67:3f:96:28:d0:e3:03:10:1e:a6:c7:
fe:6e:c6:29:ee:e6:66:15:94:4a:47:d6:91:94:c6:56:3e:89:
e3:6d:b8:24:56:01:11:74:c3:90:4e:a8:02:21:b7:1f:aa:db:
a7:fc:fb:a4:75:d6:6c:4f:3d:b1:0f:55:1e:00:3f:2b:51:eb:
88:c7:7f:87:9a:63:41:d5:89:ad:9f:0a:45:d7:02:26:da:3b:
0f:66:49:b9:6c:6d:73:b4:89:ab:c4:d7:32:f5:dd:d2:ae:f7:
18:99:e0:f9:85:fd:88:39:da:a9:14:b1:72:fa:b7:00:b6:68:
67:eb:8a:91:f5:34:3b:dd:4e:0d:48:4c:d4:1e:9d:d6:88:d3:
5c:02:11:53:3d:9b:c0:08:da:98:84:84:db:07:49:6d:48:17:
ce:98:b8:0e:5d:8a:dd:a5:7a:98:02:51:08:0e:75:8c:40:f8:
3e:a1:6b:8a:d8:c0:ec:b9:6f:a9:08:60:cd:e5:46:be:25:37:
4d:2c:4e:c6:21:48:a2:16:1f:77:78:d6:6c:61:04:58:23:3f:
9d:af:e4:73
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgISAYeGLwewahWSuZbm6m9wA0pHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNDE1MTgzMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOThkM2I3Y2M1YzlmODZmZWE3NGE4NTFhYjg3ZGViNzM3MmI4ZWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEa0SDNgpJ/A6/jstLSXqCEvb3BR
bvcCu9OkXYq401AO5PW+3ELmm7vC5yqQbPyj9upoQjq+403a8PcSJkSJnTSMdcmM
OYB1TMxj5sZKepCwm08hDYOhlBgfCFLeRuZJe7hgVZdm6TOOTIwAASQU8+opKNPS
27WrrxOdSY8x3tMlqqEZMY047bXJjtsOsk/o3+kYYSFm3RuiCIdCkqYIesYdDONH
ms3K2bkdhqaNcG/EURyjXMj5CtSFBCwsh59PtmwbXyEmY40mPQZoNW8gGLjw51Ys
Tq6QhRN2NHP4wjaBmE0wthzAdV9jQ8+QCClaQLzoSm5mSS8+oAet49uMywIDAQAB
o4ICWTCCAlUwHQYDVR0OBBYEFKmNO3zFyfhv6nSoUauH3rc3K476MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcVkwN2ZNWEotR19xZEtoUnE0ZmV0emNyanZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAowUgMAwD
BACjBWkDBACjBWoDBACjBXMDBAGjBXYDBACjBXkDBACjBZkDBACjBZ8DBACjBagD
BACjBdQDBACjBdwDBACjBeEDBACjBeUDBACjBfIwDQYJKoZIhvcNAQELBQADggEB
AJzfZlsd3j7klbRn3dfkfpKfH7t1wwgVg+E0rBsVv308qzYBW7VWpMD3BglnP5Yo
0OMDEB6mx/5uxinu5mYVlEpH1pGUxlY+ieNtuCRWARF0w5BOqAIhtx+q26f8+6R1
1mxPPbEPVR4APytR64jHf4eaY0HVia2fCkXXAibaOw9mSblsbXO0iavE1zL13dKu
9xiZ4PmF/Yg52qkUsXL6twC2aGfripH1NDvdTg1ITNQendaI01wCEVM9m8AI2piE
hNsHSW1IF86YuA5dit2lepgCUQgOdYxA+D6ha4rYwOy5b6kIYM3lRr4lN00sTsYh
SKIWH3d41mxhBFgjP52v5HM=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org