Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sPIKmx1-mup_CFKPT_eT2CZA5Qo.roa
File: sPIKmx1-mup_CFKPT_eT2CZA5Qo.roa (raw, json)
Hash identifier: Y4ep4OgGgqxGuqiJK1gDCRBYbDJigZpsod0Qhh21uEs=
Subject key identifier: B0:F2:0A:9B:1D:7E:9A:EA:7F:08:52:8F:4F:F7:93:D8:26:40:E5:0A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B5450632D343706752638B5BCFAB1B1D7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sPIKmx1-mup_CFKPT_eT2CZA5Qo.roa
Signing time: Sat 21 Oct 2023 22:17:16 +0000
ROA not before: Sat 21 Oct 2023 22:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 163.5.190.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:50:63:2d:34:37:06:75:26:38:b5:bc:fa:b1:b1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 21 22:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0f20a9b1d7e9aea7f08528f4ff793d82640e50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:72:cc:95:fe:f5:a7:0a:18:c9:75:c0:f3:
f5:03:f2:67:68:f0:54:f2:63:7d:af:10:4e:b1:c7:
59:26:b4:a7:07:5b:5a:11:86:54:44:16:04:9e:95:
74:71:0f:b7:dd:b3:82:9d:da:76:0b:4d:aa:a1:33:
11:9b:88:b7:5f:ea:7c:02:9e:8a:74:5c:37:3f:cb:
5b:a1:f5:dc:ee:a5:76:e0:42:12:05:aa:e8:a3:24:
f1:3a:38:c1:6a:77:d5:75:49:fe:86:76:1d:d9:12:
be:28:75:3b:16:be:e7:1c:ce:cf:70:c1:e5:f1:cd:
e7:70:0f:32:cf:06:a6:94:8d:32:3d:9f:17:f5:bf:
b3:ee:47:0f:bb:76:f0:30:5a:a6:b8:7b:d7:91:81:
dd:ba:01:d0:78:52:e4:dd:15:5f:0c:2d:92:46:f4:
d6:74:70:cf:9f:57:9e:06:c2:51:3f:73:38:5f:c8:
54:fe:38:6e:ed:f7:49:57:83:f7:83:f7:81:37:b5:
e8:29:3b:41:f1:9a:57:7c:08:6f:db:c1:5a:8d:74:
31:34:b9:c7:20:d0:c4:66:c4:e8:28:c0:1b:16:9d:
d0:88:41:ea:b8:a2:d3:43:97:6a:ad:7d:5f:e9:b0:
52:3e:65:15:56:77:fb:6d:bd:51:c7:0e:bc:bf:36:
83:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F2:0A:9B:1D:7E:9A:EA:7F:08:52:8F:4F:F7:93:D8:26:40:E5:0A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sPIKmx1-mup_CFKPT_eT2CZA5Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
163.5.195.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:44:4b:23:8b:7a:3e:a1:7b:f7:4e:67:d0:3c:93:13:6c:fd:
5f:28:3d:6c:29:3f:83:ab:d6:a9:33:c6:a5:2b:72:09:aa:2c:
5b:07:97:9e:9b:ac:e2:17:33:cb:5a:29:c2:74:06:cc:4c:27:
2e:4c:b5:14:07:18:20:92:06:49:30:29:3e:6e:f3:85:38:51:
93:bd:c2:00:48:0d:d8:af:db:c7:98:f8:b2:23:34:e0:4c:83:
36:66:dc:09:87:68:96:3d:9f:e8:8d:0c:45:ee:cf:53:85:ae:
1a:44:ca:f9:51:bc:94:cf:73:65:ac:76:d7:da:d1:5e:2f:bd:
3f:0d:91:13:e7:37:b5:76:59:91:29:75:7a:e1:e2:59:29:f1:
cc:f6:40:59:61:b9:0d:18:8b:09:ce:c7:70:ec:61:d8:cb:e0:
9e:72:06:ce:a3:6d:39:79:b1:df:4f:9e:58:18:34:1a:2b:f0:
82:78:4a:14:50:7f:fc:aa:09:eb:2f:f2:60:b8:e5:30:a3:31:
6b:04:97:75:8e:3d:29:77:6a:dd:ea:e8:5c:45:57:58:b8:83:
c9:94:22:b0:d9:78:54:99:1a:ab:27:ea:a8:2e:55:af:b5:91:
cb:ae:21:44:97:b1:09:22:8c:f1:2a:a9:25:80:6b:60:75:e6:
8c:32:63:a3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtUUGMtNDcGdSY4tbz6sbHXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMxMDIxMjIxNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGYyMGE5YjFkN2U5YWVhN2YwODUyOGY0ZmY3OTNkODI2NDBlNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm25yzJX+9acKGMl1wPP1A/JnaPBU
8mN9rxBOscdZJrSnB1taEYZURBYEnpV0cQ+33bOCndp2C02qoTMRm4i3X+p8Ap6K
dFw3P8tbofXc7qV24EISBarooyTxOjjBanfVdUn+hnYd2RK+KHU7Fr7nHM7PcMHl
8c3ncA8yzwamlI0yPZ8X9b+z7kcPu3bwMFqmuHvXkYHdugHQeFLk3RVfDC2SRvTW
dHDPn1eeBsJRP3M4X8hU/jhu7fdJV4P3g/eBN7XoKTtB8ZpXfAhv28FajXQxNLnH
INDEZsToKMAbFp3QiEHquKLTQ5dqrX1f6bBSPmUVVnf7bb1Rxw68vzaDHwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLDyCpsdfprqfwhSj0/3k9gmQOUKMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvc1BJS214MS1tdXBfQ0ZLUFRfZVQyQ1pBNVFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowW+AwQA
owXDMA0GCSqGSIb3DQEBCwUAA4IBAQAqREsji3o+oXv3TmfQPJMTbP1fKD1sKT+D
q9apM8alK3IJqixbB5eem6ziFzPLWinCdAbMTCcuTLUUBxggkgZJMCk+bvOFOFGT
vcIASA3Yr9vHmPiyIzTgTIM2ZtwJh2iWPZ/ojQxF7s9Tha4aRMr5UbyUz3NlrHbX
2tFeL70/DZET5ze1dlmRKXV64eJZKfHM9kBZYbkNGIsJzsdw7GHYy+CecgbOo205
ebHfT55YGDQaK/CCeEoUUH/8qgnrL/JguOUwozFrBJd1jj0pd2rd6uhcRVdYuIPJ
lCKw2XhUmRqrJ+qoLlWvtZHLriFEl7EJIozxKqklgGtgdeaMMmOj
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org