Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/unztD2fD1O5oPXRzhY44VK4jEC4.roa
File: unztD2fD1O5oPXRzhY44VK4jEC4.roa (raw, json)
Hash identifier: 895e9oouGDfbk+AL/ZiJE6fizGn20CkpmT1ZYLJz8/M=
Subject key identifier: BA:7C:ED:0F:67:C3:D4:EE:68:3D:74:73:85:8E:38:54:AE:23:10:2E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01880542E2B84CE1B61971461EB95C8F1DB9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/unztD2fD1O5oPXRzhY44VK4jEC4.roa
Signing time: Wed 10 May 2023 10:44:09 +0000
ROA not before: Wed 10 May 2023 10:44:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 163.5.177.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:42:e2:b8:4c:e1:b6:19:71:46:1e:b9:5c:8f:1d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 10 10:44:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba7ced0f67c3d4ee683d7473858e3854ae23102e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:3e:10:e6:8f:52:36:6e:b4:72:36:b2:9c:
08:88:36:f8:a9:c5:c2:bf:5c:72:17:e7:3c:90:33:
e1:c3:8c:7d:71:13:c7:f6:0a:8f:6c:4a:c5:dc:fa:
91:8b:b3:e7:65:a5:95:93:2c:53:d7:cb:17:34:c1:
17:34:56:45:78:dc:87:10:c3:34:be:96:ec:37:08:
3f:6b:b4:53:6a:86:33:da:f1:85:42:3d:d1:71:39:
eb:86:0b:a8:d9:60:fe:ac:f2:1d:ed:5b:f3:f5:3b:
8c:55:e6:78:2a:a4:11:a2:35:d0:7c:74:60:68:39:
c0:c3:c5:fb:c9:d1:cd:c9:41:5a:3c:04:aa:6d:20:
d7:11:0f:b9:19:8c:1a:46:3d:62:47:3e:fc:de:fb:
7f:11:53:27:29:03:06:a1:75:3b:07:87:3a:b9:ba:
64:3d:f6:d2:58:1d:2b:b0:6f:c1:4d:a5:22:d2:f5:
93:c3:f9:36:67:6f:80:97:6d:83:f2:9a:33:e3:e2:
8b:e1:ac:e1:ab:d3:bf:96:23:ea:f9:54:aa:ab:ec:
a6:6b:13:2b:e1:be:dc:a6:e8:b8:58:77:7a:41:9c:
c4:09:2a:f5:13:ef:49:2d:3b:78:61:49:a2:dc:da:
5c:9d:26:7b:d5:4c:9d:75:4b:77:a9:11:c6:58:42:
69:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:ED:0F:67:C3:D4:EE:68:3D:74:73:85:8E:38:54:AE:23:10:2E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/unztD2fD1O5oPXRzhY44VK4jEC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.96.0/24
163.5.177.0/24
163.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a7:e1:d9:79:d6:d9:b3:63:2b:27:8b:4c:70:8b:a7:54:10:
35:96:36:75:48:3c:31:f0:a9:4d:cc:48:0a:db:62:04:7b:b0:
28:5e:64:c8:a3:9d:30:00:2a:3c:1f:83:88:f9:92:b7:48:5a:
90:3d:78:95:56:84:2c:8d:25:9f:76:33:f0:29:d9:98:88:e1:
e8:06:f6:ae:9b:a5:b8:75:b4:1d:6a:65:15:5c:45:77:8a:7b:
78:b4:e6:fc:bb:7a:c3:a2:f5:07:b0:37:89:83:a1:24:c4:8c:
f7:88:7c:a8:a6:6c:2f:82:a2:15:13:75:57:bd:ce:e1:31:be:
36:52:5d:36:b1:38:23:5f:47:34:6d:08:d7:6a:e1:52:d1:7d:
7b:e0:11:63:53:a3:33:9b:12:77:00:56:05:15:64:6e:d2:7a:
db:f2:fb:94:91:6e:8c:a1:cd:a0:7b:86:8d:f9:74:2e:1a:0b:
58:98:a0:0d:6a:c4:03:0b:80:21:7f:f7:b1:47:bf:cd:d0:a6:
af:44:f3:9a:a9:b1:e5:cf:a1:c5:71:72:fa:53:02:9c:d8:05:
ab:8f:68:b5:29:b1:e8:a3:bc:00:55:e4:87:2e:ba:a3:08:f1:
f4:51:58:b7:aa:60:7c:bd:c8:8b:07:3e:22:84:8d:7b:94:25:
4b:4e:b1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org