Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w1b7t7dWNbpMZhk4iTL2JIgqqOk.roa
File: w1b7t7dWNbpMZhk4iTL2JIgqqOk.roa (raw, json)
Hash identifier: +s7p5dY0BYt/nBQVG7CJzn3j6bVoH2SpIZeISE9pajs=
Subject key identifier: C3:56:FB:B7:B7:56:35:BA:4C:66:19:38:89:32:F6:24:88:2A:A8:E9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188D4BD21CA6A5F34E4625494D4B2418DC5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w1b7t7dWNbpMZhk4iTL2JIgqqOk.roa
Signing time: Mon 19 Jun 2023 17:39:04 +0000
ROA not before: Mon 19 Jun 2023 17:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.207.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:bd:21:ca:6a:5f:34:e4:62:54:94:d4:b2:41:8d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 19 17:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c356fbb7b75635ba4c6619388932f624882aa8e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:98:a2:6d:ac:4a:00:47:5f:20:4e:b3:f7:c3:
28:19:ae:97:c5:11:5d:b6:91:a2:c5:98:fa:0f:03:
47:63:85:d3:d3:c8:62:2b:8d:77:45:6b:c0:cf:d1:
c8:83:b7:dd:25:93:91:49:f1:b0:75:5e:57:15:96:
78:70:72:ff:b7:2c:bb:d1:d9:a8:d6:c4:90:91:a2:
3e:af:87:71:63:c4:09:f6:b4:5f:9f:99:0a:f3:4d:
f1:fd:f5:a4:a1:58:8d:53:df:2f:0e:5c:50:c1:3a:
fb:cc:de:a9:cf:a0:28:97:ec:1d:8e:3a:14:85:d3:
e9:d0:bb:89:8c:b1:f2:fe:30:ad:5f:cb:a1:71:f9:
17:d2:5a:15:dc:2e:12:d7:de:2b:35:5d:7a:bb:44:
90:24:ad:8b:84:ad:16:4a:3c:8e:ed:06:b1:86:2b:
ab:18:32:97:89:3e:b7:07:84:ba:c6:1f:5a:0d:eb:
7c:de:26:e0:f1:d1:3b:c0:86:b5:c5:bb:a2:73:16:
e9:94:8a:a8:5e:cc:92:9f:e0:dc:a3:fc:1e:7b:06:
a9:99:fa:c6:2d:2f:d9:d6:58:c6:d9:99:fc:46:af:
6c:81:5a:a7:cb:3d:62:07:57:b1:16:f1:ff:6c:d5:
42:46:7d:07:64:07:3a:7a:dd:c2:f8:11:7e:73:27:
39:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:FB:B7:B7:56:35:BA:4C:66:19:38:89:32:F6:24:88:2A:A8:E9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w1b7t7dWNbpMZhk4iTL2JIgqqOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.129.0/24
163.5.207.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7b:91:e0:8d:2b:46:1c:e4:73:5f:b2:5c:d8:7b:10:87:19:
50:46:f4:b6:29:fc:9f:66:6e:2c:55:9a:58:b4:19:4d:5e:28:
4a:1f:98:33:3b:c3:ca:03:1e:72:b8:79:81:5e:d7:70:b9:51:
57:35:98:aa:4d:c2:f9:a5:58:e0:ca:c3:88:f2:24:e4:b7:2b:
81:81:6a:24:68:4c:63:53:ae:2b:7a:8c:a1:fa:6d:80:6c:8f:
cd:30:3d:e7:2e:20:08:86:88:36:34:a8:b3:c8:5e:a7:a1:99:
67:a7:e4:12:a6:91:ee:38:17:59:03:28:44:08:75:e9:5d:dd:
ab:48:26:24:ec:07:37:df:93:b1:3c:76:95:c7:6f:31:be:ec:
83:d9:27:4d:32:c6:33:ab:6e:a6:33:e2:a2:25:55:d2:bb:d7:
1e:97:e2:ce:02:4c:90:50:7a:e2:8d:59:c1:cc:4f:c6:59:81:
96:ca:e2:89:a9:74:8e:18:dd:58:45:a4:c2:24:71:81:67:71:
c8:6e:5d:0d:22:7b:fe:38:dc:9f:69:ea:f1:cd:32:09:79:52:
0f:40:c7:08:e3:f4:33:7c:e1:c9:e1:73:0e:96:71:c9:65:07:
3b:03:f3:c7:fc:62:0d:1a:06:73:2e:a8:d4:aa:de:cf:e3:a1:
c4:1f:48:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjUvSHKal805GJUlNSyQY3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjE5MTczOTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzU2ZmJiN2I3NTYzNWJhNGM2NjE5Mzg4OTMyZjYyNDg4MmFhOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZiibaxKAEdfIE6z98MoGa6XxRFd
tpGixZj6DwNHY4XT08hiK413RWvAz9HIg7fdJZORSfGwdV5XFZZ4cHL/tyy70dmo
1sSQkaI+r4dxY8QJ9rRfn5kK803x/fWkoViNU98vDlxQwTr7zN6pz6Aol+wdjjoU
hdPp0LuJjLHy/jCtX8uhcfkX0loV3C4S194rNV16u0SQJK2LhK0WSjyO7Qaxhiur
GDKXiT63B4S6xh9aDet83ibg8dE7wIa1xbuicxbplIqoXsySn+Dco/weewapmfrG
LS/Z1ljG2Zn8Rq9sgVqnyz1iB1exFvH/bNVCRn0HZAc6et3C+BF+cyc59QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMNW+7e3VjW6TGYZOIky9iSIKqjpMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvdzFiN3Q3ZFdOYnBNWmhrNGlUTDJKSWdxcU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWBAwQA
owXPMA0GCSqGSIb3DQEBCwUAA4IBAQCqe5HgjStGHORzX7Jc2HsQhxlQRvS2Kfyf
Zm4sVZpYtBlNXihKH5gzO8PKAx5yuHmBXtdwuVFXNZiqTcL5pVjgysOI8iTktyuB
gWokaExjU64reoyh+m2AbI/NMD3nLiAIhog2NKizyF6noZlnp+QSppHuOBdZAyhE
CHXpXd2rSCYk7Ac335OxPHaVx28xvuyD2SdNMsYzq26mM+KiJVXSu9cel+LOAkyQ
UHrijVnBzE/GWYGWyuKJqXSOGN1YRaTCJHGBZ3HIbl0NInv+ONyfaerxzTIJeVIP
QMcI4/QzfOHJ4XMOlnHJZQc7A/PH/GINGgZzLqjUqt7P46HEH0jI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org