Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wHSfCh6nSk4Mns-BNZoB-BMnk6k.roa
File: wHSfCh6nSk4Mns-BNZoB-BMnk6k.roa (raw, json)
Hash identifier: ZGhDZlPgzxUJM8xdysb3vKfJ/k1dL9ygoKjkwCrABBM=
Subject key identifier: C0:74:9F:0A:1E:A7:4A:4E:0C:9E:CF:81:35:9A:01:F8:13:27:93:A9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018577372930B84E26CF8F0FA9EAEAF0BE7C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wHSfCh6nSk4Mns-BNZoB-BMnk6k.roa
Signing time: Tue 03 Jan 2023 10:39:41 +0000
ROA not before: Tue 03 Jan 2023 10:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.124.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:37:29:30:b8:4e:26:cf:8f:0f:a9:ea:ea:f0:be:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 3 10:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0749f0a1ea74a4e0c9ecf81359a01f8132793a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:75:24:89:1d:62:c0:05:5a:3c:1b:e9:cc:71:
4c:c0:72:57:d1:8a:6f:07:8c:a2:d1:72:6d:3d:24:
e6:73:8e:b6:93:11:92:fc:01:92:5a:99:ac:85:93:
2e:5d:79:ed:f9:be:44:ab:6e:29:9e:06:2a:10:b7:
be:08:19:35:a5:e0:58:64:e6:29:16:a6:41:d6:51:
e5:2f:e1:42:cd:f2:9f:4c:48:ec:b3:a1:96:1c:61:
bc:2e:e8:a9:9a:aa:a9:37:90:b7:9a:99:b2:4b:35:
63:95:91:be:c4:91:97:22:a2:bb:96:13:8c:e3:6f:
33:f4:4c:da:75:ef:49:72:ec:3d:d9:42:b9:cb:b5:
4d:e1:4b:10:fe:30:12:f7:16:91:c2:6e:46:6a:2a:
77:29:f5:49:44:1f:ba:59:f3:58:42:bc:a1:ff:b5:
c6:eb:c3:6a:4c:51:79:46:ec:48:4a:0d:ac:ca:c2:
1c:1e:c7:6d:28:ee:77:ed:b0:93:d3:48:77:7e:14:
69:99:90:23:52:4b:04:dc:dc:a1:af:33:ed:5a:8d:
1f:f0:eb:e6:0e:3d:f7:f6:fe:3c:93:9a:6f:e9:06:
04:33:36:3b:3a:d6:a6:ba:cc:93:8a:33:1f:21:cd:
4c:af:09:d5:ce:69:55:f5:49:fe:5c:79:63:66:ed:
3f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:74:9F:0A:1E:A7:4A:4E:0C:9E:CF:81:35:9A:01:F8:13:27:93:A9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wHSfCh6nSk4Mns-BNZoB-BMnk6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
163.5.129.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b4:41:a6:3b:dc:56:0f:cb:6e:5f:27:b1:1f:7f:96:cd:59:
15:cb:59:0a:1e:69:59:f2:39:0a:3b:8c:85:81:a7:f5:a4:3d:
af:43:6e:c1:48:2e:a4:ef:58:68:51:dc:2e:de:dd:d1:7f:f0:
e2:b5:86:86:c7:16:a5:2b:39:e0:98:41:cf:db:66:22:d9:c5:
a8:86:aa:78:0a:eb:98:10:d5:d8:b1:24:be:d3:f9:f3:f6:42:
50:1f:30:d4:7b:1c:e3:5f:c7:c3:60:48:d5:c2:1f:c4:43:b0:
a3:60:67:b4:0f:0b:6e:4b:19:9d:dd:cc:5f:9d:5f:16:04:29:
93:6b:40:80:6b:e5:ce:a8:84:68:73:d2:10:89:50:d5:e2:68:
53:8e:78:ba:b4:52:1f:5d:d5:ca:6d:35:4d:58:71:96:cb:5f:
35:1c:44:74:2f:fb:fa:84:49:49:4a:00:f8:33:bc:47:8c:87:
6b:d4:57:44:8d:e2:1a:9b:75:73:89:2e:ef:20:aa:3a:62:8b:
e6:c9:81:57:df:1b:c2:b3:e3:80:14:0a:e5:c6:20:63:bd:46:
7d:36:60:d3:62:6d:88:ab:bb:3b:61:e9:02:11:95:63:03:64:
d6:df:4e:1e:04:1e:77:54:87:cf:bf:dc:63:c2:df:70:b1:5b:
80:41:53:75
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYV3NykwuE4mz48Pqerq8L58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTAzMTAzOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDc0OWYwYTFlYTc0YTRlMGM5ZWNmODEzNTlhMDFmODEzMjc5M2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XUkiR1iwAVaPBvpzHFMwHJX0Ypv
B4yi0XJtPSTmc462kxGS/AGSWpmshZMuXXnt+b5Eq24pngYqELe+CBk1peBYZOYp
FqZB1lHlL+FCzfKfTEjss6GWHGG8LuipmqqpN5C3mpmySzVjlZG+xJGXIqK7lhOM
428z9Ezade9Jcuw92UK5y7VN4UsQ/jAS9xaRwm5Gaip3KfVJRB+6WfNYQryh/7XG
68NqTFF5RuxISg2sysIcHsdtKO537bCT00h3fhRpmZAjUksE3NyhrzPtWo0f8Ovm
Dj339v48k5pv6QYEMzY7OtamusyTijMfIc1MrwnVzmlV9Un+XHljZu0/iwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMB0nwoep0pODJ7PgTWaAfgTJ5OpMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvd0hTZkNoNm5TazRNbnMtQk5ab0ItQk1uazZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowV8AwQA
owWBAwQAowX3MA0GCSqGSIb3DQEBCwUAA4IBAQCDtEGmO9xWD8tuXyexH3+WzVkV
y1kKHmlZ8jkKO4yFgaf1pD2vQ27BSC6k71hoUdwu3t3Rf/DitYaGxxalKzngmEHP
22Yi2cWohqp4CuuYENXYsSS+0/nz9kJQHzDUexzjX8fDYEjVwh/EQ7CjYGe0Dwtu
Sxmd3cxfnV8WBCmTa0CAa+XOqIRoc9IQiVDV4mhTjni6tFIfXdXKbTVNWHGWy181
HER0L/v6hElJSgD4M7xHjIdr1FdEjeIam3VziS7vIKo6YovmyYFX3xvCs+OAFArl
xiBjvUZ9NmDTYm2Iq7s7YekCEZVjA2TW304eBB53VIfPv9xjwt9wsVuAQVN1
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org