Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xtqAyjB1Ikl3_I7_19GE7iz77EE.roa
File: xtqAyjB1Ikl3_I7_19GE7iz77EE.roa (raw, json)
Hash identifier: Mq4c30iDGOjaMu9qlBSn7zYSFF8BrvWbCBvCS2ctvJQ=
Subject key identifier: C6:DA:80:CA:30:75:22:49:77:FC:8E:FF:D7:D1:84:EE:2C:FB:EC:41
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01896EC365DAFF4740E766A0E9B86A926981
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xtqAyjB1Ikl3_I7_19GE7iz77EE.roa
Signing time: Wed 19 Jul 2023 15:27:26 +0000
ROA not before: Wed 19 Jul 2023 15:27:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.99.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:c3:65:da:ff:47:40:e7:66:a0:e9:b8:6a:92:69:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 19 15:27:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6da80ca3075224977fc8effd7d184ee2cfbec41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:c4:53:9f:5b:8f:04:bb:ce:02:e7:88:50:
d5:8e:37:cc:34:96:da:6d:c1:10:91:c8:b8:e1:80:
64:e0:85:c7:61:c3:0d:5e:7b:3d:bc:bd:ca:28:28:
6f:9a:b8:1c:9d:24:cc:f3:8d:61:4e:57:b8:ba:28:
1f:98:c2:63:ee:dd:c9:c7:f6:31:b7:46:83:ee:c2:
28:11:da:ec:78:fa:20:02:e7:c5:b1:1f:6c:a5:45:
77:a6:d6:26:44:ef:1c:ed:cd:ca:ed:ee:ad:ad:47:
4d:2f:5c:5b:78:26:47:dc:01:0d:72:04:ae:98:23:
8b:83:23:ae:3f:ee:8b:62:34:a5:6b:db:9b:a8:46:
b8:f9:08:e6:ea:a8:0d:82:dc:89:cc:6b:57:12:db:
0f:da:c3:01:7c:8b:f7:16:48:8f:bf:52:15:60:ce:
f7:ca:43:d9:b1:e4:f4:b2:d0:62:19:13:a2:04:97:
ba:49:4f:a1:8c:ae:63:b5:cd:f4:49:0a:71:a0:fb:
8a:0c:9c:fa:1d:22:8d:25:2d:ce:bb:9f:a7:96:1e:
a1:36:0d:f8:b2:44:32:c7:72:08:e5:84:ed:79:31:
8b:0e:02:b3:49:68:ef:17:ca:35:06:25:9b:26:13:
2d:19:72:3a:e0:80:c5:5b:98:31:fc:0d:d0:98:f6:
29:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DA:80:CA:30:75:22:49:77:FC:8E:FF:D7:D1:84:EE:2C:FB:EC:41
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xtqAyjB1Ikl3_I7_19GE7iz77EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.62.0/24
163.5.99.0/24
163.5.136.0/24
163.5.138.0/24
163.5.161.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0/24
163.5.226.0/24
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
52:2d:a0:77:68:46:96:e9:d3:8b:ab:f7:2b:d3:72:f8:93:2d:
f3:07:0e:9a:36:7f:04:bf:c1:a6:00:b4:7c:3b:b4:8b:3a:91:
fa:7b:7e:99:ad:ef:e0:b2:b9:e4:c3:72:65:d0:6c:27:a3:02:
f1:37:66:ac:d5:31:dc:2a:ad:c5:53:b4:4e:2b:85:94:8d:eb:
96:43:84:b9:b0:c3:e8:d1:82:7a:c4:73:59:7c:99:79:70:8e:
6e:aa:c4:d2:ed:d8:6b:52:9b:48:f1:e9:2d:e8:c8:64:7a:e6:
f0:a3:98:3e:3f:ef:97:91:70:1a:b4:37:f3:68:60:35:a2:ce:
e2:3f:b1:7c:3b:da:72:b3:e1:70:16:a8:5a:db:7f:d3:4d:bc:
e8:50:f4:44:55:10:ea:1b:fe:5d:97:dc:e5:2b:54:dd:b1:96:
01:49:eb:e6:1f:20:fc:c0:3e:84:21:de:63:cc:e6:d3:e6:99:
ce:b7:58:43:9a:e9:bd:be:84:7a:d1:17:4f:fa:0d:20:47:07:
10:6c:a8:02:43:47:54:68:e5:35:e3:ea:40:99:79:1f:91:b2:
d4:7d:9d:fc:24:05:a7:ab:ac:a5:05:6e:ad:3b:a9:e0:e2:57:
49:c5:ae:22:16:2a:b3:00:6c:9a:08:a3:d4:81:c7:42:f2:2f:
7d:dc:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 10:22:00 2023 by rpki-client on console-ams.rpki-client.org