Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zrDTd5-mhgKRQTm3OAxQts8LlAc.roa
File: zrDTd5-mhgKRQTm3OAxQts8LlAc.roa (raw, json)
Hash identifier: HD8X40Qs6dMGT4cmXB/QmiyZKwuesY/mkd/aR24N+cE=
Subject key identifier: CE:B0:D3:77:9F:A6:86:02:91:41:39:B7:38:0C:50:B6:CF:0B:94:07
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01888D1DFA38B4AD9B320C6B60C80A14A151
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zrDTd5-mhgKRQTm3OAxQts8LlAc.roa
Signing time: Mon 05 Jun 2023 19:52:11 +0000
ROA not before: Mon 05 Jun 2023 19:52:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:1d:fa:38:b4:ad:9b:32:0c:6b:60:c8:0a:14:a1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 19:52:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceb0d3779fa68602914139b7380c50b6cf0b9407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:f5:66:8c:be:48:27:dd:90:2f:2b:99:a8:
bc:c5:b3:27:74:92:e9:99:5d:f3:49:ea:00:1f:56:
8f:57:b3:94:72:a8:a7:e5:e3:03:19:ac:44:a4:6a:
4c:b7:36:f1:12:c7:8d:40:cf:31:4f:bd:ab:ec:06:
98:e7:ff:fa:1a:e7:fc:ad:79:99:94:82:01:5c:a9:
31:46:77:51:54:73:d2:32:37:dc:bc:fe:5f:0a:10:
8e:54:ee:4f:53:8a:c4:8a:ca:89:6a:27:44:b4:07:
49:ea:72:64:d1:a1:56:89:fd:79:55:52:a6:a8:b2:
c0:a7:28:0f:d6:21:fa:e7:03:0c:d5:99:04:c2:d9:
3a:0a:d0:72:d7:ec:2a:c6:0c:5a:2c:20:9a:6a:4c:
62:79:15:cf:80:02:de:4d:6f:60:f7:20:9a:2f:d4:
91:b9:d5:4a:dc:fb:15:8a:15:7a:88:64:49:8d:9f:
12:39:70:91:b3:db:1f:fe:2b:8b:e4:21:cb:ce:24:
9d:68:a2:e2:82:e1:53:b5:cb:d2:d4:d7:af:6e:88:
5a:14:d2:ac:4c:1f:ff:de:55:2e:d5:b3:fc:ec:9c:
de:b8:a5:09:93:d9:c4:f3:54:37:5f:90:c1:43:b6:
97:26:61:82:21:4e:33:71:32:31:79:ee:64:e7:dd:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:D3:77:9F:A6:86:02:91:41:39:B7:38:0C:50:B6:CF:0B:94:07
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zrDTd5-mhgKRQTm3OAxQts8LlAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.105.0-163.5.106.255
163.5.159.0/24
163.5.168.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3b:5e:cf:91:b5:e7:1c:47:19:8b:78:50:69:e3:79:f6:18:
b7:8c:4d:7d:b2:43:92:47:a0:bf:4d:8b:31:93:ea:e9:84:18:
d1:06:55:a2:a4:78:da:44:43:af:71:b3:7d:49:bd:32:a7:29:
dd:ee:bb:ec:40:79:76:b5:a3:28:0f:1b:47:1b:28:e6:d1:93:
e6:27:74:8b:bc:df:08:c1:aa:40:92:e4:ef:aa:93:f6:af:91:
e1:f1:63:44:97:0b:c9:b4:ef:12:67:20:62:cf:32:0e:6e:98:
f7:36:75:d3:39:b4:0d:d5:94:36:7e:75:a5:63:43:86:c6:ce:
95:21:6d:6f:fc:92:eb:71:3f:66:7a:27:fb:5e:a2:97:c6:e1:
7e:ee:50:70:dc:a8:5f:f5:c5:7f:5f:7c:8d:16:1f:17:22:a6:
5b:bb:8a:e5:1f:b2:a3:e0:ec:e3:a3:42:f1:6a:ba:b6:99:5f:
a0:ef:dc:6a:bd:e3:3d:10:90:b2:04:9f:f5:04:e0:cb:4f:6f:
d5:1b:64:6e:01:05:6a:4e:44:5b:dc:57:08:99:ad:0d:a5:ca:
94:3c:f5:a6:ec:39:78:d7:db:b3:7f:92:73:e1:2a:fe:bb:9d:
b7:a2:98:a2:3a:4a:ec:ed:c8:92:61:0c:4c:95:65:7c:4c:a2:
b1:84:ef:6a
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYiNHfo4tK2bMgxrYMgKFKFRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjA1MTk1MjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWIwZDM3NzlmYTY4NjAyOTE0MTM5YjczODBjNTBiNmNmMGI5NDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobH1Zoy+SCfdkC8rmai8xbMndJLp
mV3zSeoAH1aPV7OUcqin5eMDGaxEpGpMtzbxEseNQM8xT72r7AaY5//6Guf8rXmZ
lIIBXKkxRndRVHPSMjfcvP5fChCOVO5PU4rEisqJaidEtAdJ6nJk0aFWif15VVKm
qLLApygP1iH65wMM1ZkEwtk6CtBy1+wqxgxaLCCaakxieRXPgALeTW9g9yCaL9SR
udVK3PsVihV6iGRJjZ8SOXCRs9sf/iuL5CHLziSdaKLiguFTtcvS1NevbohaFNKs
TB//3lUu1bP87JzeuKUJk9nE81Q3X5DBQ7aXJmGCIU4zcTIxee5k590xuwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFM6w03efpoYCkUE5tzgMULbPC5QHMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvenJEVGQ1LW1oZ0tSUVRtM09BeFF0czhMbEFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAowUgMAwD
BACjBWkDBACjBWoDBACjBZ8DBACjBagDBACjBfIwDQYJKoZIhvcNAQELBQADggEB
AIs7Xs+RteccRxmLeFBp43n2GLeMTX2yQ5JHoL9NizGT6umEGNEGVaKkeNpEQ69x
s31JvTKnKd3uu+xAeXa1oygPG0cbKObRk+YndIu83wjBqkCS5O+qk/avkeHxY0SX
C8m07xJnIGLPMg5umPc2ddM5tA3VlDZ+daVjQ4bGzpUhbW/8kutxP2Z6J/teopfG
4X7uUHDcqF/1xX9ffI0WHxciplu7iuUfsqPg7OOjQvFquraZX6Dv3Gq94z0QkLIE
n/UE4MtPb9UbZG4BBWpORFvcVwiZrQ2lypQ89absOXjX27N/knPhKv67nbeimKI6
SuztyJJhDEyVZXxMorGE72o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org