Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zt3CVfzCvfD7LckLMYysFIf_oHI.roa
File: zt3CVfzCvfD7LckLMYysFIf_oHI.roa (raw, json)
Hash identifier: UKfHT69vIXkvpBjtlcxdqsqve7rnkRQgMWRNfVgNWA0=
Subject key identifier: CE:DD:C2:55:FC:C2:BD:F0:FB:2D:C9:0B:31:8C:AC:14:87:FF:A0:72
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01938D82F630EA5F21AA3B1B1BA66181FB06
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zt3CVfzCvfD7LckLMYysFIf_oHI.roa
Signing time: Tue 03 Dec 2024 17:13:10 +0000
ROA not before: Tue 03 Dec 2024 17:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 163.5.137.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:82:f6:30:ea:5f:21:aa:3b:1b:1b:a6:61:81:fb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 3 17:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceddc255fcc2bdf0fb2dc90b318cac1487ffa072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5e:cb:a7:c1:69:f0:5c:13:b4:2c:4a:12:9a:
68:25:1d:74:93:a1:d3:68:38:22:6b:aa:00:5d:5d:
66:b5:61:4e:77:c7:b6:f5:c0:f7:3c:8d:46:27:1b:
56:80:fc:d0:c4:8f:32:61:69:7e:ee:ec:d7:54:84:
97:1f:a6:6d:83:66:48:01:07:a8:ce:67:2b:bc:0b:
69:e1:f3:d7:0a:ba:d2:7e:2f:98:77:47:31:6c:ee:
2f:61:c3:79:f1:0a:f7:cd:17:13:3b:cb:35:c2:cc:
1f:8c:0e:9a:80:e0:96:7b:f4:f0:4f:f9:d6:eb:35:
17:ae:25:6d:19:97:44:71:a4:de:32:29:07:5e:1f:
c2:38:c8:6c:8e:02:6e:35:f7:5c:41:79:6e:c6:11:
a7:4e:7e:ca:91:54:d7:ed:69:26:55:f3:5c:04:2e:
eb:c4:b4:96:6c:cf:24:10:0b:9b:57:a6:f7:4b:ac:
88:0b:14:e6:7a:3d:f1:05:0d:4c:93:49:05:06:62:
7d:d6:29:17:c0:b6:f1:c3:84:62:35:1c:02:74:b7:
fb:ec:61:ec:a4:cd:2c:67:53:a6:d1:fc:31:2a:99:
23:54:b0:43:c7:32:34:f0:33:e3:54:76:20:5d:74:
cd:f8:44:c7:65:72:9b:7a:3f:f5:9b:b0:17:c6:28:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DD:C2:55:FC:C2:BD:F0:FB:2D:C9:0B:31:8C:AC:14:87:FF:A0:72
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zt3CVfzCvfD7LckLMYysFIf_oHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:7f:7f:cb:16:63:4b:21:5d:4d:17:65:01:ab:3e:c5:db:5a:
87:f9:33:fc:7a:1e:20:ca:ec:fe:b1:47:a0:53:b7:59:ee:30:
ff:22:af:31:ed:00:2a:db:c5:17:b7:93:19:71:40:19:21:7c:
9e:d7:b5:32:9c:69:ae:59:a0:9b:ce:ce:95:4f:ee:3f:7a:34:
80:6d:54:5a:63:81:ea:0f:e1:ed:b2:df:3c:41:d3:14:3b:60:
3a:2a:35:c8:8d:87:c6:6f:c6:b1:7f:3d:af:3e:5e:4a:e7:57:
10:fa:4f:5e:5e:28:db:1b:e9:d9:2a:87:0c:1d:99:e6:c7:d9:
67:8f:a0:e7:ae:bc:96:dd:75:9f:b4:d9:46:fe:26:30:36:a6:
8b:89:b9:1e:09:ef:1e:f0:5a:e4:b2:19:96:08:af:19:e7:bf:
36:97:91:29:bc:78:ee:a0:3b:6f:bf:33:93:15:a3:5a:5a:55:
13:81:6d:d1:bd:b6:8b:8e:e9:02:f7:01:ea:1d:25:a8:c6:e1:
ea:bf:50:a0:02:cf:f9:b8:99:99:e0:40:3a:22:95:ba:c2:a3:
0e:51:ad:56:f5:16:af:aa:14:14:67:6a:2d:3a:5f:9e:87:d3:
89:d5:36:e6:69:de:15:d6:ac:f9:0e:47:af:0c:15:d3:4f:65:
53:9d:07:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZONgvYw6l8hqjsbG6ZhgfsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMjAzMTcxMzEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWRkYzI1NWZjYzJiZGYwZmIyZGM5MGIzMThjYWMxNDg3ZmZhMDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg17Lp8Fp8FwTtCxKEppoJR10k6HT
aDgia6oAXV1mtWFOd8e29cD3PI1GJxtWgPzQxI8yYWl+7uzXVISXH6Ztg2ZIAQeo
zmcrvAtp4fPXCrrSfi+Yd0cxbO4vYcN58Qr3zRcTO8s1wswfjA6agOCWe/TwT/nW
6zUXriVtGZdEcaTeMikHXh/COMhsjgJuNfdcQXluxhGnTn7KkVTX7WkmVfNcBC7r
xLSWbM8kEAubV6b3S6yICxTmej3xBQ1Mk0kFBmJ91ikXwLbxw4RiNRwCdLf77GHs
pM0sZ1Om0fwxKpkjVLBDxzI08DPjVHYgXXTN+ETHZXKbej/1m7AXxihtTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM7dwlX8wr3w+y3JCzGMrBSH/6ByMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvenQzQ1ZmekN2ZkQ3TGNrTE1ZeXNGSWZfb0hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWJMA0G
CSqGSIb3DQEBCwUAA4IBAQC1f3/LFmNLIV1NF2UBqz7F21qH+TP8eh4gyuz+sUeg
U7dZ7jD/Iq8x7QAq28UXt5MZcUAZIXye17UynGmuWaCbzs6VT+4/ejSAbVRaY4Hq
D+Htst88QdMUO2A6KjXIjYfGb8axfz2vPl5K51cQ+k9eXijbG+nZKocMHZnmx9ln
j6DnrryW3XWftNlG/iYwNqaLibkeCe8e8FrkshmWCK8Z5782l5EpvHjuoDtvvzOT
FaNaWlUTgW3RvbaLjukC9wHqHSWoxuHqv1CgAs/5uJmZ4EA6IpW6wqMOUa1W9Rav
qhQUZ2otOl+eh9OJ1Tbmad4V1qz5DkevDBXTT2VTnQcM
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:46:21 2025 by rpki-client