Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0geB8Ntrhwba6YXw9EP93_wfCrs.roa
File: 0geB8Ntrhwba6YXw9EP93_wfCrs.roa (raw, json)
Hash identifier: qR/CFCAs89sZPq+dEGh1kF8whGF/fgFQ5baYXznJQc0=
Subject key identifier: D2:07:81:F0:DB:6B:87:06:DA:E9:85:F0:F4:43:FD:DF:FC:1F:0A:BB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189CA3A81165129F746EF1FEAC93A7AA06E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0geB8Ntrhwba6YXw9EP93_wfCrs.roa
Signing time: Sun 06 Aug 2023 09:42:59 +0000
ROA not before: Sun 06 Aug 2023 09:42:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:3a:81:16:51:29:f7:46:ef:1f:ea:c9:3a:7a:a0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 09:42:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d20781f0db6b8706dae985f0f443fddffc1f0abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3c:4f:1a:05:3a:6c:83:5d:cf:7b:7e:ff:aa:
74:8e:f5:cf:0f:ef:d8:60:cb:bc:15:35:01:7c:d0:
2c:23:13:33:78:99:84:12:c6:8f:b2:2a:89:f4:87:
bd:8b:bb:6a:5a:c1:f6:8c:7c:5d:85:9d:f5:39:6e:
28:9c:00:9a:5a:7a:4f:3d:49:b6:5d:45:c4:ee:57:
5a:ed:f1:27:c2:9e:39:23:0e:19:ce:73:72:20:71:
05:16:ac:ab:fe:00:b9:da:a0:5e:d3:ca:7e:b2:4c:
d7:90:f4:2a:19:46:92:1b:5e:4d:71:aa:14:4e:ac:
18:e8:9c:f1:a0:d4:47:5c:6d:46:78:e1:c0:6c:8f:
7e:11:d1:46:de:45:c6:6f:ed:74:61:c2:b2:58:73:
f9:14:81:f4:1c:fe:02:06:22:ec:f2:a5:3a:9e:e4:
0d:6c:a6:d7:72:f4:94:0f:2c:7b:b1:26:98:4a:9f:
81:e8:8b:51:47:ad:95:12:e4:38:cf:07:f2:cd:a6:
0e:9b:d7:a2:5b:1b:89:cc:b5:d3:cb:0f:96:2d:ab:
b3:c1:81:08:8a:ba:bf:54:53:64:e0:58:64:d4:a1:
17:c9:fb:fb:45:fd:88:99:1d:e7:56:6f:13:26:91:
49:a7:d9:9a:ae:32:d2:ff:71:23:d6:cf:ae:b9:aa:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:81:F0:DB:6B:87:06:DA:E9:85:F0:F4:43:FD:DF:FC:1F:0A:BB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0geB8Ntrhwba6YXw9EP93_wfCrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/23
163.5.116.0/23
163.5.119.0/24
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.226.255
163.5.228.0/23
163.5.240.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3e:39:bf:b2:c1:fa:c6:78:27:f4:d5:2d:90:70:63:97:6b:
b2:50:63:0b:cb:98:ef:5d:0c:29:a5:11:f4:6f:4f:cf:fa:a3:
c7:fd:ad:4d:4c:2f:0b:e0:bf:f5:d8:9d:4b:c0:b9:96:ff:76:
ba:7c:50:44:3e:8d:27:c7:46:7a:e1:cb:1a:de:ad:6e:f7:3b:
94:dc:d4:55:dd:53:5e:90:33:a0:b3:8d:a4:ef:78:2b:d2:42:
5a:ef:e1:0e:9f:14:30:73:3d:b5:eb:a0:0e:e3:03:ce:fe:08:
19:e1:02:6b:56:ab:6d:22:86:3a:0a:4f:b5:a1:31:60:c4:5a:
c1:d1:f2:f8:16:c1:82:e5:11:4a:5a:82:38:f4:a2:23:a6:28:
9f:af:47:d2:b5:d8:64:64:ce:f1:34:9b:98:f3:f2:6a:a1:2a:
d1:57:8a:df:34:8c:b5:e6:da:03:9a:6b:a7:1b:54:a6:b8:8e:
0e:19:c0:1c:5b:53:f6:63:bb:a3:66:f1:f4:a5:19:61:da:1a:
28:bc:4d:6a:9d:05:12:5c:ec:b9:c6:44:de:b2:15:6d:27:59:
4c:3b:61:cf:af:c2:c3:f0:6a:e4:ba:5f:99:bb:e7:b7:ca:b9:
21:59:64:70:9f:27:00:65:88:ae:68:a8:2f:8d:4b:ca:28:6c:
71:5f:50:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:14:24 2023 by rpki-client on console-ams.rpki-client.org