Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/88JXEyHUdQxynb77kZyMKIlQVBc.roa
File: 88JXEyHUdQxynb77kZyMKIlQVBc.roa (raw, json)
Hash identifier: ukEVLf0WlKvYcjd1Fy1cv7pK0bHZpHqUdbB0zb3Ijl8=
Subject key identifier: F3:C2:57:13:21:D4:75:0C:72:9D:BE:FB:91:9C:8C:28:89:50:54:17
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01887DC8643147AF053CF5CFCF6362BBAAF3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/88JXEyHUdQxynb77kZyMKIlQVBc.roa
Signing time: Fri 02 Jun 2023 20:24:24 +0000
ROA not before: Fri 02 Jun 2023 20:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 163.5.70.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:c8:64:31:47:af:05:3c:f5:cf:cf:63:62:bb:aa:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 2 20:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3c2571321d4750c729dbefb919c8c2889505417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ea:7b:9e:d9:f7:38:83:5c:ad:79:d1:00:60:
d7:aa:49:54:41:cc:01:18:fc:aa:1b:08:0d:8e:6e:
42:89:51:23:83:ec:ec:e4:c9:6b:ac:44:8a:63:4b:
78:fb:63:30:c3:d0:02:be:d8:d6:47:b0:8b:70:bf:
9f:4b:4b:f2:0c:b6:32:4b:e4:ae:84:31:88:d6:ad:
37:db:ab:d8:0f:63:52:de:5e:c9:a3:e4:d4:d0:b1:
00:b6:90:52:8b:76:42:f1:1a:9a:be:6e:ad:48:37:
50:09:77:10:2c:5d:5c:fb:99:78:c4:2a:14:22:dd:
2b:3d:9d:52:83:37:7f:a5:b9:b8:57:e3:f3:68:12:
95:38:21:2b:15:26:e6:b1:36:ff:e9:b1:5a:31:4b:
e4:0a:9e:13:5f:2e:62:49:db:7b:ac:40:8c:0c:a3:
93:ad:f7:42:1d:15:5a:87:a2:8f:0e:9c:4e:75:2b:
bb:b7:c9:be:cf:db:e4:27:d5:c3:e9:f2:41:28:27:
e6:aa:0e:ef:04:6d:ad:81:6d:71:bb:02:01:dc:21:
66:98:2a:a5:e1:84:18:25:82:a8:5f:5f:88:c0:d3:
be:d8:69:ab:73:82:98:be:cd:ca:37:c7:3a:34:09:
be:b3:c4:4c:1f:23:05:5e:09:f5:85:85:16:fe:4b:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C2:57:13:21:D4:75:0C:72:9D:BE:FB:91:9C:8C:28:89:50:54:17
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/88JXEyHUdQxynb77kZyMKIlQVBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.63.0/24
163.5.70.0/24
163.5.72.0/24
163.5.76.0-163.5.78.255
163.5.89.0/24
Signature Algorithm: sha256WithRSAEncryption
51:98:4f:00:64:2d:c3:f5:8d:41:73:43:90:22:ee:3f:de:8e:
b3:18:77:b5:8e:fa:13:41:93:32:67:3d:24:2a:73:ad:30:4d:
65:c2:a1:de:23:b2:19:54:a5:33:0e:ce:75:78:be:89:ed:f7:
e7:d9:e6:ab:55:f5:9c:60:ca:11:5b:f4:12:d8:f2:62:36:c7:
53:8f:9e:e2:2f:fe:78:8d:1b:c4:11:a2:88:f3:e4:8f:eb:1f:
58:75:8a:46:43:34:91:e1:81:db:2d:c9:3c:f4:d7:20:c2:42:
74:7f:b6:ad:60:c6:cd:8a:8b:3e:b8:e6:be:56:af:b6:c0:9a:
57:31:5d:f4:b6:c3:8a:ca:9e:72:57:ad:d1:ee:7d:9b:2d:bd:
6f:27:23:7c:13:5f:2a:81:7b:49:85:51:83:7e:c7:7b:34:bc:
3b:70:50:28:67:70:5b:07:0f:49:d5:0d:cb:ce:a2:89:63:64:
cd:6f:b7:de:6f:3a:b8:b0:c0:a3:45:f1:85:69:ab:70:1c:18:
bb:42:5a:00:4e:d0:54:49:a1:6f:de:46:cc:ec:43:4d:21:54:
05:ce:f1:99:17:70:2e:47:9c:a2:58:49:22:75:19:c5:8b:06:
f0:d2:1e:5b:1d:56:9c:2d:cb:25:ef:3a:b7:32:09:3b:4a:54:
e3:d7:0f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org