Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8sII7-vnwASwI5YXfpXiNS3_xrM.roa
File: 8sII7-vnwASwI5YXfpXiNS3_xrM.roa (raw, json)
Hash identifier: THvOSX4Y32vYJTdqRxbtXaHGXM8Mmcgwn9g7RajbmC4=
Subject key identifier: F2:C2:08:EF:EB:E7:C0:04:B0:23:96:17:7E:95:E2:35:2D:FF:C6:B3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189D4F256E94B6B7F3729FE31E32410BC18
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8sII7-vnwASwI5YXfpXiNS3_xrM.roa
Signing time: Tue 08 Aug 2023 11:39:58 +0000
ROA not before: Tue 08 Aug 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:f2:56:e9:4b:6b:7f:37:29:fe:31:e3:24:10:bc:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2c208efebe7c004b02396177e95e2352dffc6b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:c2:db:ae:c3:b9:d4:5b:d0:72:60:f2:b7:
4f:94:29:06:08:54:fc:72:1c:5c:b1:b6:91:5b:02:
c7:b1:af:9f:03:d7:03:70:9f:e6:47:37:58:4f:eb:
c6:25:44:6d:88:46:f5:ee:2a:d9:c8:ab:68:63:1c:
53:17:ff:a7:6e:9f:c3:ca:16:85:28:03:1e:6f:35:
2a:56:5b:3a:89:63:7a:03:c2:4c:4e:ac:4a:1f:bc:
d8:f3:06:04:15:13:01:69:36:2d:cc:a2:c6:7f:35:
06:84:16:63:d8:62:9f:1d:35:a3:07:69:26:4d:ec:
86:37:bd:bd:e2:19:28:33:f0:5d:66:07:05:d5:e7:
dd:17:15:f5:ac:dd:3f:46:5f:35:ba:28:14:8e:76:
d7:0c:d8:30:23:44:b9:da:76:d2:18:c9:77:5b:b1:
92:39:db:92:95:a2:c0:24:36:bb:cc:24:d9:5f:4b:
91:5d:8b:e7:2e:2c:39:ff:ba:64:0e:2f:79:f1:85:
e4:0d:a6:75:92:5b:0a:22:e6:50:1c:d6:46:2b:b7:
88:e4:94:c0:b4:c6:b0:49:20:8d:f8:b0:30:73:9a:
14:8c:c5:02:84:07:5d:0c:06:ee:1e:01:fe:1a:2e:
bd:9d:53:f9:83:b5:76:03:88:33:e5:18:bb:0b:f6:
b6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C2:08:EF:EB:E7:C0:04:B0:23:96:17:7E:95:E2:35:2D:FF:C6:B3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8sII7-vnwASwI5YXfpXiNS3_xrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/23
163.5.116.0/23
163.5.119.0/24
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
5d:2d:a1:5d:07:81:d8:7d:ab:66:ff:ef:a6:a1:b7:98:b5:59:
8a:d0:38:65:28:fb:57:71:67:e7:8d:eb:d6:19:52:7f:6e:38:
b4:c9:dd:ca:a5:61:28:d8:9f:32:6b:84:d6:3b:08:61:02:33:
a7:30:48:eb:54:ee:24:23:13:ed:71:bc:ba:5a:cb:7d:43:27:
be:43:a0:9f:81:be:1a:03:57:78:59:2c:d8:0b:eb:3c:04:4a:
4d:51:fc:e5:be:09:a2:f6:38:8c:ef:a6:5d:ea:c7:e4:75:e5:
fe:c9:cd:16:97:a3:e6:d2:74:80:b2:bf:ee:ad:28:38:27:4d:
85:d2:6b:3b:8d:e6:eb:5c:79:8c:e8:a5:45:73:16:d4:e9:5e:
03:37:0e:6f:6d:5e:c9:86:9f:69:e5:a1:78:0d:c8:4f:fd:d5:
80:fc:b4:1e:4d:17:88:f2:31:64:95:18:f4:4c:27:74:10:ca:
83:1a:ea:71:de:0f:9d:9d:5b:1f:93:21:de:b2:f3:33:56:d0:
31:4d:88:db:78:8a:fa:5f:1e:99:d6:5d:59:ee:76:0f:af:e8:
c7:77:a6:f0:e0:3a:df:29:3b:c2:1a:f0:75:ec:68:4b:81:17:
f6:6a:91:24:d7:3e:bd:a5:b6:b2:0e:83:c1:db:42:f2:7c:4f:
06:61:ea:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 22:20:02 2023 by rpki-client on console-fra.rpki-client.org