Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TA8RTrVsCYMOFd1hIaBNEoldmNM.roa
File: TA8RTrVsCYMOFd1hIaBNEoldmNM.roa (raw, json)
Hash identifier: 4EZ24wPvJE7a5lgcd39yogDxc8/SPlOe51+lKJ9XFbg=
Subject key identifier: 4C:0F:11:4E:B5:6C:09:83:0E:15:DD:61:21:A0:4D:12:89:5D:98:D3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018867BFD4F8DBA5F96C50CF46A4F82D6CD7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TA8RTrVsCYMOFd1hIaBNEoldmNM.roa
Signing time: Mon 29 May 2023 13:43:25 +0000
ROA not before: Mon 29 May 2023 13:43:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:bf:d4:f8:db:a5:f9:6c:50:cf:46:a4:f8:2d:6c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 29 13:43:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c0f114eb56c09830e15dd6121a04d12895d98d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:d5:aa:65:be:a9:94:e9:ea:f8:82:a3:d1:
9f:47:61:4a:0e:1b:e8:a0:4e:b0:5f:38:e0:9b:d4:
3c:3a:c5:44:9d:46:04:59:f2:3f:7c:f6:44:ac:a0:
ef:d1:06:c6:bf:51:cc:de:94:76:5b:f3:ac:5a:1f:
64:6b:57:59:1f:83:4c:3b:5c:2d:3d:bd:c8:09:5d:
09:d0:da:1a:64:0d:09:b2:93:3e:53:c3:72:64:ba:
7f:db:0a:8c:01:8c:2a:9d:ed:83:e0:d6:46:86:9c:
ee:66:53:b9:ab:f0:dc:aa:d2:0c:b8:27:fe:13:7f:
62:1d:72:6c:9e:e9:f6:27:bd:7b:15:e9:e7:1f:6a:
94:24:35:f5:f6:ea:ab:36:62:41:67:94:78:28:fc:
30:4e:7b:a5:c0:fb:70:54:0f:78:32:90:72:be:d5:
24:a8:79:97:28:c7:95:89:41:2e:20:10:aa:ab:e2:
ed:37:22:2e:40:d3:67:57:4d:1a:37:c4:ca:d2:63:
f8:2b:8d:0e:7c:7b:4b:9d:7a:7a:c7:de:fd:45:1a:
26:66:fa:d7:9d:e3:49:16:07:b4:e5:96:fe:45:48:
b3:0f:6e:38:0e:40:b1:10:3b:da:3f:26:fe:bc:54:
5d:38:f9:26:c7:d2:36:1d:d6:8f:a2:1f:f1:b0:55:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0F:11:4E:B5:6C:09:83:0E:15:DD:61:21:A0:4D:12:89:5D:98:D3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TA8RTrVsCYMOFd1hIaBNEoldmNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.71.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/23
163.5.116.0/24
163.5.131.0/24
163.5.134.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0/24
163.5.228.0/23
163.5.238.0/24
163.5.240.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:73:54:26:e1:c4:95:65:62:a5:58:7a:92:d2:1b:9c:58:f6:
a3:5c:78:69:27:3e:b8:7a:f6:3a:42:7e:cf:c6:a8:bf:5e:03:
da:7e:55:b4:ab:4a:e9:96:f2:cf:02:0a:10:d4:04:22:13:0e:
a2:0f:78:43:6e:e2:ce:a8:15:ba:48:0a:37:44:e5:df:91:8e:
97:7f:c7:97:21:fb:79:23:fc:34:af:f4:b9:08:a0:9f:27:02:
50:6e:30:2f:bd:98:ec:c0:67:c5:47:33:0b:12:88:96:25:14:
e7:71:05:34:71:f2:cd:1b:43:a0:86:d6:27:52:96:80:e6:67:
fc:08:33:ff:da:c0:3b:a1:cd:d3:64:09:92:d5:63:93:f2:49:
63:55:dd:a0:a3:da:b1:e5:35:64:29:b0:c6:9d:bf:ab:05:0b:
06:0f:5b:6d:d7:cf:4f:e1:e8:42:c5:c6:75:5b:02:a5:23:9f:
cf:65:94:ba:d2:72:bc:60:c2:1a:06:ab:b0:0d:f9:63:2a:f7:
72:93:83:78:ff:fe:bd:56:f6:3c:74:c7:e2:4d:6a:6d:48:de:
ff:2b:c7:34:d5:9d:99:c2:ac:25:25:72:f9:4b:a3:90:0f:25:
14:32:ae:bb:84:e0:1f:4d:a2:19:c5:16:e4:3c:de:56:ce:6f:
27:11:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org