Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TR2IJ30EtIjDiacSVw-2hsQgKYk.roa
File: TR2IJ30EtIjDiacSVw-2hsQgKYk.roa (raw, json)
Hash identifier: ciMzUgVz9lCPBRhZOwwSHgW0ZPlIMOJ4BuqT9cDEdIU=
Subject key identifier: 4D:1D:88:27:7D:04:B4:88:C3:89:A7:12:57:0F:B6:86:C4:20:29:89
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01876FADBC1BC685E94054825DCD49876FC9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TR2IJ30EtIjDiacSVw-2hsQgKYk.roa
Signing time: Tue 11 Apr 2023 09:37:49 +0000
ROA not before: Tue 11 Apr 2023 09:37:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 163.5.70.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:ad:bc:1b:c6:85:e9:40:54:82:5d:cd:49:87:6f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 11 09:37:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d1d88277d04b488c389a712570fb686c4202989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:99:d3:ba:0e:9e:20:fc:8d:11:5d:ee:0e:
0b:81:4b:81:fc:cf:2f:74:41:3b:70:ac:bd:b6:a2:
c8:f0:b9:b5:b4:25:63:16:ea:e7:c1:8e:2a:32:cd:
33:44:91:1b:61:aa:37:80:74:10:d6:01:f0:ae:11:
a6:14:5d:67:f0:e5:7e:67:fe:07:9d:4a:2f:12:a0:
c1:01:97:68:a4:f4:93:f1:12:a9:36:dd:d8:45:69:
41:f4:7b:04:5b:7b:c1:c6:47:dd:04:5a:ba:aa:68:
4c:e8:b9:32:96:09:d6:3b:2b:79:9c:62:55:b0:bf:
fa:ad:c3:5b:0f:77:c1:a7:04:8c:d7:5e:9c:86:ee:
51:41:89:63:b8:ea:55:c7:83:0f:d1:8b:fc:c9:0f:
e1:01:12:94:9d:1d:82:5b:6c:fd:50:54:61:19:bc:
d4:b8:41:b0:47:3c:c4:4e:b1:3b:0d:72:fc:24:bb:
56:00:ca:7b:6a:ea:05:86:33:a6:18:9b:b4:18:7f:
39:3e:12:86:c0:f5:27:ae:84:71:be:2d:dc:a2:8c:
f8:cc:9d:0e:fb:19:07:3f:b6:4c:54:af:5f:e2:9b:
e9:16:3a:a5:62:98:a7:88:03:e7:05:45:0b:aa:4d:
29:ec:75:f3:78:de:6a:38:dc:1e:83:a3:5d:c2:3b:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1D:88:27:7D:04:B4:88:C3:89:A7:12:57:0F:B6:86:C4:20:29:89
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TR2IJ30EtIjDiacSVw-2hsQgKYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0/24
163.5.63.0/24
163.5.70.0/24
163.5.72.0/24
163.5.77.0-163.5.78.255
163.5.88.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:c2:98:c5:1a:da:cc:a3:d0:91:28:ed:28:42:8c:ce:36:d9:
67:18:48:2d:45:1b:91:a7:7b:e5:46:30:6d:7e:67:42:0d:71:
47:a3:f4:a4:eb:3b:f9:42:7a:48:24:df:22:c1:e4:76:0b:eb:
71:1b:ef:53:b8:74:31:57:30:b8:c1:01:0c:83:c1:2b:ea:2f:
b6:2e:04:67:17:b7:07:02:d9:19:ae:11:9e:54:ae:2a:ce:2f:
c2:15:b5:d0:72:71:eb:33:a2:f4:b7:cc:57:e6:ba:49:6a:82:
8f:45:6e:9e:90:07:52:4d:6e:fa:14:52:78:1a:c2:bf:43:e0:
08:d7:60:a2:4c:ec:b8:23:e5:76:df:1b:b0:43:04:ee:eb:84:
0d:fd:d5:e6:01:6d:ee:cc:a2:07:8b:bc:8f:8d:6e:9b:82:e1:
47:ad:82:54:65:06:51:2e:06:3e:a7:9f:ec:ee:16:e3:39:b6:
0f:89:01:5e:5f:4a:42:8d:27:af:12:62:37:b6:65:0a:c0:8c:
96:99:95:68:8c:b4:88:e5:e0:e8:64:ed:f8:90:42:5f:83:07:
53:52:2a:d2:2b:fc:84:dd:b7:01:1f:52:88:ff:46:99:e2:04:
60:4b:38:58:96:f4:41:e8:2f:b1:4b:3f:ba:c8:7b:cf:9a:4a:
f3:2d:37:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org