Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WIeLu618xydQ2JHcIZyCKyUaQ0c.roa
File: WIeLu618xydQ2JHcIZyCKyUaQ0c.roa (raw, json)
Hash identifier: q/e9j1mBOyMBgqpp1MBjI7Ai8EibW9m2PAyfLgilxsg=
Subject key identifier: 58:87:8B:BB:AD:7C:C7:27:50:D8:91:DC:21:9C:82:2B:25:1A:43:47
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042BF8288A98B6037C210B5BA170887
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WIeLu618xydQ2JHcIZyCKyUaQ0c.roa
Signing time: Mon 02 Jan 2023 02:15:00 +0000
ROA not before: Mon 02 Jan 2023 02:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 163.5.70.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:bf:82:88:a9:8b:60:37:c2:10:b5:ba:17:08:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58878bbbad7cc72750d891dc219c822b251a4347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fb:93:1e:96:a7:12:d2:22:e9:9d:ed:09:5e:
7a:bb:76:df:f5:af:c5:0c:49:39:52:dc:2f:2b:a3:
cf:fe:ea:d6:4a:57:5a:99:3c:22:7c:ad:60:b9:d2:
6d:d8:c7:f2:e8:33:9f:4f:33:9b:28:6b:83:52:6c:
43:11:43:14:67:93:54:12:e3:c2:35:17:f1:66:20:
a6:21:21:cf:84:d4:33:1d:00:84:4b:06:dc:b1:cd:
28:b8:3b:dd:e5:41:ab:35:15:aa:33:75:77:24:82:
20:b4:55:5e:fe:83:36:fe:35:1f:ee:fe:75:1d:ec:
65:a8:0b:50:3e:e4:c3:1f:a6:18:11:be:e0:97:86:
38:f2:f8:93:1c:22:64:c0:15:88:9a:ce:9e:a5:91:
76:2c:f7:5c:35:c7:4a:b5:47:9b:63:1e:bb:37:7e:
27:85:8e:e3:58:09:c9:ab:20:c8:b9:52:89:33:80:
58:22:85:6d:76:84:82:bd:b0:45:10:8c:41:55:e1:
43:67:26:2a:d7:8f:ca:87:c9:d6:aa:36:61:95:2b:
cc:6a:dd:49:b2:9b:05:84:f6:1d:11:dd:ad:4f:ee:
65:03:e9:b4:46:dc:4c:22:fe:a1:b4:f6:76:56:ec:
67:88:d9:de:57:e5:be:8a:2d:73:ad:da:d1:b6:d7:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:87:8B:BB:AD:7C:C7:27:50:D8:91:DC:21:9C:82:2B:25:1A:43:47
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WIeLu618xydQ2JHcIZyCKyUaQ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.70.0/24
163.5.72.0/24
163.5.77.0-163.5.78.255
Signature Algorithm: sha256WithRSAEncryption
88:81:de:6f:56:e2:de:1d:3d:4e:df:45:c2:b0:06:d9:ca:31:
de:85:bb:b1:67:74:59:aa:ff:c0:fb:78:71:57:45:d6:b1:80:
64:09:c8:1d:0c:0a:c0:3a:1e:a5:c6:af:9c:1c:36:f8:a1:72:
fc:55:18:7f:43:a8:84:dc:6f:37:4a:b7:36:29:a2:58:51:ca:
ec:64:72:f0:cf:2a:ea:16:e4:8f:2c:69:ea:d2:4f:d6:6f:35:
16:fe:87:b0:ae:56:ea:3f:d0:03:80:86:92:77:13:f0:9f:d7:
6e:1d:13:dc:14:2d:8f:68:8c:a7:1c:33:a5:53:5c:d7:48:89:
8e:6a:48:dd:03:55:31:a5:ac:17:78:a3:91:74:5b:e3:d1:fe:
93:af:07:5f:8e:9d:43:4f:f1:82:30:0b:32:24:36:ff:dc:97:
ba:ac:d5:01:77:33:27:c8:c5:50:4d:4c:7f:b0:58:14:7b:cd:
ae:6b:41:ea:a9:5e:ae:c0:7e:91:a0:44:11:54:57:07:4d:55:
eb:34:00:75:b8:e9:a8:aa:92:09:99:f3:60:0d:3f:46:51:9a:
83:4d:5e:52:1c:28:13:eb:3d:11:64:ee:11:a2:74:0b:b8:94:
62:c4:5e:7e:9b:ff:8c:ec:0c:fc:11:06:ef:ce:45:25:23:a4:
0e:e0:4d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org