Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_IlOVS96fY6jXPPWELrEwklEulI.roa
File: _IlOVS96fY6jXPPWELrEwklEulI.roa (raw, json)
Hash identifier: INXeE1Gflsivt6l7olWEQOr9Y5fqovPIYLcJGlNI2eQ=
Subject key identifier: FC:89:4E:55:2F:7A:7D:8E:A3:5C:F3:D6:10:BA:C4:C2:49:44:BA:52
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018632312A3CFE4E2DAABA9F04C29A08FB98
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_IlOVS96fY6jXPPWELrEwklEulI.roa
Signing time: Wed 08 Feb 2023 18:02:08 +0000
ROA not before: Wed 08 Feb 2023 18:02:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:31:2a:3c:fe:4e:2d:aa:ba:9f:04:c2:9a:08:fb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 8 18:02:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc894e552f7a7d8ea35cf3d610bac4c24944ba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:72:03:78:9b:b5:91:cf:9b:76:63:e2:cb:e8:
77:a6:15:fd:aa:17:7d:d7:fc:d0:d7:20:c5:51:f9:
a2:4d:ee:84:f1:99:36:8b:72:06:2f:39:8c:94:61:
a4:be:0e:99:31:9c:ae:2b:84:33:6a:21:31:6c:52:
c9:79:91:4c:3b:48:b7:1c:af:de:30:79:a6:c8:2d:
34:57:6a:47:4b:f4:69:4e:5a:a9:20:4b:61:3c:18:
a6:46:ce:9f:57:a0:0b:a1:d6:41:a0:cb:d5:28:5a:
ca:50:26:0e:d3:57:e9:b8:61:48:91:57:fe:c2:05:
81:28:aa:5f:35:48:d1:69:10:6a:c2:13:3f:bc:b2:
90:4a:cf:96:ab:bf:5a:49:5e:83:41:1f:5b:2a:51:
ee:b1:1e:95:20:94:75:2f:3f:a9:8b:8c:dd:36:61:
b8:1c:3a:dd:1c:16:65:86:3a:6b:5f:bd:7e:96:90:
3b:dd:0f:d6:0b:5c:f0:74:98:0d:79:8a:31:30:4b:
06:ff:be:00:89:d1:c5:3f:a7:b8:30:70:23:76:e3:
06:ab:86:24:d0:a7:f1:b6:b9:ff:10:4f:f9:20:cd:
59:ce:13:70:06:ea:d8:9c:fa:44:84:92:e0:41:06:
72:95:4c:23:15:91:33:27:e0:2c:4f:d0:b3:e6:8f:
94:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:4E:55:2F:7A:7D:8E:A3:5C:F3:D6:10:BA:C4:C2:49:44:BA:52
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_IlOVS96fY6jXPPWELrEwklEulI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.33.0-163.5.34.255
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.169.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:28:56:eb:6a:5d:5e:51:ea:18:62:8b:fc:5c:92:72:2f:da:
dc:66:d1:65:3d:3c:f0:a0:74:6b:e2:32:69:39:f6:49:c1:6c:
61:20:f2:cf:16:9f:d8:15:1e:18:86:4e:63:6c:51:34:17:e7:
5b:5e:93:64:47:cd:2b:ee:b9:88:a8:50:dd:08:9c:a2:48:62:
b2:cd:47:ff:df:ae:f4:cb:4b:fd:9f:1c:a2:bc:92:10:be:d7:
18:86:e8:aa:11:13:f0:4c:6d:70:e8:72:7c:a7:3c:60:86:49:
d3:bc:e3:04:1f:74:db:8f:84:ce:5c:4b:4e:a4:b9:b3:a6:c6:
b2:27:12:1c:83:62:f6:2e:09:b8:21:1d:58:96:bd:6a:37:99:
2a:e3:af:92:21:89:e2:df:61:16:04:e2:64:e5:d9:e1:53:dd:
46:62:e3:5f:0d:9b:e1:c0:00:8c:90:58:19:df:32:e7:ca:17:
00:56:d0:a6:20:41:12:6d:87:2f:f8:c8:94:e2:f0:40:38:1f:
ae:93:d6:b4:70:3e:87:1d:f1:7f:fe:fa:af:3b:18:8b:7c:2f:
b8:2f:6b:1c:90:78:66:56:9b:16:f3:fc:c0:c3:08:f6:d1:10:
e5:ad:44:03:eb:c2:31:d0:24:12:ca:e5:32:a2:da:9b:84:61:
30:2f:5f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org