Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l9fPUx-QFuRHduk1sLWcveZvMBU.roa
File: l9fPUx-QFuRHduk1sLWcveZvMBU.roa (raw, json)
Hash identifier: auU9Qn+Q+uW0RydWZrW4FmIR5bO+vzIBlMMKtmXct7w=
Subject key identifier: 97:D7:CF:53:1F:90:16:E4:47:76:E9:35:B0:B5:9C:BD:E6:6F:30:15
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185B547EE52338ECABC9E86C57780465302
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l9fPUx-QFuRHduk1sLWcveZvMBU.roa
Signing time: Sun 15 Jan 2023 11:54:28 +0000
ROA not before: Sun 15 Jan 2023 11:54:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:47:ee:52:33:8e:ca:bc:9e:86:c5:77:80:46:53:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 15 11:54:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d7cf531f9016e44776e935b0b59cbde66f3015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:6e:19:f4:b8:fd:d4:db:f8:20:41:b0:1a:
75:a0:a7:aa:3b:9a:44:c6:40:f3:16:61:44:13:36:
89:9b:8a:c5:c7:b6:68:18:c9:4a:a5:2c:40:06:d0:
21:65:45:c7:1a:06:2a:c1:f9:cd:40:c6:ad:18:06:
b2:7a:ee:0b:3b:5f:6c:eb:bd:93:0f:30:70:90:3b:
65:0f:9c:c0:ac:6c:97:ec:14:51:61:c8:a7:e1:e1:
87:1d:4a:01:42:53:8b:7c:52:0e:b0:65:76:fa:92:
d1:31:d3:97:c9:86:a6:c5:e5:14:c8:71:8d:83:96:
cc:b8:be:17:fc:fc:00:98:a8:3e:5c:0e:1d:2f:2e:
9f:41:0e:ce:79:f9:4b:9c:d0:ae:88:fe:bd:5d:1e:
97:68:5d:6f:46:8b:95:7c:97:93:bc:a8:cf:32:44:
58:7d:7b:27:2d:fc:91:5e:9a:fc:1a:83:f1:b3:10:
0c:87:7e:37:b0:f5:d1:97:60:3a:ce:8f:b9:bc:86:
da:1c:c9:7a:0f:4a:9c:91:26:e0:53:30:37:99:6d:
51:9b:4a:e5:f6:5a:3e:3a:1b:9b:d6:58:08:bc:dc:
2c:00:0c:5d:4c:6f:bb:cd:b5:3b:ee:77:eb:bc:0e:
c8:63:e5:79:f3:44:c6:80:e8:35:97:ef:ae:c1:5a:
d6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D7:CF:53:1F:90:16:E4:47:76:E9:35:B0:B5:9C:BD:E6:6F:30:15
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l9fPUx-QFuRHduk1sLWcveZvMBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.33.0-163.5.34.255
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.131.0/24
163.5.152.0/24
163.5.169.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d0:06:54:62:68:7c:7c:ef:59:f4:82:ef:4e:10:69:9a:32:
3a:39:f2:14:1a:c0:82:a2:5e:82:e7:37:3a:e9:0d:a0:dc:63:
41:75:18:05:71:b3:33:fb:59:af:21:9f:40:8c:af:ca:6b:ff:
55:00:bf:e6:c4:5d:c6:6b:ce:e3:28:1b:8c:af:d1:18:de:c8:
05:46:f4:30:d5:d5:26:34:4b:18:e9:bc:45:f1:a1:e7:97:80:
6e:7f:c9:ec:4c:e8:78:93:14:28:e6:89:68:49:f4:ac:c5:7c:
d3:65:fd:4f:bc:89:89:a8:fc:9f:bc:8e:e5:6e:2e:53:65:7b:
f6:a4:5e:3f:98:8a:cd:ff:1e:1d:cb:7c:75:3f:bd:39:5f:b1:
da:11:b9:be:96:dc:d9:d7:21:04:6b:8c:7c:a5:5a:2a:9c:27:
71:a2:b4:2d:16:db:3e:fd:a9:3f:22:df:8f:73:b3:14:17:cc:
9e:09:21:6d:e3:8b:bc:92:6e:6f:ef:96:a6:26:33:31:f6:de:
ac:4a:29:23:5a:48:f5:ec:77:5e:ca:be:b3:d2:15:ed:e0:94:
99:9f:b9:24:96:d7:20:b3:f1:02:65:fa:79:bb:a6:aa:d1:d1:
70:2f:32:95:fd:3e:2b:55:1d:36:c2:bc:25:57:06:9e:cc:7d:
24:92:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org