Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lh9Lvu98QnRY0W9hwEVVL-exkss.roa
File: lh9Lvu98QnRY0W9hwEVVL-exkss.roa (raw, json)
Hash identifier: TJpk+9RsLfYmsjPn+n4dRzKSbCSqVn5yKg25rK/OPkg=
Subject key identifier: 96:1F:4B:BE:EF:7C:42:74:58:D1:6F:61:C0:45:55:2F:E7:B1:92:CB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187D175F642B03D5ED83684E1A21E4D8F4E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lh9Lvu98QnRY0W9hwEVVL-exkss.roa
Signing time: Sun 30 Apr 2023 09:19:41 +0000
ROA not before: Sun 30 Apr 2023 09:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:d1:75:f6:42:b0:3d:5e:d8:36:84:e1:a2:1e:4d:8f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 30 09:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=961f4bbeef7c427458d16f61c045552fe7b192cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:f5:54:29:96:93:6a:79:7d:fb:57:eb:b4:
74:83:6c:71:b7:45:40:c9:02:7d:06:44:4d:2d:ec:
22:d7:90:12:bd:af:82:ef:32:fa:f0:f5:c3:da:20:
6b:14:11:5b:97:ab:32:70:88:66:07:a3:ce:e5:d9:
8d:17:da:86:5b:ed:26:0d:b7:d4:d5:ad:e2:a3:13:
eb:ee:30:59:48:04:3d:80:bd:01:28:18:77:81:bb:
e5:da:9f:83:ce:d3:35:89:df:04:65:93:a5:66:7f:
8e:54:25:f8:13:2a:fc:8f:da:0e:ea:39:3a:65:1a:
09:61:74:42:be:5d:9d:dd:05:66:99:35:b4:49:7d:
c3:9d:73:19:e1:8e:f3:b3:55:10:26:54:91:14:c0:
67:89:c4:c8:c2:8e:0c:be:73:2a:27:6e:86:aa:cc:
99:91:f8:8d:3f:66:4e:bd:17:09:0f:9a:3d:96:52:
59:81:a0:6f:f8:90:67:a7:73:96:41:5d:c4:0e:f1:
ab:5a:81:6f:8f:f6:cb:12:cd:16:4b:8c:94:5c:39:
3a:89:13:d8:d3:6f:35:bd:54:eb:06:9c:e0:bb:86:
d6:5d:50:59:c0:4d:e4:86:3b:5c:64:7b:93:a4:49:
e6:2f:66:09:e6:7d:d6:cd:12:20:8c:cf:25:ef:13:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:4B:BE:EF:7C:42:74:58:D1:6F:61:C0:45:55:2F:E7:B1:92:CB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lh9Lvu98QnRY0W9hwEVVL-exkss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.60.0/24
163.5.71.0/24
163.5.93.0/24
163.5.101.0/24
163.5.108.0/24
163.5.116.0/24
163.5.134.0/24
163.5.189.0/24
163.5.192.0/24
163.5.228.0/23
163.5.238.0/24
Signature Algorithm: sha256WithRSAEncryption
58:5e:9a:ea:ac:b8:d0:8a:f7:39:25:63:f8:6b:50:89:03:39:
91:fb:15:ac:8e:b9:2b:57:38:53:e4:68:fc:2f:13:8d:4c:7b:
ae:ed:ac:b9:aa:73:b5:18:9e:77:f4:d8:8f:18:52:e4:5f:49:
39:8d:94:a5:55:47:5a:6e:e2:8f:04:d2:75:22:38:33:d6:2a:
1d:21:fd:72:0c:70:ec:5f:49:4e:ba:43:a2:4a:23:ad:0e:01:
ff:4c:33:63:d0:7d:09:9c:a8:69:0f:d0:70:36:a9:08:28:bb:
00:c2:2c:f2:73:7b:73:3e:5b:03:e5:15:9b:86:cc:36:69:0b:
8c:ba:2e:f7:08:f4:8f:38:cd:fd:1a:ee:6a:91:8c:92:ff:28:
c0:47:42:55:3b:47:60:37:17:f0:da:b6:1b:fc:de:71:c1:1d:
de:bb:1f:ba:de:a5:1d:26:11:74:2d:af:70:0b:7a:ab:2d:d7:
a3:4d:ef:17:5f:4c:84:3f:2e:30:86:f7:b5:84:82:b1:f5:5e:
f8:49:23:1d:12:09:0c:06:b8:a2:86:7b:7d:cb:3e:7e:35:d8:
1c:25:7d:3a:65:c3:3c:ce:90:a6:44:66:fe:bf:57:24:f7:ee:
f2:fa:01:1f:a7:b5:4d:96:85:9b:d8:71:28:6f:d6:d2:51:b1:
d7:36:ce:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org