Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OZXqRQ0bbyAnEDZuUUHobkpDg3o.roa
File: OZXqRQ0bbyAnEDZuUUHobkpDg3o.roa (raw, json)
Hash identifier: QixT+x7EAt99AuELYS+bx6H+6HNwMS9nsEyKiIzuaJk=
Subject key identifier: 39:95:EA:45:0D:1B:6F:20:27:10:36:6E:51:41:E8:6E:4A:43:83:7A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B381C639CD200AB27B35C8F5FAA9C88D8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OZXqRQ0bbyAnEDZuUUHobkpDg3o.roa
Signing time: Mon 16 Oct 2023 10:51:06 +0000
ROA not before: Mon 16 Oct 2023 10:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 163.5.193.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:1c:63:9c:d2:00:ab:27:b3:5c:8f:5f:aa:9c:88:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 16 10:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3995ea450d1b6f202710366e5141e86e4a43837a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7c:fc:16:b6:16:86:a6:b4:02:e1:cd:98:e9:
aa:53:cb:2d:8d:d0:9e:45:04:31:ed:60:5e:d1:0e:
42:46:4d:2e:7b:a6:db:45:73:e3:c7:16:82:b1:f3:
bb:01:af:6f:4b:38:ba:ac:ee:27:94:49:b7:97:96:
01:7a:89:d3:2b:79:75:f9:f4:88:6c:82:1e:3b:53:
66:ad:57:22:3d:6a:d5:94:2b:52:50:fb:63:01:b1:
b5:2e:cb:75:20:3e:14:8f:ca:7f:06:bf:0f:b9:64:
3a:ca:6d:7b:85:21:bf:4c:89:d2:85:4c:b2:ab:0d:
dc:4c:51:79:c6:31:da:b4:80:02:46:e3:f6:de:15:
94:59:8b:58:ca:0f:9b:8c:b8:87:f9:d5:6f:77:fa:
a4:e5:76:70:bb:8b:72:96:d3:47:06:77:dc:93:0a:
cf:d9:57:20:8b:40:2f:7c:aa:74:2c:b6:c2:5b:b0:
19:bc:69:ca:95:0f:cf:31:fe:27:b2:7b:66:16:5c:
53:fb:eb:fb:5c:91:3d:05:80:54:70:37:73:65:e6:
cc:6b:11:47:e1:41:e1:7a:d0:c7:26:25:f5:b9:32:
db:fe:a8:0b:c7:ee:9b:3f:ee:06:81:ec:ff:7a:6a:
71:fe:88:45:1b:9b:5c:a3:21:0f:7d:28:cd:96:ce:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:95:EA:45:0D:1B:6F:20:27:10:36:6E:51:41:E8:6E:4A:43:83:7A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OZXqRQ0bbyAnEDZuUUHobkpDg3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
163.5.154.0/24
163.5.193.0/24
163.5.214.0/24
Signature Algorithm: sha256WithRSAEncryption
52:85:82:24:35:7b:c1:1b:df:ce:38:66:2e:7e:d4:e3:38:fe:
98:33:9f:65:78:3b:cb:75:ab:a1:8d:ba:81:87:a4:9c:fb:a4:
6e:87:a1:ba:ad:10:0b:43:e0:63:25:fc:be:95:1f:c6:02:74:
9b:f9:26:20:47:78:06:12:01:91:f0:80:30:86:ea:44:bd:9c:
ab:c9:ce:91:ef:f4:99:4b:98:c8:1b:de:ca:c5:c1:36:e5:ed:
68:56:8d:26:6e:a1:bc:fd:64:82:df:f3:09:52:b1:02:83:22:
20:13:f5:61:15:9b:19:fc:c7:3c:5a:0a:87:f5:b7:bc:78:68:
4b:09:ec:84:04:84:90:63:af:bd:88:7a:56:fa:72:89:5d:89:
a4:21:2c:64:a3:3c:53:93:41:8b:e7:f9:07:43:9e:7c:71:67:
69:68:75:89:04:ff:a5:76:c2:88:d8:97:e0:50:5a:75:c3:58:
83:d1:ad:d8:ac:08:16:ad:03:ed:df:48:c0:72:4c:bc:e0:2c:
81:41:96:44:53:a7:54:86:da:6f:0c:f0:c2:da:d4:71:63:4a:
68:7e:37:da:d6:24:a6:8d:7c:54:26:82:50:a4:1e:d5:6b:b2:
eb:27:59:5f:d6:d3:12:66:8a:d5:16:ab:c6:cc:4e:9f:f6:03:
d7:2e:10:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 11:49:51 2023 by rpki-client on console-ams.rpki-client.org