Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2_3cdUThVguZEd-MSBs0wRG7mGI.roa
File: 2_3cdUThVguZEd-MSBs0wRG7mGI.roa (raw, json)
Hash identifier: BzAtGQGwztEkH1fRYxsE6OSyPutSg7SlNzl4y3r3AKg=
Subject key identifier: DB:FD:DC:75:44:E1:56:0B:99:11:DF:8C:48:1B:34:C1:11:BB:98:62
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42562A7299BF3A6A7E3B5C3560B9B02
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2_3cdUThVguZEd-MSBs0wRG7mGI.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.202.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:62:a7:29:9b:f3:a6:a7:e3:b5:c3:56:0b:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbfddc7544e1560b9911df8c481b34c111bb9862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:b5:d7:79:07:9a:9e:46:6e:ad:15:42:73:
54:c4:e6:a6:98:5d:25:c4:fc:9a:96:21:68:9e:23:
43:ee:82:10:22:6a:af:23:c4:d3:e9:2c:c7:fc:97:
af:e1:9c:32:6f:4e:c3:f1:57:c8:de:62:3b:07:fe:
53:2c:52:74:c8:d7:8d:06:80:89:19:6e:01:19:b9:
ca:e1:f9:d6:1e:9f:5c:e5:34:87:7f:3f:11:43:26:
fa:0e:db:02:74:4d:76:e8:51:f6:86:54:a8:fe:e0:
38:91:3d:05:51:30:0b:84:a7:e8:ae:53:c2:d2:08:
3e:ce:a2:74:c5:c4:20:b8:3f:27:79:64:9c:df:bd:
62:be:c6:68:81:44:97:0b:90:25:5c:df:75:83:c0:
56:08:d2:ff:1b:9c:af:cd:91:a2:4b:49:05:44:cb:
76:ee:fc:3b:f9:07:6f:14:6b:74:7e:1e:cd:90:2a:
ce:d0:4c:e3:72:2b:99:23:66:94:f7:cc:97:27:d4:
16:c4:71:8c:f9:71:25:e5:b6:5d:08:2c:82:e8:67:
97:d5:36:7c:f8:62:f7:fe:81:36:e1:54:3f:09:9e:
5a:19:b2:c1:26:91:1f:90:0a:b7:95:1b:c7:34:c7:
75:d3:47:06:62:7c:bd:87:36:68:2b:2c:11:55:58:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FD:DC:75:44:E1:56:0B:99:11:DF:8C:48:1B:34:C1:11:BB:98:62
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2_3cdUThVguZEd-MSBs0wRG7mGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.62.0/24
163.5.99.0/24
163.5.202.0/24
163.5.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1e:e0:7d:2c:7d:c8:36:3c:c5:66:54:f4:d8:1a:83:7f:d7:
4c:a0:64:5d:66:5b:28:0d:53:96:74:c1:22:8f:38:0d:52:5d:
8e:04:7d:63:91:8c:af:e0:1d:10:40:e7:72:81:13:e8:c4:8a:
c0:e2:c1:29:67:d7:0f:79:0c:6b:a7:b7:45:63:7a:58:8b:1f:
f1:27:80:82:22:e6:b8:9e:f4:05:86:44:ae:b4:8b:ab:1f:44:
cd:16:b2:89:ec:e7:1c:e9:4c:05:ab:54:51:8d:78:57:6d:d0:
4c:00:85:e3:ed:2d:e8:12:a4:25:53:e8:5d:10:f6:ce:4e:0b:
dd:c0:db:6e:a1:47:3f:49:cf:35:78:10:49:93:01:36:e1:28:
8d:44:85:e7:a3:e2:c8:49:53:51:0e:d1:ca:4b:56:f2:5a:89:
c1:10:a6:70:f2:90:58:eb:14:36:09:c8:41:0d:dc:0f:e7:aa:
a6:c6:73:db:83:75:6b:b9:24:4e:fc:17:92:25:e0:f7:fe:04:
e3:b6:2d:2c:3b:0c:f7:12:b1:5e:91:6d:4d:d9:ac:a6:86:ad:
bd:1c:1f:c3:3b:70:79:dc:80:eb:68:3e:58:ea:01:50:46:30:
f1:6b:1c:c6:41:a9:88:52:67:6b:23:0f:32:bc:00:d0:1d:41:
97:93:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:23:37 2024 by rpki-client on console-fra.rpki-client.org