Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3cegRNoYFCkM5jepJnvPoziiXqo.roa
File: 3cegRNoYFCkM5jepJnvPoziiXqo.roa (raw, json)
Hash identifier: xP6gAPGlpmUIC4piSOAZjHGtfkiYV/c1eNJLwTySHbs=
Subject key identifier: DD:C7:A0:44:DA:18:14:29:0C:E6:37:A9:26:7B:CF:A3:38:A2:5E:AA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B787948C445F1E49875FB80D1A80DDE88
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3cegRNoYFCkM5jepJnvPoziiXqo.roa
Signing time: Sat 28 Oct 2023 22:48:16 +0000
ROA not before: Sat 28 Oct 2023 22:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399486
IP address blocks: 163.5.210.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:79:48:c4:45:f1:e4:98:75:fb:80:d1:a8:0d:de:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 28 22:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddc7a044da1814290ce637a9267bcfa338a25eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:a2:21:fb:d1:6e:60:5e:32:01:5f:84:34:
09:47:fe:7a:8b:d5:51:f0:c0:f4:70:80:be:f5:bc:
2e:b9:65:46:af:91:93:ab:4d:b7:6b:6b:df:a9:6b:
19:c0:f5:e0:a0:fc:6c:ca:7b:f2:a1:35:4c:a9:a4:
bf:f9:50:e8:97:6e:2e:91:2f:df:74:ea:5e:e6:c1:
a0:ef:7d:ab:86:dd:b3:e0:01:ad:43:6b:af:19:a8:
12:fb:51:7f:a6:8e:c8:04:6a:bc:a4:ff:d0:76:43:
3c:6b:d9:e9:70:4f:2d:1b:3e:52:ca:56:5f:90:c5:
92:fe:da:c4:8d:e0:73:8d:3c:38:ca:c5:f9:58:d4:
02:e0:6d:4a:05:43:96:5f:43:ee:dd:74:68:fe:30:
12:e5:b3:90:37:9f:19:39:54:52:24:a5:38:40:7a:
8a:1c:25:db:4d:38:0b:56:54:7b:c0:a0:69:b2:d7:
22:07:31:37:f9:43:17:8f:21:89:b7:70:76:ed:ae:
6a:ad:04:d2:fe:58:09:02:27:9c:41:44:19:96:84:
4d:21:91:99:aa:a9:21:c1:49:4b:2a:21:5a:ee:9c:
68:21:d7:6d:c8:a5:2f:7b:4a:11:bd:e2:2d:af:c7:
34:f2:7a:68:04:b0:9b:1f:2e:9f:90:c0:43:a6:c5:
d5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:A0:44:DA:18:14:29:0C:E6:37:A9:26:7B:CF:A3:38:A2:5E:AA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3cegRNoYFCkM5jepJnvPoziiXqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.64.0/24
163.5.112.0/24
163.5.160.0/24
163.5.169.0/24
163.5.210.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d9:37:7c:98:30:02:2d:4a:17:ed:d9:68:9c:cb:2b:55:27:
84:df:22:34:a8:48:82:f9:da:2a:61:14:fa:3c:82:f5:82:00:
f1:ed:71:4e:49:22:d5:15:65:8a:2f:24:71:96:b5:4c:de:1d:
22:56:47:2e:a3:ba:3d:25:36:bb:41:a5:a1:46:8e:1e:03:dc:
3d:06:ad:a7:da:2a:44:34:9a:fe:26:12:cf:99:26:50:ff:76:
b2:ad:a1:69:b6:19:9e:64:a6:7a:44:8f:bb:17:94:eb:90:24:
29:fe:14:62:8a:56:38:e0:8a:2b:9a:e3:dd:e4:de:e6:c0:5f:
55:18:79:61:ea:8c:e2:7e:fc:82:9a:c4:de:6b:6b:8d:80:9a:
70:b1:e3:66:9a:72:9f:cf:d7:82:d6:6b:1e:6f:56:12:2f:e1:
72:9c:2c:7e:8e:b3:e6:9e:c0:8f:37:c7:52:c4:99:24:fa:cf:
0e:70:5d:6a:07:d1:e6:3e:10:81:ed:90:82:dd:75:2d:68:e9:
8f:89:b7:cb:99:74:4d:b2:a8:43:82:48:71:da:a5:5a:66:5c:
21:2f:c5:88:77:a9:02:3c:d2:ac:d5:84:34:4d:79:dd:90:46:
5a:f1:44:98:13:1a:cb:07:b7:22:91:fc:7f:73:46:25:bc:f1:
26:de:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:18 2024 by rpki-client on console-fra.rpki-client.org