Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8-rIc_UbyOxYUE0iSWufEgOVopE.roa
File: 8-rIc_UbyOxYUE0iSWufEgOVopE.roa (raw, json)
Hash identifier: IzIIowXTk53I4PKzowri1a65PjjiRMIwPEIhJO5zOO8=
Subject key identifier: F3:EA:C8:73:F5:1B:C8:EC:58:50:4D:22:49:6B:9F:12:03:95:A2:91
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01888C6D49DAA7D78D267D29A5A3DEB2D139
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8-rIc_UbyOxYUE0iSWufEgOVopE.roa
Signing time: Mon 05 Jun 2023 16:39:12 +0000
ROA not before: Mon 05 Jun 2023 16:39:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:6d:49:da:a7:d7:8d:26:7d:29:a5:a3:de:b2:d1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 16:39:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3eac873f51bc8ec58504d22496b9f120395a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:df:e9:49:19:54:68:93:8f:61:2a:6c:13:1e:
eb:6b:3d:57:3c:b4:c5:3c:1c:ce:a6:b7:0e:69:03:
32:9f:76:0a:5a:1b:c3:2b:3c:4c:53:ec:50:67:50:
da:7e:52:5a:15:94:c7:b7:f1:6e:5a:43:4a:83:fa:
04:c7:bb:43:e2:6b:87:e7:4a:62:21:b2:e3:18:62:
86:2d:ab:37:38:a7:48:0d:74:5e:a5:ef:51:2b:10:
d0:89:91:e0:d2:43:66:ba:81:44:2c:70:6e:b6:b2:
30:1d:bf:64:4d:b6:76:ea:bd:2d:7a:57:0c:85:9a:
6e:35:d9:34:b6:fd:0a:2a:73:5d:af:f6:68:23:91:
9f:a0:d8:15:b7:7b:e0:c9:55:7a:ad:59:a2:2e:d9:
2f:4f:00:d5:f3:29:cf:08:56:9b:8f:82:3b:5c:94:
0a:c9:30:d4:a9:b0:f9:af:1b:33:c1:29:ab:9a:81:
a5:ce:22:dd:7d:3d:e5:1e:f9:fc:82:fd:32:94:75:
3c:8a:4f:c0:49:e3:3c:6a:be:5f:19:16:64:f6:ef:
06:64:78:e3:7b:ad:18:43:e2:7f:75:9d:26:11:e7:
77:91:c1:ea:e6:4e:6d:60:08:19:42:4a:21:12:bf:
80:ab:5b:96:2f:bb:51:5e:b9:dc:7e:44:e0:54:79:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:EA:C8:73:F5:1B:C8:EC:58:50:4D:22:49:6B:9F:12:03:95:A2:91
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8-rIc_UbyOxYUE0iSWufEgOVopE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
163.5.154.0/24
163.5.192.0/23
163.5.214.0/24
163.5.233.0/24
163.5.244.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:2b:b6:b2:a3:69:ec:56:bf:5d:d6:6a:e7:8a:e3:b6:3f:15:
ca:1d:63:72:2c:87:52:74:a0:4a:88:cb:f4:9a:45:08:50:90:
5f:08:20:6e:8d:cc:a1:11:b4:b3:79:12:e3:60:86:a0:95:4a:
b3:a8:94:5b:8c:eb:d0:26:6f:56:89:24:22:3a:f1:2b:d0:2a:
aa:9c:6d:21:dc:4e:31:fb:19:88:1d:7b:4b:fb:0d:15:88:c0:
67:e5:36:87:58:7e:17:c6:c6:db:c7:5e:2b:e4:e1:72:85:3e:
d5:78:b1:60:78:d6:69:ce:a0:ca:bc:5d:1a:7f:d3:0a:df:9e:
89:6c:ef:5f:01:84:b1:73:3b:c0:3f:31:a1:d7:ce:f2:3c:31:
ea:67:70:74:df:a4:39:b3:56:b9:8a:4c:ed:ee:a4:45:08:94:
60:7a:f8:b6:51:3c:eb:6a:e6:3e:78:33:40:d9:19:15:76:f9:
50:6f:15:e7:00:76:6c:7d:80:8f:b2:0d:d9:88:1c:49:c7:14:
30:4d:3b:90:a4:df:37:73:c5:fd:b6:fb:25:1e:8e:df:4a:4b:
80:d9:12:16:39:d7:eb:a8:40:3a:a2:5e:4c:72:21:dc:bc:98:
8a:01:15:8a:06:c9:e2:ea:aa:e7:8f:18:67:2e:4c:35:b4:7c:
2a:50:48:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org