Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8heJLDyt9grNEs_cb2GoY9sv9fw.roa
File: 8heJLDyt9grNEs_cb2GoY9sv9fw.roa (raw, json)
Hash identifier: ZMEmo52oJ3azD9OGexSUs+Alu78kY532JLB66FWcbyc=
Subject key identifier: F2:17:89:2C:3C:AD:F6:0A:CD:12:CF:DC:6F:61:A8:63:DB:2F:F5:FC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B8C34D749F98D3EA7945AE24FE1E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8heJLDyt9grNEs_cb2GoY9sv9fw.roa
Signing time: Mon 02 Jan 2023 02:14:58 +0000
ROA not before: Mon 02 Jan 2023 02:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.90.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b8:c3:4d:74:9f:98:d3:ea:79:45:ae:24:fe:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f217892c3cadf60acd12cfdc6f61a863db2ff5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:6e:15:28:bf:d3:e4:89:7d:40:80:06:01:
49:7f:e2:a9:21:a5:08:1c:c7:0b:0a:5f:d3:8f:06:
f0:a7:b9:6c:85:a0:6f:55:c8:4a:35:ea:be:2a:3a:
f8:38:02:e4:0d:c8:30:25:a8:7a:0a:b0:f8:d5:b6:
fa:4a:6e:8c:60:67:52:92:cf:32:bb:c6:94:89:de:
d2:91:a0:82:21:1f:cb:74:50:90:a5:17:88:7a:53:
61:7f:e5:09:eb:e9:2c:89:47:ce:bd:ec:e1:27:8e:
56:e7:6c:3a:07:5f:63:92:78:0a:1b:8c:97:d3:f6:
86:35:c1:ff:0b:78:c6:33:26:ab:e9:53:e3:e7:e8:
4b:f6:53:59:5d:c2:1a:1c:15:6e:74:f3:be:e1:0f:
7b:de:31:93:43:98:f2:5f:3f:b7:21:dd:de:8c:2a:
2e:7e:bc:a5:f3:51:7c:1f:62:26:4e:17:31:a3:0f:
6e:6b:d7:81:b8:c8:d5:ac:c7:5a:35:a2:fc:c1:20:
64:9e:99:38:83:11:4e:5c:12:ab:28:0b:4a:94:3b:
04:f9:87:19:b3:97:ff:aa:8b:51:af:8d:02:c5:1c:
fd:d8:85:c4:5f:b8:55:33:f1:b2:30:a2:8a:0a:f9:
a7:0a:9f:59:2b:46:53:f4:2e:af:25:46:bc:f7:4b:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:89:2C:3C:AD:F6:0A:CD:12:CF:DC:6F:61:A8:63:DB:2F:F5:FC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8heJLDyt9grNEs_cb2GoY9sv9fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
163.5.140.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0a:95:ca:af:b6:a8:48:9d:fe:6e:ab:4b:f7:e2:6b:a5:85:
7f:3e:10:60:20:94:b5:3c:e1:a2:b4:7a:05:3a:86:6c:ff:74:
f6:fb:7f:d3:cf:64:31:54:9e:49:b1:b0:24:27:9a:2a:48:af:
ff:04:f7:aa:7e:00:f2:d3:ec:38:99:94:4d:5c:76:3a:2e:60:
be:c9:23:8b:f8:ae:48:26:14:d6:fc:e5:cf:df:1e:f2:6f:f1:
b7:0f:0a:48:a1:0e:be:e4:f5:63:8f:98:e0:33:2c:7e:62:86:
05:1e:67:42:ad:64:54:62:64:19:4a:bb:ed:e3:fd:27:da:62:
8e:58:2f:72:23:26:2f:75:2f:cc:19:78:58:d0:4c:2c:91:d1:
e2:a7:9e:88:b3:ae:da:6e:5d:6d:79:0b:1e:aa:41:d6:a1:31:
6e:32:30:bb:01:8f:06:01:c0:bc:44:bd:80:88:04:bf:89:dd:
8f:57:c6:0e:5d:f6:fd:96:5a:29:3b:e6:4d:2f:e8:49:8b:7d:
53:13:ae:52:4f:53:0b:ab:6e:e4:2f:14:a2:f0:3e:9c:0b:06:
60:e7:06:38:ba:7c:13:18:31:7c:82:5c:06:a7:73:f4:83:8a:
36:5c:68:42:b3:3d:c3:d0:30:48:ae:92:ae:18:81:63:fa:45:
e0:00:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org