Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9HuaD8iEWPGdbDDK4xnDMbJQR84.roa
File: 9HuaD8iEWPGdbDDK4xnDMbJQR84.roa (raw, json)
Hash identifier: g9IBm9TAXpOXyTcXrKM1ZQtv+CMAIPZFOUEvsy/C5DY=
Subject key identifier: F4:7B:9A:0F:C8:84:58:F1:9D:6C:30:CA:E3:19:C3:31:B2:50:47:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185FD5D99881633C98C2BA4CB826F4B5F25
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9HuaD8iEWPGdbDDK4xnDMbJQR84.roa
Signing time: Sun 29 Jan 2023 11:50:47 +0000
ROA not before: Sun 29 Jan 2023 11:50:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.183.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:fd:5d:99:88:16:33:c9:8c:2b:a4:cb:82:6f:4b:5f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 29 11:50:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f47b9a0fc88458f19d6c30cae319c331b25047ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:64:40:32:14:ed:1b:bc:3f:1d:9b:29:f7:
e1:ff:b1:a6:62:f5:12:58:97:b6:3e:51:e9:ae:dd:
b3:d9:7a:4a:2a:f2:91:37:f5:8c:45:be:e1:88:6e:
48:da:f4:33:63:9c:a9:7b:84:e2:36:74:55:f9:f7:
85:b2:c6:f1:ab:5a:49:f4:5d:42:83:1d:1f:17:b2:
10:f2:1a:0d:d9:fb:fa:be:30:1c:89:af:0b:e9:6f:
11:08:48:ef:82:dd:74:81:3b:37:a8:40:df:14:f9:
f7:e7:7c:33:95:66:0a:4f:a2:52:ba:30:61:d0:09:
76:2e:dc:13:7c:1f:de:07:18:8c:29:3b:49:41:c7:
58:32:40:24:9c:c2:c3:c0:2e:b4:cc:27:36:03:32:
93:bd:94:ed:7d:4a:c6:26:01:da:a4:87:d8:4a:ba:
72:6a:48:23:92:d2:03:96:36:67:4e:bc:b6:75:62:
55:a0:98:ce:86:80:23:ff:3d:1c:56:66:89:8c:24:
1c:54:5a:3e:95:91:b5:eb:d6:16:6f:7a:a9:57:47:
74:55:3e:67:62:de:b1:a6:07:2d:a4:a8:af:11:b6:
a9:cc:13:94:da:55:fa:66:ef:70:08:83:32:d2:64:
05:8e:d0:a7:8b:92:ec:c7:dc:79:b9:f2:12:8c:f0:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7B:9A:0F:C8:84:58:F1:9D:6C:30:CA:E3:19:C3:31:B2:50:47:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9HuaD8iEWPGdbDDK4xnDMbJQR84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.122.0/24
163.5.139.0/24
163.5.183.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
77:55:00:d5:cc:19:dc:fd:d2:e0:26:7b:b8:f9:a2:2a:4f:71:
fc:0b:46:c5:c2:75:2e:7f:43:d9:f5:08:97:e2:51:5b:d6:80:
f7:cc:dc:77:63:fd:5e:d1:61:63:47:27:3c:2e:eb:98:65:aa:
03:e7:f9:33:22:cd:0f:9d:06:1a:5d:ef:2c:46:c8:5d:99:00:
b2:eb:75:08:dd:67:70:1a:80:f3:87:3b:94:55:b8:ad:a7:52:
48:f4:6e:f3:3a:2c:7d:8b:6a:ac:36:a4:df:b8:d7:52:af:0f:
6a:9c:a5:fd:36:8b:b4:b1:bc:ef:cb:99:4f:6a:66:56:05:81:
60:b5:ce:65:4e:4e:3a:90:d1:c4:14:d1:e9:3e:70:1a:20:8b:
a6:2c:92:05:b1:26:40:11:c0:b2:de:3f:12:d7:f8:4c:3e:f5:
22:de:b2:e1:70:aa:ec:af:ba:e6:d4:83:91:e0:c2:e4:15:bc:
7e:e1:dc:f3:d6:f4:ae:93:09:f0:c1:fc:66:f0:de:57:4a:99:
6a:d3:bf:55:cd:f5:de:33:6c:d5:ab:73:5b:b7:ee:ef:7e:78:
45:a9:16:2b:a1:37:56:1e:b6:ca:4b:b4:d0:9a:3e:92:3b:9b:
62:42:b1:dc:eb:11:c1:53:bc:01:b0:85:a6:47:fd:36:c3:db:
3c:e9:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org