Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EL_spHqMs4swdP1mdwkLySquYqo.roa
File: EL_spHqMs4swdP1mdwkLySquYqo.roa (raw, json)
Hash identifier: m0E8kUqfob4PoKbWN6SglyGRv+4MC0FdlN+fMfXeXMw=
Subject key identifier: 10:BF:EC:A4:7A:8C:B3:8B:30:74:FD:66:77:09:0B:C9:2A:AE:62:AA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042D0740F6701B8FF759FEA475B0F23
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EL_spHqMs4swdP1mdwkLySquYqo.roa
Signing time: Mon 02 Jan 2023 02:15:04 +0000
ROA not before: Mon 02 Jan 2023 02:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:d0:74:0f:67:01:b8:ff:75:9f:ea:47:5b:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10bfeca47a8cb38b3074fd6677090bc92aae62aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:86:27:7a:84:ce:f8:70:cb:20:63:1d:ce:
c4:78:b5:ea:b8:c8:dc:45:2e:28:8d:d8:03:3c:84:
a5:90:87:d1:32:7c:5a:89:da:05:30:ad:2f:6c:8a:
ff:f6:8b:ac:7e:05:ec:17:9a:2e:19:bd:67:7a:81:
1b:01:0c:61:47:a1:d5:20:76:d4:9d:91:7c:4a:cb:
27:62:ac:9d:c5:c9:a7:9c:03:64:d1:01:59:e1:15:
00:bf:af:b5:41:e4:82:86:81:59:fd:ac:61:85:2a:
27:46:d1:eb:e6:40:ee:09:af:bc:f6:06:0d:85:34:
66:70:b1:1e:f8:12:88:dc:48:9a:6c:1c:2d:9b:39:
59:b0:17:14:fe:cd:b2:af:cf:b5:23:e3:c2:8b:02:
a3:62:64:5a:65:73:60:1b:a5:f8:9c:77:b2:d9:a6:
5f:98:34:73:50:9c:07:d4:89:e7:08:47:a2:00:26:
78:2a:3e:2f:62:c4:e4:6d:01:0c:97:20:fe:69:1a:
f0:c4:6d:01:04:51:c5:b8:3f:78:9c:10:ec:ff:50:
ab:cf:81:16:d5:d4:b0:50:6a:fd:de:4f:73:fb:d4:
96:db:04:55:94:28:7e:f7:c6:0e:55:ef:03:ef:75:
35:3b:3d:c5:53:26:2b:5e:f5:d2:2a:44:20:05:88:
c8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:BF:EC:A4:7A:8C:B3:8B:30:74:FD:66:77:09:0B:C9:2A:AE:62:AA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EL_spHqMs4swdP1mdwkLySquYqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
163.5.143.0/24
163.5.154.0/24
163.5.192.0/24
163.5.214.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c1:3a:1b:86:29:0a:e4:b1:d2:b5:f0:88:10:cb:64:a0:b0:
bd:8d:15:f7:24:b5:6b:94:74:53:b0:98:6b:b1:18:59:db:f2:
ed:93:cf:09:f5:03:03:c0:ab:a9:11:b2:9f:f7:cd:d5:53:a8:
7a:27:19:49:aa:ab:f5:3a:d3:ba:f3:d5:42:34:c9:8c:21:a5:
c2:ce:99:17:a7:c7:00:11:b4:a0:44:33:e7:92:09:de:10:ca:
56:4c:86:3a:be:5e:64:b2:f4:a3:39:6a:f0:f6:31:6b:22:cf:
dc:29:37:2e:b4:44:93:bf:a7:c5:13:f6:d0:4f:d3:75:0d:6a:
ae:d8:21:16:58:9b:c2:3f:c9:69:74:3a:18:3e:f5:fe:c2:cc:
c0:96:eb:aa:43:64:61:d2:99:dd:10:27:3d:98:0f:2e:0f:e0:
81:e5:52:03:c5:c6:fd:17:b7:30:7e:76:2b:7e:5c:59:0d:14:
5a:1d:4f:ed:f4:e4:4a:64:0c:0b:78:ee:03:7b:76:8f:33:19:
a2:29:3f:81:94:51:47:b6:64:12:5a:5d:a5:72:01:22:ae:1d:
c2:6b:d4:fe:c3:f1:56:2e:f0:59:3f:11:58:e5:57:70:54:89:
ea:3a:32:ea:cb:8a:2e:e2:ce:8f:fd:a0:ff:e3:39:bf:c6:81:
85:c6:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org