Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HFq1CkX_KBu__JkKitVLz6WShqA.roa
File: HFq1CkX_KBu__JkKitVLz6WShqA.roa (raw, json)
Hash identifier: StsUk96mVg4yvABzqXTdkyY/khUHbkB0DXm4DEsiglM=
Subject key identifier: 1C:5A:B5:0A:45:FF:28:1B:BF:FC:99:0A:8A:D5:4B:CF:A5:92:86:A0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192BD336D5E99F07E18B7F39D5C274F9DF2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HFq1CkX_KBu__JkKitVLz6WShqA.roa
Signing time: Thu 24 Oct 2024 06:25:17 +0000
ROA not before: Thu 24 Oct 2024 06:25:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 163.5.175.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 08:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bd:33:6d:5e:99:f0:7e:18:b7:f3:9d:5c:27:4f:9d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 24 06:25:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c5ab50a45ff281bbffc990a8ad54bcfa59286a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:82:53:e8:8a:07:41:99:00:3e:9a:29:12:d3:
e1:ee:16:5e:15:78:17:ad:be:f8:42:d1:aa:30:26:
4d:35:ae:ab:5a:f5:89:a4:ad:f7:43:71:b8:3b:fc:
6d:bf:dc:ba:04:54:c3:48:8a:0e:5f:f8:a9:4f:cd:
26:6a:35:ec:12:69:79:07:6f:44:06:5f:a8:e1:aa:
23:50:e0:a6:ab:44:63:9e:6e:52:7b:bd:c3:0a:30:
88:79:79:e0:38:23:41:21:5d:60:c7:95:2f:7c:98:
d8:f8:5b:a9:42:54:ad:9b:d4:b0:2f:89:e1:41:ce:
ac:c0:eb:42:0f:3c:bd:6a:9e:20:76:cd:cb:b5:6c:
ba:e9:ff:3f:98:db:42:58:60:11:35:d5:9f:70:79:
e7:6b:e2:fb:c8:bd:79:bb:c5:35:f3:57:64:cc:39:
31:2d:1a:92:ad:56:f4:97:a7:e9:e8:e7:63:3b:77:
39:2d:14:82:25:6d:8e:da:00:f2:5f:43:f4:9d:dc:
ab:9e:7d:0d:d8:cf:26:56:c9:a1:a0:3c:44:1b:e2:
30:15:30:5f:ca:9f:06:76:bf:ab:4d:71:38:79:a9:
2e:34:7f:79:10:fa:9b:6a:ec:d8:89:0d:09:0a:5b:
c9:a9:4a:86:85:8b:ce:94:79:7c:5a:7e:94:f6:5a:
66:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5A:B5:0A:45:FF:28:1B:BF:FC:99:0A:8A:D5:4B:CF:A5:92:86:A0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HFq1CkX_KBu__JkKitVLz6WShqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.175.0/24
163.5.185.0/24
163.5.209.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
59:c9:6d:ef:c5:8c:9d:9d:fa:2c:92:3b:19:ba:3b:5b:88:0b:
65:2f:b8:da:26:b7:6e:a0:69:c4:1e:4f:e1:7f:9e:e6:03:73:
02:18:27:47:6c:92:64:4e:00:b4:e7:2b:5c:23:de:8a:05:73:
86:31:c0:7b:53:16:68:03:e6:5f:e1:0f:7a:21:20:88:1c:90:
6a:a1:90:d2:85:10:15:e9:3f:0a:ac:eb:b0:63:ea:fa:1b:3a:
2a:fd:10:ad:cd:8a:9a:ac:94:16:ab:ec:c6:46:dd:db:17:d7:
9d:b1:0c:31:4c:38:36:b7:9b:c4:c6:a9:26:b3:aa:30:2f:e7:
91:52:9f:49:2a:96:c8:3c:39:ce:3c:f8:51:b4:aa:77:ce:df:
0f:a8:3a:80:bc:71:45:87:42:0f:46:db:71:a9:d4:40:ef:f1:
aa:26:4b:98:0f:b6:d3:de:6e:93:84:3b:f1:6a:48:59:15:f4:
56:c3:13:f9:e6:60:e2:6c:1f:1f:1a:3b:ba:61:14:fd:95:df:
a4:97:fc:b8:2f:e0:01:f3:32:2c:0b:04:06:cc:85:45:7e:1e:
d5:84:ed:4f:bd:37:6f:5f:b1:85:d1:13:8a:16:f6:2c:c1:50:
ce:61:3a:d3:fd:46:c1:47:89:d9:75:80:dc:fc:12:95:07:3e:
d0:2e:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 27 10:02:23 2024 by rpki-client on console-fra.rpki-client.org