Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Hew8QyvQYZhIBgVB0QsOrKF6dBc.roa
File: Hew8QyvQYZhIBgVB0QsOrKF6dBc.roa (raw, json)
Hash identifier: ap/qBAzD0S72ocn1InIXy2wLv/Bqp26g31Z+NE3uEZg=
Subject key identifier: 1D:EC:3C:43:2B:D0:61:98:48:06:05:41:D1:0B:0E:AC:A1:7A:74:17
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D0DC660C0A856386C51EF7C9DA79E6354
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Hew8QyvQYZhIBgVB0QsOrKF6dBc.roa
Signing time: Mon 15 Jan 2024 15:38:41 +0000
ROA not before: Mon 15 Jan 2024 15:38:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 15:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:c6:60:c0:a8:56:38:6c:51:ef:7c:9d:a7:9e:63:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 15 15:38:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dec3c432bd0619848060541d10b0eaca17a7417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:50:5f:c6:0a:86:12:a6:41:ee:ab:63:2e:
88:2e:07:f4:07:ba:95:cd:47:1e:86:bd:88:54:f4:
39:9c:19:06:0d:6f:47:0e:c9:6f:52:b3:a3:55:c5:
0c:0a:f0:bf:96:46:44:d5:53:93:f3:3a:e5:5a:82:
6b:95:58:f3:b7:2c:c2:2b:6e:c1:69:fd:9e:ab:27:
4b:0d:ef:0c:a5:35:31:de:92:79:90:46:dc:eb:ca:
b6:7c:b8:7c:40:2f:20:ba:d3:d0:b0:22:5e:9b:1c:
07:42:1a:e9:64:29:cd:8d:1e:79:b9:51:85:69:34:
fe:fc:88:73:21:24:a0:f2:de:67:60:cf:da:c2:74:
d6:97:09:78:16:e5:06:ee:41:c2:65:cd:12:af:21:
3d:af:9a:e3:d3:dd:95:7f:1a:74:14:7b:44:88:fd:
17:57:87:e4:08:9e:9d:3e:cd:ce:e6:cf:2f:16:8d:
29:66:6e:bf:2b:36:bf:74:0b:e2:57:25:42:e2:81:
30:a1:07:a2:b4:07:35:12:d3:fa:07:c6:80:9a:f8:
10:54:8c:2d:ff:5d:27:6f:56:65:60:72:5c:20:ca:
39:03:9b:a7:dd:c4:20:c6:9a:1c:99:51:2d:92:b7:
8e:19:c3:42:ac:b9:6e:85:f8:46:11:a9:11:7d:5f:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:3C:43:2B:D0:61:98:48:06:05:41:D1:0B:0E:AC:A1:7A:74:17
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Hew8QyvQYZhIBgVB0QsOrKF6dBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
163.5.154.0/24
163.5.192.0/23
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
41:e7:ba:87:a6:b2:f5:d0:05:c5:0a:7d:ca:b0:e6:13:b3:a5:
10:82:ac:93:ea:19:df:30:ba:5b:dd:93:6e:37:11:8b:86:61:
00:ed:a3:44:cc:3a:bf:79:19:c9:57:25:17:41:4f:ae:71:9d:
73:25:e8:1c:0b:45:4d:24:18:4a:28:14:6e:af:43:35:36:be:
4b:15:e9:02:2a:31:18:64:d4:42:0e:90:fc:a9:e6:2f:cb:5b:
8f:a0:b0:f5:0d:ff:48:4f:09:b2:7c:c4:63:74:b5:4e:5c:b8:
44:ed:84:99:bb:bb:7c:64:26:e9:64:a1:73:a6:de:b0:c8:a2:
09:f1:ea:b6:b4:8f:f4:f6:11:b1:44:54:a9:fb:04:83:ca:22:
66:f5:c1:da:b7:73:44:95:47:d3:69:9e:26:26:9f:30:82:8a:
42:c6:c3:95:ff:28:3a:e2:84:11:78:9d:07:70:18:87:d3:db:
34:b2:76:48:b6:7a:92:c9:e0:ae:08:55:bb:aa:3e:19:c9:62:
92:30:63:84:ab:be:15:8c:c0:4b:00:a0:db:f8:4d:7b:63:87:
00:a9:9d:3e:c5:f8:6c:25:9d:d6:4d:2e:8e:6b:2a:04:d5:38:
d7:11:ba:58:7f:cf:65:e6:d9:e2:e1:95:a2:00:ff:75:08:a1:
e5:f9:25:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 18:16:40 2024 by rpki-client on console-fra.rpki-client.org