Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HexSxiDHRkfwA_uOr1yT9I_F_eA.roa
File: HexSxiDHRkfwA_uOr1yT9I_F_eA.roa (raw, json)
Hash identifier: RAkg9zSwAR7Nb4FjQnZGq0NPS3hdMvfww608+kE/Pi8=
Subject key identifier: 1D:EC:52:C6:20:C7:46:47:F0:03:FB:8E:AF:5C:93:F4:8F:C5:FD:E0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B3815107A2B1299974117837CE71D5B9D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HexSxiDHRkfwA_uOr1yT9I_F_eA.roa
Signing time: Mon 16 Oct 2023 10:43:06 +0000
ROA not before: Mon 16 Oct 2023 10:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 163.5.220.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:15:10:7a:2b:12:99:97:41:17:83:7c:e7:1d:5b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 16 10:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1dec52c620c74647f003fb8eaf5c93f48fc5fde0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:a5:ea:28:a1:70:85:ef:c6:28:88:bd:45:
28:d3:f4:1b:ac:d9:5d:46:1e:6f:19:3d:72:4e:d7:
9e:c1:84:eb:5a:7e:b4:80:02:9d:ad:a2:c8:1b:bf:
ee:ca:33:05:a5:c8:3d:68:d2:1c:82:e7:c8:c6:ce:
a9:d7:6c:4e:dc:b9:b3:29:61:c4:13:44:39:89:36:
2a:24:76:58:84:be:ec:a1:70:07:f0:30:2d:c4:fe:
25:80:3f:1a:a0:0e:17:38:a5:82:71:15:19:53:e3:
b6:8c:8e:9b:47:87:7a:f8:8c:36:43:65:66:2d:9f:
4c:ff:0f:7c:d0:4f:4b:99:82:45:2c:9b:7f:5c:ab:
f2:e9:20:50:f0:39:9f:8b:f9:f2:d4:20:a9:a4:10:
ca:45:b3:da:a3:73:c1:3d:2a:9c:07:e2:82:eb:ac:
2c:80:b3:ce:6c:f5:e1:fb:cf:b3:da:86:7c:21:4b:
4f:c3:08:3f:93:e1:9e:43:6f:a6:af:89:a3:93:f4:
a6:16:bc:17:2e:5b:0d:3f:7d:a7:57:87:00:24:8b:
6e:7a:5e:af:88:6f:99:6d:e4:53:9a:da:71:10:2f:
f1:47:cf:5f:bf:57:83:36:d7:36:df:5d:f6:0e:6e:
71:11:3d:31:15:d4:63:51:49:b1:62:2e:ff:d4:e0:
20:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:EC:52:C6:20:C7:46:47:F0:03:FB:8E:AF:5C:93:F4:8F:C5:FD:E0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HexSxiDHRkfwA_uOr1yT9I_F_eA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0/24
163.5.220.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:af:5f:10:a0:53:cb:12:8e:ff:95:c7:8b:e7:23:a1:9e:75:
ba:b4:8b:78:fd:bf:35:3d:7c:ba:93:a1:b4:08:47:b5:32:73:
4a:43:81:f3:38:6f:a9:6a:81:c9:ed:9a:b9:d0:74:4e:d3:2f:
40:b0:bc:90:76:45:4c:97:25:42:53:00:10:99:77:ba:5a:1e:
e0:a0:49:64:95:f9:25:b9:81:82:9f:f2:a1:ba:b1:a9:87:21:
3b:77:74:65:df:c1:44:ee:da:db:49:8c:27:42:ae:be:51:68:
31:43:c7:83:56:c3:0f:fd:23:7a:29:9d:6d:60:0d:cb:fc:cf:
5c:14:f2:14:a3:38:8e:68:00:90:93:06:b9:48:62:a8:a5:14:
b0:53:56:7f:0e:c3:b3:7c:c0:56:8d:85:bb:fe:82:c7:fb:8a:
84:bc:bf:4e:4b:cb:46:a2:74:a3:b4:21:6b:45:f0:57:2a:7c:
06:44:82:bb:1e:80:03:f0:80:2c:cb:86:c8:9f:e2:c6:6c:ce:
75:bf:9e:fe:8d:19:a7:91:dd:86:ce:bf:55:12:e4:1f:32:02:
9c:6a:2e:aa:7e:8d:d8:c3:2a:be:e3:0b:15:0d:8a:a5:50:b1:
7f:b5:8d:2a:f9:63:1d:53:b3:de:8c:89:72:32:59:e9:e6:7a:
11:fd:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 19:35:40 2023 by rpki-client on console-fra.rpki-client.org