Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I7c3wq0-TBgWH93XzjJhIbU-Mzc.roa
File: I7c3wq0-TBgWH93XzjJhIbU-Mzc.roa (raw, json)
Hash identifier: mHvxCsqxbDwnjixhDaJWBnLNt38lkmrTstkRb2yBPVg=
Subject key identifier: 23:B7:37:C2:AD:3E:4C:18:16:1F:DD:D7:CE:32:61:21:B5:3E:33:37
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B2527EF5950981B0CA9885726FF31E4F9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I7c3wq0-TBgWH93XzjJhIbU-Mzc.roa
Signing time: Thu 12 Oct 2023 18:30:55 +0000
ROA not before: Thu 12 Oct 2023 18:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 163.5.66.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:27:ef:59:50:98:1b:0c:a9:88:57:26:ff:31:e4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 12 18:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=23b737c2ad3e4c18161fddd7ce326121b53e3337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:ee:a3:ec:6c:2b:91:10:fc:fa:de:39:1b:
f2:72:67:72:5f:dd:09:76:d8:02:6f:87:98:7c:a9:
15:f8:c7:98:c7:35:fc:37:15:b6:5f:53:bf:e1:aa:
87:6e:55:a7:f7:da:cf:ca:5c:d8:50:aa:77:b5:6e:
bf:f0:f9:47:ca:6b:d3:4a:84:18:83:11:f3:ce:b8:
f1:25:2b:5a:62:25:4c:eb:ee:eb:2e:ce:8c:d0:80:
b1:9a:3d:13:62:6f:97:eb:d7:b7:73:ff:7d:3b:df:
eb:1a:8f:81:b6:4d:54:f8:e7:77:00:51:ef:c5:1c:
f5:28:19:71:a0:b7:0f:70:32:62:16:22:75:6e:60:
84:f9:f3:33:d4:0f:5a:59:2e:82:8c:39:73:d2:41:
7b:0b:45:56:a3:4b:c0:c5:ad:96:c2:f1:cf:2d:11:
11:4a:f8:6e:fe:db:ed:90:c5:77:75:0e:10:3c:1a:
3c:3a:2d:0a:e8:30:29:58:0e:ac:ce:de:42:74:0a:
f9:56:2c:7d:56:27:86:84:dd:86:0d:43:bf:55:57:
a5:9c:6c:cf:c5:b9:c0:f6:21:84:7e:01:7d:f0:fa:
ef:49:b7:60:e2:fe:af:0c:b1:4d:f3:72:06:f8:fc:
c5:45:fc:6f:ee:fb:6a:ab:4a:e4:22:14:f9:4e:11:
66:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B7:37:C2:AD:3E:4C:18:16:1F:DD:D7:CE:32:61:21:B5:3E:33:37
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I7c3wq0-TBgWH93XzjJhIbU-Mzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.64.0/24
163.5.66.0/24
163.5.86.0/24
163.5.123.0/24
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:0c:ef:5b:e4:d6:69:d5:7e:c0:15:9e:46:5d:3c:74:06:96:
ed:f1:78:69:59:c3:21:d9:d7:73:82:d0:8a:ea:62:2c:08:0e:
91:ed:16:65:4f:4e:85:f7:1d:67:4e:ad:b0:c0:d1:1e:3a:41:
f1:ee:fa:b1:3b:b8:3a:18:90:2a:24:c8:e4:42:56:46:6f:d7:
6a:22:9d:5b:c7:7e:67:8a:38:5d:5b:81:83:d1:68:b6:8b:2d:
cf:23:54:f7:8b:ab:6d:e2:25:a9:df:5c:d9:2f:6c:38:11:c3:
da:56:ae:14:0b:33:59:f8:2b:26:f7:07:bb:51:9c:20:43:ce:
05:5c:33:a3:28:5b:6b:61:20:41:3f:ec:a3:fc:b3:b4:6f:e8:
8b:19:8d:ea:e4:a7:79:17:7d:34:8e:1a:d1:de:1d:8e:c9:b8:
67:f4:eb:94:5d:1a:ce:81:c3:21:0e:1e:eb:6b:de:ac:9f:7e:
d9:0b:fe:6e:4e:76:ec:51:ef:f7:1f:a4:87:a8:c8:67:18:81:
bc:0a:aa:db:d3:76:23:4b:7d:56:89:17:22:89:7e:f3:d7:5b:
c0:91:a1:16:67:40:db:3d:a2:24:b9:22:0a:ca:2a:53:5c:ac:
ea:c6:60:30:93:f8:8b:c5:14:36:39:b6:74:f2:b0:14:e9:d0:
c7:bc:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 12:40:43 2023 by rpki-client on console-ams.rpki-client.org