Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L1bjl5nj_rr8ajiVaDMBNYdkPs4.roa
File: L1bjl5nj_rr8ajiVaDMBNYdkPs4.roa (raw, json)
Hash identifier: 2f3bDLXwJ4uZvy/OzT5jK6ls0VB6tZ+PKqc5CS5kmpU=
Subject key identifier: 2F:56:E3:97:99:E3:FE:BA:FC:6A:38:95:68:33:01:35:87:64:3E:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A74C43D94DCDD9D9BCFED63C50E98C466
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L1bjl5nj_rr8ajiVaDMBNYdkPs4.roa
Signing time: Fri 08 Sep 2023 12:28:52 +0000
ROA not before: Fri 08 Sep 2023 12:28:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 163.5.103.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:c4:3d:94:dc:dd:9d:9b:cf:ed:63:c5:0e:98:c4:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 8 12:28:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f56e39799e3febafc6a38956833013587643ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ef:a3:b1:59:88:01:b9:b1:a6:14:32:0a:ba:
a6:2b:2e:3a:c5:45:13:69:e2:e9:49:3d:9b:20:a6:
ee:5d:5c:fd:96:07:0f:14:3c:cd:7d:56:3f:50:df:
df:77:34:5f:c2:2a:e6:04:56:31:44:ba:db:35:70:
7d:84:7c:17:66:10:e7:61:c5:21:1d:69:a1:a9:a4:
e8:5b:02:86:17:77:b5:7c:b3:bb:7c:a3:bb:99:84:
bf:21:4b:cf:39:22:4d:ad:2b:cf:c1:8c:71:78:7b:
32:49:ce:03:4b:ac:71:36:0c:ca:1c:39:43:69:06:
c0:47:a6:f4:88:3f:45:3d:87:0d:a3:f9:c5:07:82:
2f:75:a4:e1:36:5c:db:82:c7:b3:1d:ce:56:7c:b3:
3b:a8:e5:fb:99:54:c3:eb:ea:6d:e4:67:04:61:a1:
96:a0:66:91:8b:9b:2c:7a:68:20:f0:f8:63:70:cb:
ec:a1:df:b8:32:ee:ce:ea:a8:b9:ba:d2:23:2c:cb:
9c:13:65:86:dd:fa:12:2c:a8:e8:e1:be:4b:aa:8b:
09:a0:86:c6:64:bd:57:a8:30:24:0b:e6:e9:75:c4:
fd:1c:14:ac:65:f9:77:8a:72:e0:1b:40:05:90:69:
c4:79:4e:14:15:42:b4:68:97:2f:3f:c1:19:ef:91:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:56:E3:97:99:E3:FE:BA:FC:6A:38:95:68:33:01:35:87:64:3E:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L1bjl5nj_rr8ajiVaDMBNYdkPs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.103.0/24
163.5.152.0/24
Signature Algorithm: sha256WithRSAEncryption
55:46:34:a9:c9:21:6d:66:6d:46:dd:fd:b1:07:6d:35:b6:1d:
e0:90:bf:c3:e6:03:f4:90:2f:3d:75:99:81:09:6e:30:83:40:
e8:04:0f:16:be:54:7a:20:5b:12:37:1d:83:a3:7c:b2:5f:82:
98:3e:60:b4:b7:a2:53:09:6f:b8:8b:61:6d:7d:c8:b4:05:e8:
b9:ab:e1:f0:13:91:10:7a:b0:48:0c:a3:f9:bc:1e:f4:a4:35:
20:f3:b2:12:f1:4e:a9:b0:e6:96:9c:31:d8:5a:ec:95:0b:f0:
87:b0:8c:1e:59:f0:91:99:b0:39:71:10:1b:0d:79:da:e6:2d:
95:77:54:ec:f9:a8:48:c8:37:bb:48:9f:03:29:4f:56:ec:6f:
8c:d5:3d:6a:06:2a:1f:69:17:6e:2e:2c:33:1a:4f:5b:4f:ab:
1e:8f:87:6e:96:b3:7d:23:d0:b8:03:56:ec:22:6d:15:55:63:
e8:9b:89:7b:1d:d0:f5:97:dc:d6:d8:f5:b6:61:bb:19:22:1e:
0d:11:79:e5:80:94:02:c4:a9:6a:ea:37:8d:ca:cd:c6:d8:c2:
0f:84:1b:57:4f:b5:1d:10:12:93:40:32:24:c0:f3:5b:bd:8d:
ac:84:be:ec:27:9e:7f:58:cd:09:f7:78:59:ec:62:e1:63:5e:
35:2f:df:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org