Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L2GcnTPmub6TuQIF1RoaueH5d_E.roa
File: L2GcnTPmub6TuQIF1RoaueH5d_E.roa (raw, json)
Hash identifier: FklMJf9idmYqgcpERAYDE16DNoLor2nU3KbKV8WtHSg=
Subject key identifier: 2F:61:9C:9D:33:E6:B9:BE:93:B9:02:05:D5:1A:1A:B9:E1:F9:77:F1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01888C6B78211A1AAED0E8A164489A2AABD8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L2GcnTPmub6TuQIF1RoaueH5d_E.roa
Signing time: Mon 05 Jun 2023 16:37:13 +0000
ROA not before: Mon 05 Jun 2023 16:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:6b:78:21:1a:1a:ae:d0:e8:a1:64:48:9a:2a:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 16:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f619c9d33e6b9be93b90205d51a1ab9e1f977f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ac:9f:e9:44:b4:22:9a:2c:f9:13:a5:57:bd:
23:a5:21:9d:fa:33:77:17:04:53:de:69:74:93:30:
09:ff:14:07:85:11:3a:67:6d:7e:37:0e:13:c0:11:
6a:56:7e:ea:3a:e7:56:d9:1f:ea:6c:2d:c4:8b:93:
ac:c2:89:52:fa:b8:f5:33:17:9a:52:1a:5c:2a:dc:
ee:b6:43:fe:47:13:ce:1a:3e:71:9b:2a:c0:23:71:
96:d0:95:46:f1:df:04:4f:a8:fc:3d:98:44:33:2f:
20:1b:55:fd:04:7b:cc:c0:71:b7:21:e0:a7:59:c2:
17:0d:5f:8d:91:78:24:d4:bb:06:f9:6e:cd:bb:20:
73:50:ea:de:69:a9:81:33:a3:34:82:dc:3a:75:2a:
e7:6f:31:03:56:f3:ef:da:97:a7:a8:d7:b8:cf:e1:
1e:7e:54:a5:a0:38:a3:fe:42:e6:2a:2a:41:24:39:
03:e6:71:de:1d:2f:58:11:50:bc:75:eb:93:c4:e4:
d8:30:62:31:41:65:5b:0a:31:c9:72:f2:7b:a9:90:
e0:f9:d9:0d:7f:c2:ef:4c:60:a3:65:62:5f:8d:da:
87:c3:c1:4c:66:09:73:33:0b:45:94:58:34:60:bf:
a1:10:60:e7:63:7a:37:e5:1e:a8:22:81:45:28:c5:
e6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:9C:9D:33:E6:B9:BE:93:B9:02:05:D5:1A:1A:B9:E1:F9:77:F1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L2GcnTPmub6TuQIF1RoaueH5d_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.105.0-163.5.106.255
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:57:9f:72:e7:40:f3:55:e9:45:91:87:50:4c:7b:f8:ff:5f:
a5:ed:91:fd:d8:79:fc:60:6b:77:14:b5:c2:a6:08:c3:81:6e:
ea:7a:29:3d:9c:f1:99:18:3e:76:8f:9b:0d:52:48:c2:64:4f:
2a:b5:97:1b:32:01:f0:7b:68:4d:4f:d0:9f:59:cc:22:09:b0:
56:72:11:0f:d0:bb:e4:35:e0:d3:27:7a:17:ab:d1:77:c6:4e:
ab:f3:f5:87:ce:e9:87:1c:de:43:78:eb:d2:ef:69:20:f2:7c:
21:93:50:d3:4d:a6:04:d8:b0:a8:e6:0a:bd:67:0b:ce:43:a5:
54:82:73:ed:38:ee:53:3c:66:3d:6a:42:e1:b2:58:df:09:82:
c3:67:50:af:eb:22:17:5c:73:78:f2:ea:ed:0d:d7:05:89:21:
85:ce:28:aa:b3:dc:ec:e6:55:9c:2d:50:f5:32:f5:2d:df:f9:
3f:db:77:a4:19:b5:37:86:56:80:da:2e:16:2f:fb:af:3e:dd:
3c:66:d7:64:d0:90:4d:3f:e1:73:6d:60:c9:e8:d5:c6:53:c8:
6c:36:2c:76:bb:b3:8c:da:3b:80:1f:e8:18:90:57:14:cf:ad:
d5:44:98:c0:c3:88:85:08:24:fd:64:db:2a:34:85:f4:fa:e6:
18:cc:1b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org