Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LKr6kebtvOTKooa-ZpyuW0DR8eo.roa
File: LKr6kebtvOTKooa-ZpyuW0DR8eo.roa (raw, json)
Hash identifier: 5326A8mRsbiEhohryoSFiyFJjeBDATUhyGeArwLM5+E=
Subject key identifier: 2C:AA:FA:91:E6:ED:BC:E4:CA:A2:86:BE:66:9C:AE:5B:40:D1:F1:EA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018BB73701DE559D39B13172FE6DE6407192
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LKr6kebtvOTKooa-ZpyuW0DR8eo.roa
Signing time: Fri 10 Nov 2023 03:11:57 +0000
ROA not before: Fri 10 Nov 2023 03:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.113.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:37:01:de:55:9d:39:b1:31:72:fe:6d:e6:40:71:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 10 03:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2caafa91e6edbce4caa286be669cae5b40d1f1ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:65:7d:d8:d7:d9:4b:28:34:57:a2:f8:56:22:
c6:2d:48:2a:60:84:8a:51:f0:42:2c:ac:88:e3:dc:
0a:ac:f8:8d:3c:c3:3a:77:3c:f6:0f:54:ea:21:3e:
66:4a:94:8d:a1:93:11:c8:a6:0e:78:7e:d5:91:44:
c5:20:b5:3f:61:4b:6f:a6:c0:4f:fe:3a:97:7f:89:
09:11:7f:d7:44:4f:d7:65:ec:71:58:6f:32:91:2a:
1d:1c:f7:9a:2d:9e:8d:ed:95:9a:b3:b8:dc:fb:86:
eb:12:ff:86:12:43:e3:e8:ce:c2:fb:43:f2:58:a7:
34:33:63:73:38:1b:fe:27:c9:6e:21:a5:5a:a5:3f:
fb:4c:b6:d7:6f:37:a6:24:da:92:be:de:0d:15:88:
bb:55:e1:71:53:fb:f1:f3:c1:c7:94:61:f6:61:fd:
07:28:30:7a:0d:60:e6:3d:9e:84:d9:ad:7a:90:ac:
9a:d7:09:69:12:9e:b8:f6:3f:b9:6f:0a:c6:4d:7f:
c6:4f:ad:ec:fc:a7:49:38:68:1f:b5:42:df:02:b3:
57:cb:9d:c0:41:68:9f:49:ea:05:e4:06:22:c6:2b:
48:ac:9e:a1:8a:c8:f3:78:0e:3d:42:f4:c4:28:99:
88:18:47:1e:63:4a:83:ea:c8:e9:ae:78:c1:5e:10:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AA:FA:91:E6:ED:BC:E4:CA:A2:86:BE:66:9C:AE:5B:40:D1:F1:EA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LKr6kebtvOTKooa-ZpyuW0DR8eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.113.0/24
163.5.146.0/24
163.5.224.0/24
163.5.234.0/24
163.5.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5c:29:79:63:e7:c3:20:87:a6:b5:e2:c1:a3:83:0e:22:30:
f1:93:51:62:29:6f:b8:13:f2:12:81:67:ba:e7:35:f6:58:f7:
2d:b9:61:df:13:3b:96:4c:25:0b:c9:e0:93:fd:03:db:d7:aa:
c5:73:8d:3d:91:c0:88:aa:a3:51:e8:dd:ad:ab:e6:f9:2e:cb:
d7:bd:c7:55:86:fb:7a:71:7f:a6:68:39:e9:fd:6a:d1:33:21:
63:ba:b7:b3:d7:01:e3:8e:c0:e2:0e:73:6e:d3:ca:d9:27:11:
48:d6:99:9e:df:04:b9:71:59:da:64:89:78:b6:36:05:f0:6b:
22:ee:87:19:5b:14:83:02:0a:32:0d:2a:43:20:07:e2:a5:10:
98:1c:79:57:ef:4c:13:b0:e6:0d:5b:57:1e:33:b0:21:c2:ce:
9a:7b:2d:ce:0f:c1:74:52:fd:1f:6f:1e:81:b7:5b:7b:10:d2:
8c:28:cb:c7:58:cf:ae:0b:93:7a:c2:47:47:21:f4:41:f7:b6:
07:80:aa:b5:d9:d1:05:d2:12:9c:6b:20:ad:1b:57:c2:a8:eb:
16:9f:fb:f2:ce:2b:30:23:03:ae:c4:31:22:35:ce:1c:9f:6a:
45:0f:77:ed:c7:b9:7a:e7:bb:7a:31:07:7a:4e:21:99:68:bc:
b5:e1:b6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org