Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N1tHK4pzHTqXfpria6PQ7-puF-U.roa
File: N1tHK4pzHTqXfpria6PQ7-puF-U.roa (raw, json)
Hash identifier: hb/V0/wlM7G12iL15F07i4nMbhr8F/fuG593aN0VLYc=
Subject key identifier: 37:5B:47:2B:8A:73:1D:3A:97:7E:9A:E2:6B:A3:D0:EF:EA:6E:17:E5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C788BA2DBB13CEA4F82A259775298DF5C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N1tHK4pzHTqXfpria6PQ7-puF-U.roa
Signing time: Sun 17 Dec 2023 16:11:06 +0000
ROA not before: Sun 17 Dec 2023 16:11:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.177.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:8b:a2:db:b1:3c:ea:4f:82:a2:59:77:52:98:df:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 17 16:11:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=375b472b8a731d3a977e9ae26ba3d0efea6e17e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ad:3f:8d:ea:08:32:c6:57:ce:9c:0c:4d:45:
46:d9:98:eb:d6:63:22:7f:aa:ee:5a:bf:05:f3:26:
a5:43:11:72:b0:71:1f:a1:fc:d3:bf:01:a8:60:89:
e9:1b:e1:e9:43:52:ac:f2:cb:bb:39:5f:9f:c7:37:
b6:05:95:66:32:59:1c:b2:ca:c8:20:00:b5:5a:a1:
19:7b:f9:82:90:90:61:09:6f:32:d7:35:c1:2d:5d:
0e:a4:30:6f:d7:f6:10:ab:69:86:0e:07:7f:08:3c:
b4:74:9b:39:31:ca:d7:ae:88:0d:6a:2b:ec:c0:2a:
c8:e3:90:0d:40:75:1b:2c:48:c9:85:23:18:60:37:
de:54:4a:7c:8d:4d:62:b4:32:a2:2a:09:a1:ba:9d:
09:6e:73:60:da:dc:cc:ac:bf:36:30:eb:a0:d7:b3:
20:c1:01:d8:6f:00:8e:76:cf:ae:72:f1:07:ef:a3:
46:7d:b5:d8:2b:57:3a:3b:02:1a:27:0b:94:19:13:
ed:8f:4b:10:12:a6:11:ab:6f:a3:23:4e:41:41:53:
91:14:71:2d:3b:0d:10:23:41:f8:d6:25:29:f9:69:
16:ec:45:b6:fb:df:c7:c7:60:29:6c:6a:98:e5:55:
52:6a:5f:8b:90:27:02:d3:23:1d:7b:13:1d:9e:70:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5B:47:2B:8A:73:1D:3A:97:7E:9A:E2:6B:A3:D0:EF:EA:6E:17:E5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/N1tHK4pzHTqXfpria6PQ7-puF-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.118.0/24
163.5.153.0/24
163.5.177.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
65:72:13:e2:2c:fe:63:12:a8:04:96:53:ed:99:6f:b9:87:12:
a4:bf:da:71:10:64:70:23:c3:d4:17:69:10:e8:06:b7:cf:60:
52:4d:a9:31:f3:32:cd:ec:da:a7:ae:ff:dc:90:d5:bc:a2:d1:
fa:79:e2:70:5b:2c:c3:61:c6:e7:96:a9:86:81:a9:99:09:82:
6e:f2:35:b1:e9:2e:c5:54:3e:6e:15:1b:94:d5:74:b4:c1:e7:
3f:60:51:d7:cf:a1:4f:e5:c0:32:3c:76:3e:9f:3d:2c:c6:73:
5c:0f:f7:10:97:b0:70:27:c8:4f:75:30:3d:27:25:3e:9d:38:
24:68:c3:e4:be:91:94:e8:ed:1c:d1:c7:3d:9a:d5:a3:6b:d3:
58:5c:08:34:8a:70:fb:c1:8c:3e:7c:47:6d:85:37:59:97:d7:
4d:f0:13:70:2b:d9:6f:ca:a0:48:6b:e3:cc:d3:c2:61:59:5d:
8f:75:3c:73:12:40:15:0e:5c:44:5f:29:12:5c:01:90:ec:3f:
fb:e7:89:67:7f:c0:ef:48:05:c2:86:11:91:cc:b9:a5:dc:4a:
f7:73:a1:64:e6:0e:c0:60:c3:99:69:34:98:b4:66:b7:e0:be:
1e:95:35:5b:c0:cf:37:d4:d2:c2:25:d6:1b:1e:2e:35:82:1e:
21:95:75:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org