Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RY7oxMWVKWha7IcUP-Eb89Krr3g.roa
File: RY7oxMWVKWha7IcUP-Eb89Krr3g.roa (raw, json)
Hash identifier: JvdHE5P1ORo4H+GCqNPtqFy5au+MdAbBS51eNCs6P4E=
Subject key identifier: 45:8E:E8:C4:C5:95:29:68:5A:EC:87:14:3F:E1:1B:F3:D2:AB:AF:78
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A294B5DE5F20598D46EE896209FD99E23
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RY7oxMWVKWha7IcUP-Eb89Krr3g.roa
Signing time: Thu 24 Aug 2023 20:45:19 +0000
ROA not before: Thu 24 Aug 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:4b:5d:e5:f2:05:98:d4:6e:e8:96:20:9f:d9:9e:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 24 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=458ee8c4c59529685aec87143fe11bf3d2abaf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:ef:13:f4:25:ea:27:e2:2d:84:be:19:de:
8a:cb:4b:bb:78:61:22:fa:ea:07:cd:a6:cb:fd:e0:
d2:8d:b7:a1:34:14:b8:38:b6:2e:f5:06:fa:df:7e:
9a:16:d6:ed:dd:6a:4c:42:cb:b6:f2:f3:ec:a0:77:
36:dd:98:2c:9d:5d:9e:bb:5b:28:c8:4e:f0:c0:7c:
f0:9a:ee:cc:b7:e0:fc:b4:dc:d2:7e:55:12:2e:47:
31:58:0d:d4:c5:da:7e:06:c3:13:d4:22:57:b7:fe:
13:65:1e:83:48:c6:7e:88:bc:13:48:b9:d9:f8:ca:
c9:2d:ac:b5:70:b2:b5:8c:1e:48:d6:11:bc:e2:b4:
f8:15:ff:89:5a:49:6d:d3:31:39:b7:b1:13:ae:40:
6f:f3:38:9a:dd:06:6c:9d:ea:8e:fa:92:8b:f1:7b:
d1:ea:f2:2a:8a:00:68:fa:0d:36:af:61:ec:fe:2e:
c2:f8:bf:67:ed:cb:2b:49:e2:49:a2:ff:33:23:76:
92:b2:30:16:86:76:ce:c2:0d:df:b6:4c:4d:0f:03:
fb:ef:9f:20:a0:1f:37:00:fd:e9:ee:f7:6b:c7:33:
6f:65:fc:21:7b:5c:d9:2f:3b:82:24:ed:ff:54:98:
72:00:86:78:91:49:f6:ca:de:1d:36:41:e1:d2:5c:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8E:E8:C4:C5:95:29:68:5A:EC:87:14:3F:E1:1B:F3:D2:AB:AF:78
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RY7oxMWVKWha7IcUP-Eb89Krr3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.129.0/24
163.5.157.0/24
163.5.194.0/24
163.5.197.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:73:6b:7c:bd:65:94:0e:0c:9a:a0:c7:6d:13:1f:4f:d8:20:
b5:f7:3b:29:8f:4a:7f:8c:fa:a3:5a:b8:9e:07:93:ce:54:50:
6b:7b:dc:9d:10:1a:3f:8f:f0:42:be:45:a5:c6:7a:83:02:a9:
6f:45:fe:ef:0e:44:9c:87:5e:c2:eb:3b:27:66:ac:2e:eb:62:
1a:6f:1a:d8:67:f1:fd:8a:38:25:92:21:79:6e:4c:cf:27:0d:
ab:ac:7a:23:78:bb:f8:3a:ec:d7:c8:57:35:fc:c3:0d:ac:d4:
d9:7b:3a:b2:11:08:b0:af:b4:eb:9f:22:0d:1f:ae:81:39:88:
2f:e2:0b:57:f1:cd:ec:d7:fc:e7:39:0d:db:a6:f1:99:ca:b9:
e3:31:17:e6:8e:e1:dc:12:66:de:ed:4b:ab:13:b1:b8:91:53:
4c:65:5e:ca:7b:9b:3d:a8:fc:d8:64:37:82:95:76:d1:65:a5:
67:9d:8a:28:48:f6:ee:bf:15:94:e6:99:74:25:b8:64:45:0f:
88:29:f3:03:e2:fe:bb:85:4d:12:13:5c:58:cf:08:25:55:a9:
31:42:2a:4a:a3:4e:c6:b3:a0:4f:84:42:2a:d0:ed:e4:12:93:
6a:cb:cc:fa:2c:83:6f:23:2a:76:85:28:92:2f:53:7e:04:45:
1a:90:71:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 14:13:24 2023 by rpki-client on console-fra.rpki-client.org