Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ShsbcJ_IGHK8CrXkkSzzpGPIXfI.roa
File: ShsbcJ_IGHK8CrXkkSzzpGPIXfI.roa (raw, json)
Hash identifier: fDdXd0+I4SfhBWw9mT8kl31QXQaPUSfS30Of+za6AQ4=
Subject key identifier: 4A:1B:1B:70:9F:C8:18:72:BC:0A:B5:E4:91:2C:F3:A4:63:C8:5D:F2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CAD8E60B4D77B77F9851ADE3074BECCFE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ShsbcJ_IGHK8CrXkkSzzpGPIXfI.roa
Signing time: Wed 27 Dec 2023 23:13:58 +0000
ROA not before: Wed 27 Dec 2023 23:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.66.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:8e:60:b4:d7:7b:77:f9:85:1a:de:30:74:be:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 27 23:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a1b1b709fc81872bc0ab5e4912cf3a463c85df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:c5:7f:48:c9:09:a3:e4:6e:a1:a2:39:f5:
85:f2:48:c4:20:dc:cf:c2:7c:b0:64:d1:b2:dd:1f:
a6:db:82:bb:2d:2c:54:92:ea:c9:c6:d9:13:0b:8b:
3b:e2:35:e0:a7:99:79:97:92:45:f5:dc:68:7d:48:
12:0c:03:37:ca:1a:e1:62:a1:27:4a:83:1f:76:06:
da:e6:1b:f6:f9:d2:85:85:02:78:fd:78:6b:a5:a8:
09:03:1e:26:9d:cc:06:a9:9d:90:45:bb:49:eb:4d:
ce:37:30:e4:51:59:9f:78:7e:ae:54:09:f6:0d:64:
0c:e1:3c:00:38:4d:39:e0:23:f6:4c:5b:91:08:10:
1d:24:4a:6c:53:6a:f3:e8:ac:ad:12:52:5b:18:93:
3e:40:f5:1c:bc:28:1a:54:51:fa:b6:ba:df:c4:99:
70:07:55:a2:87:d3:14:e4:17:8f:4b:00:35:34:86:
0c:3d:d5:06:b3:7a:8c:61:5d:71:d1:a6:9d:a8:88:
c1:c0:01:40:15:cc:35:55:06:41:cd:5a:b0:39:ad:
9a:99:93:43:3f:07:27:e1:0a:7b:24:bd:bb:06:6e:
e4:c8:0d:c9:4f:90:3d:ce:e6:df:f9:39:47:80:69:
1a:d9:33:b5:76:95:15:c9:35:3d:9a:c1:53:c2:c1:
af:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1B:1B:70:9F:C8:18:72:BC:0A:B5:E4:91:2C:F3:A4:63:C8:5D:F2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ShsbcJ_IGHK8CrXkkSzzpGPIXfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.66.0/24
163.5.156.0/24
163.5.168.0/24
163.5.170.0/24
163.5.186.0/24
163.5.220.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:f6:8c:30:9a:28:73:1e:1b:e9:09:0c:c8:7c:c4:e5:14:77:
2b:0a:12:4e:77:a5:cf:47:27:e4:bf:92:60:81:88:14:d5:62:
1d:d7:e4:31:a9:e9:52:03:37:5a:50:b9:6a:b3:8d:d8:65:eb:
99:62:fb:b0:58:34:bd:dd:fc:08:51:f3:28:c4:a8:6d:f8:72:
88:6b:8e:1f:92:4c:2c:4a:fa:4f:81:6c:52:89:7a:37:34:20:
8a:38:c1:ef:41:33:cc:b6:3f:4e:43:41:84:33:3b:9c:be:d5:
76:cb:2d:9e:19:b7:b1:5b:dd:36:e5:95:9e:0b:2b:95:cd:a2:
c2:50:e1:50:d0:06:4f:28:01:91:36:7e:d4:72:15:01:d6:cb:
b7:45:85:78:09:61:0b:3c:e9:fd:8e:a5:c9:33:a8:67:6a:51:
65:4a:6e:22:2d:bc:24:d7:39:ad:59:9e:cc:06:19:f8:e3:ea:
7f:80:77:b0:58:b5:79:f5:28:ad:fa:a6:a8:9e:97:f9:d8:95:
d2:c5:25:87:bf:1a:b0:20:0b:12:40:be:dd:e4:41:f6:7f:94:
57:d3:9f:89:bd:df:4e:25:34:8a:be:3a:6d:86:35:e8:74:11:
3c:af:2b:c5:cf:9b:17:92:2c:cd:f6:73:3e:c6:b0:5a:ba:5d:
97:86:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:48:54 2024 by rpki-client on console-fra.rpki-client.org