Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sk3qjGIYf91oIA13y2tI1TrvUiA.roa
File: Sk3qjGIYf91oIA13y2tI1TrvUiA.roa (raw, json)
Hash identifier: +UlI5ktQzp0ux4sbVm3orkUAqLdFh3HLO8vXz+Ix3xI=
Subject key identifier: 4A:4D:EA:8C:62:18:7F:DD:68:20:0D:77:CB:6B:48:D5:3A:EF:52:20
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188D4BC37B44A418C573D60D9A5E37065CE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sk3qjGIYf91oIA13y2tI1TrvUiA.roa
Signing time: Mon 19 Jun 2023 17:38:04 +0000
ROA not before: Mon 19 Jun 2023 17:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 163.5.208.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:bc:37:b4:4a:41:8c:57:3d:60:d9:a5:e3:70:65:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 19 17:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a4dea8c62187fdd68200d77cb6b48d53aef5220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:72:54:8d:6d:8a:7b:64:ce:08:4c:bc:52:71:
e1:34:84:c2:ed:fa:d6:30:5e:38:c4:4f:f7:6a:11:
a8:0c:ef:26:f3:b8:98:f5:ec:42:8a:f3:05:99:e2:
b8:79:76:a3:4a:8e:c0:30:b3:ec:18:c2:d9:98:a8:
02:f4:63:bf:8b:d1:1f:b4:57:e1:1e:9c:86:2c:e8:
d6:18:5a:5d:be:03:41:60:90:06:b1:2d:04:1c:61:
6c:b3:9a:a4:fe:52:5c:61:cd:b0:ec:03:64:b4:55:
ab:69:cf:ed:14:e3:ea:27:a3:a8:9b:97:5d:66:3a:
37:6f:28:67:45:03:5c:6e:96:30:90:76:5a:eb:43:
3e:c4:40:0f:a4:5c:37:cc:ed:f6:39:af:52:9a:7d:
08:0a:e2:da:c6:aa:4c:e1:40:e1:ca:7d:c4:30:63:
bc:b5:fb:ae:02:bf:cc:ca:6f:37:6e:43:fe:af:fc:
9a:07:4d:c4:fd:80:49:1f:7c:27:22:90:28:cd:bd:
cb:9c:e8:ee:cf:29:73:3a:7b:c6:5b:c4:8b:1e:d0:
be:5d:33:87:1a:8b:6c:ec:de:9c:aa:96:fa:b0:d9:
29:04:34:72:9e:9a:20:71:96:30:bd:ea:d7:04:a4:
02:d9:02:3b:29:e3:24:8c:7b:f8:1b:49:6e:77:53:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4D:EA:8C:62:18:7F:DD:68:20:0D:77:CB:6B:48:D5:3A:EF:52:20
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sk3qjGIYf91oIA13y2tI1TrvUiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.165.0/24
163.5.208.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e2:b8:af:28:d2:41:79:c0:df:7d:f8:a1:c6:66:22:3f:62:
f6:96:2b:0c:cb:69:d7:f1:a3:4e:41:d6:d7:4b:54:3d:7a:91:
51:0b:91:e1:18:2f:67:eb:c4:4c:33:95:db:5d:41:b4:20:81:
7d:29:dc:c0:95:19:b1:56:7d:ba:56:c9:7a:cd:96:bb:b5:e9:
c3:4a:d2:cd:27:5f:31:1a:2b:ff:e3:30:c3:fd:ea:a0:0d:aa:
24:83:59:e0:13:6c:54:be:64:2e:aa:41:1f:8e:8d:3c:de:18:
4e:82:b6:0d:9c:c5:3e:e0:0c:7a:dc:19:94:a7:13:c6:b8:5f:
7d:40:eb:35:a4:47:55:73:ab:ad:71:0b:3a:98:cc:e9:fb:9d:
b9:a4:04:06:58:f9:cb:3d:48:1d:a3:b6:fa:ab:b2:49:a4:43:
de:91:42:4a:04:3c:c8:c7:d6:19:ee:cf:c7:20:d8:96:82:e8:
37:a6:09:79:fb:89:e5:e2:31:44:e9:30:bb:a8:10:ec:3e:23:
f1:be:2d:9f:dd:12:39:30:06:94:cc:dd:e0:6d:5a:4c:ee:42:
45:a8:33:1a:ed:77:ea:22:19:ea:56:34:47:8b:d4:91:d5:a3:
7d:a1:b1:86:a1:0f:2c:be:a9:d6:53:dc:c6:cc:a2:3d:4a:b0:
af:21:bb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org