Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/THEsL_kIjJJ3YAWVwv4shEUTCb8.roa
File: THEsL_kIjJJ3YAWVwv4shEUTCb8.roa (raw, json)
Hash identifier: dSIgyJvzH0xT2x6SoQDk9ejElxUrR0wi9/5AMKRPgzs=
Subject key identifier: 4C:71:2C:2F:F9:08:8C:92:77:60:05:95:C2:FE:2C:84:45:13:09:BF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01881ED054656908D7469249F60101457B5A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/THEsL_kIjJJ3YAWVwv4shEUTCb8.roa
Signing time: Mon 15 May 2023 09:49:09 +0000
ROA not before: Mon 15 May 2023 09:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1e:d0:54:65:69:08:d7:46:92:49:f6:01:01:45:7b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 15 09:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c712c2ff9088c9277600595c2fe2c84451309bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:36:a7:50:93:01:23:47:c3:96:d6:52:04:
e8:9b:57:90:17:70:73:83:97:f4:73:b2:c2:08:dc:
91:24:b2:02:a1:4b:60:c3:e4:e0:1f:08:91:19:45:
5f:6b:36:97:5f:44:30:15:ea:22:01:73:c4:0f:13:
83:5e:ad:00:df:6c:cb:4a:41:b8:7c:e7:c5:07:7d:
3f:16:4d:5d:19:af:16:f2:23:e4:7f:3f:c7:d4:99:
a8:4d:ff:30:6e:2e:89:b8:81:65:5d:3e:c4:80:39:
53:7b:fb:bb:97:5f:53:04:80:13:94:df:08:50:91:
21:27:59:90:11:db:84:d9:43:67:dc:f1:8d:47:58:
aa:2d:93:33:86:5f:61:98:95:95:e7:53:b6:c8:14:
24:ce:7c:99:02:b2:82:28:f0:7c:28:ed:b9:ac:58:
5d:4a:74:11:22:be:95:3e:a8:4b:0b:52:d3:f9:2b:
a0:42:4e:9b:3f:96:e3:29:60:a9:29:7e:5c:73:d5:
ad:6a:2f:5f:f9:78:6b:9d:ff:71:ad:90:01:b3:d4:
12:e8:21:dc:01:ab:8c:8a:96:a3:d5:58:dc:c0:9e:
8a:03:13:37:6e:e8:32:53:78:de:40:5c:f4:07:37:
9c:27:80:9d:82:24:2e:45:8c:b7:77:57:2b:a0:ca:
22:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:71:2C:2F:F9:08:8C:92:77:60:05:95:C2:FE:2C:84:45:13:09:BF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/THEsL_kIjJJ3YAWVwv4shEUTCb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:1d:0f:bc:12:18:e0:2d:02:4c:e6:d1:0e:bc:7a:cf:b4:39:
44:68:4b:68:62:53:d4:57:47:91:30:cd:8f:0c:d6:3a:6f:91:
5c:9a:56:be:d3:a5:3e:24:52:c0:c0:2f:fe:48:aa:58:64:25:
4c:e7:8e:8a:ad:9a:3f:b6:b9:59:ec:85:23:4a:a8:8c:fa:90:
da:ac:8e:98:d2:d0:32:2d:f0:09:70:51:85:08:47:34:b6:26:
35:ec:68:47:a0:f8:c9:1e:c9:30:ca:62:37:2d:1f:41:90:38:
0d:a1:c2:d7:4f:e4:4b:61:85:90:e6:3e:8a:f8:c6:24:72:b8:
dd:b6:d1:6d:d3:10:9b:1a:f1:ad:8f:2a:bc:eb:32:6b:48:16:
30:4f:9e:59:7a:bb:c6:7d:53:ce:fa:11:6b:c7:11:a1:a8:e9:
bb:41:d2:69:27:04:b2:bb:2e:f3:02:e4:20:c2:5a:18:6a:f0:
29:5f:27:7b:35:21:6a:82:00:fe:59:8e:3e:1a:35:2d:9f:c6:
d2:1e:c1:e3:53:50:56:40:b0:f9:ac:17:db:5b:a8:03:3b:99:
09:fb:a4:22:9d:0f:ae:c2:7e:86:b9:84:d2:30:ad:a3:b3:4c:
f2:c8:92:5a:ec:ac:fb:50:1d:61:18:7e:e6:f9:a1:ed:bf:54:
2b:c2:ed:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org