Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UViCc-FgzbH_52Q16ZHb7Jp2Y80.roa
File: UViCc-FgzbH_52Q16ZHb7Jp2Y80.roa (raw, json)
Hash identifier: bDROWArfsltH2GDkk3IWehCZqi9qOwKWp72Il6sUjWE=
Subject key identifier: 51:58:82:73:E1:60:CD:B1:FF:E7:64:35:E9:91:DB:EC:9A:76:63:CD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A95750B23233262E60393D916894BB20B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UViCc-FgzbH_52Q16ZHb7Jp2Y80.roa
Signing time: Thu 14 Sep 2023 20:49:50 +0000
ROA not before: Thu 14 Sep 2023 20:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 163.5.125.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:75:0b:23:23:32:62:e6:03:93:d9:16:89:4b:b2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 14 20:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51588273e160cdb1ffe76435e991dbec9a7663cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:cc:24:4b:a8:57:2e:5b:2d:64:c7:b1:9f:
7d:51:44:02:3a:60:03:ff:ff:c5:08:0b:d2:bf:24:
ac:08:a9:fd:18:a4:74:c0:db:22:d1:73:5b:ff:ee:
3d:23:28:44:9a:cf:2f:27:69:9b:55:39:a8:93:a8:
0a:0c:bf:70:62:96:e7:07:bb:9d:ff:70:e0:8d:9a:
78:99:ef:81:cd:88:3b:79:b3:4d:1c:b8:c0:24:35:
e8:09:fc:b3:a3:5e:1d:15:03:5b:90:c0:dc:60:4d:
a8:48:62:f5:99:38:8b:cf:15:f1:b2:cd:25:fb:d0:
97:b2:01:bd:92:00:bb:45:9e:a6:3a:02:2b:cf:6d:
cd:a3:30:b8:a3:cd:0d:71:ef:29:26:92:01:e5:71:
ea:f4:2f:e1:f6:ce:d3:ab:e3:87:bc:b4:ee:b5:5c:
62:97:ca:2c:4a:2c:d6:75:5f:cb:cb:17:07:0d:81:
3d:26:fa:85:eb:fb:75:99:27:54:b9:d8:5b:0c:14:
6e:e2:34:38:be:c7:cb:6a:d7:ba:8f:ba:70:ce:80:
c2:c9:90:c9:78:e9:78:e5:9e:db:93:8f:c8:d0:41:
2f:a6:47:df:0b:76:1b:4e:6e:88:cf:fe:05:6b:0f:
6e:f3:2b:0e:24:70:b9:9d:56:76:31:ab:c7:45:ea:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:58:82:73:E1:60:CD:B1:FF:E7:64:35:E9:91:DB:EC:9A:76:63:CD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UViCc-FgzbH_52Q16ZHb7Jp2Y80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/23
163.5.140.0/24
163.5.163.0-163.5.164.255
163.5.166.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:49:33:ae:15:3e:1b:96:88:08:4c:dc:40:74:af:60:04:20:
8b:2c:ce:66:18:4f:8c:94:e1:5b:78:41:c9:23:b3:f1:85:12:
3f:48:5f:c4:33:8e:d9:c9:0a:75:59:1b:3f:25:53:6d:8a:52:
0f:60:e2:6e:11:b1:39:a8:5f:86:89:5f:1a:c2:a9:61:da:ef:
32:46:ee:08:67:01:60:c5:95:b9:ad:6d:af:a8:a1:90:a8:00:
ef:7c:10:87:c0:45:ff:76:76:75:34:41:76:1b:82:38:8a:67:
96:e6:ea:3d:a9:88:c4:c2:95:57:50:a9:2e:39:d1:93:10:07:
83:0a:07:35:d0:98:0d:1c:90:6f:df:b4:ef:5e:d4:a9:91:c0:
cf:e8:81:9a:9b:1d:c2:52:1c:d0:3b:8d:a0:31:78:58:c4:5e:
ef:1f:b2:fa:cc:53:2b:c3:31:2d:27:08:4e:46:2b:06:7a:67:
75:c3:eb:7b:1f:7b:66:a1:d9:aa:c8:c2:63:c7:b3:ff:01:31:
95:45:68:06:53:cc:27:20:1c:ff:e1:b3:82:e0:89:fa:2a:b3:
2a:c2:12:40:e5:23:44:8b:a7:46:4a:19:c3:c4:93:87:e5:fc:
dc:f1:8d:c9:95:5f:70:7a:2e:17:9f:1b:db:08:c8:3b:64:e2:
27:af:de:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org