Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UfuS19kLticYAZfvANUHQewRhNo.roa
File: UfuS19kLticYAZfvANUHQewRhNo.roa (raw, json)
Hash identifier: tq9/EwYykAHzh7MLcr3Ul0k84DkZETF7hkkL4jHkfdw=
Subject key identifier: 51:FB:92:D7:D9:0B:B6:27:18:01:97:EF:00:D5:07:41:EC:11:84:DA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018647F167984C6819A8628BD65191F1B2C8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UfuS19kLticYAZfvANUHQewRhNo.roa
Signing time: Sun 12 Feb 2023 23:24:08 +0000
ROA not before: Sun 12 Feb 2023 23:24:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:47:f1:67:98:4c:68:19:a8:62:8b:d6:51:91:f1:b2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 12 23:24:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51fb92d7d90bb627180197ef00d50741ec1184da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:02:a8:1e:b4:ab:0b:90:14:a4:4e:0e:61:
ec:90:a6:da:7f:87:a1:49:e6:68:2b:27:f2:26:51:
de:61:69:01:4c:e4:c3:a1:a8:97:05:8f:70:91:bb:
95:f1:57:6d:d7:d8:55:80:e9:40:ea:e1:49:02:6c:
e0:26:bb:40:a4:f4:f7:53:2c:46:61:fe:3e:0c:20:
aa:c0:93:12:8c:18:0e:9d:09:02:23:84:f7:bd:c5:
f4:d1:55:2e:69:b7:b2:49:71:73:6c:44:64:21:12:
03:27:0e:8f:5b:ff:90:84:3a:bf:72:b0:65:3e:87:
35:36:92:2d:b4:a4:55:5e:35:18:d0:b8:f6:02:20:
ee:45:a7:7f:f0:88:86:5d:27:34:5d:41:1a:50:c6:
55:0c:c3:0a:5e:c6:0e:cf:8b:0a:df:2c:a4:72:50:
f3:23:f0:bd:6e:63:85:d5:14:b5:60:73:b3:21:dc:
c6:9a:a4:6e:ca:4b:30:fe:4a:e1:97:cf:b2:be:74:
5a:ed:f9:ca:be:38:e8:34:41:a2:8a:b8:76:9c:76:
ae:8d:50:6f:91:24:9d:87:85:2a:b1:2c:f3:21:74:
56:39:8c:8c:3a:f5:ff:38:87:69:51:54:6e:d5:22:
2e:6a:c2:81:7b:ad:b8:04:15:5b:e5:81:30:2c:8f:
ff:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:92:D7:D9:0B:B6:27:18:01:97:EF:00:D5:07:41:EC:11:84:DA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UfuS19kLticYAZfvANUHQewRhNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.105.0-163.5.106.255
163.5.115.0/24
163.5.118.0/23
163.5.121.0/24
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.212.0/24
163.5.215.0/24
163.5.220.0/24
163.5.225.0/24
163.5.229.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f6:72:82:a1:06:3d:25:11:08:7d:e7:7f:29:1d:5b:b4:4e:
24:78:87:c6:3d:91:f4:fc:15:ec:fc:0f:f2:8c:e4:40:6b:83:
98:dc:04:f8:91:b6:ce:3d:a5:4f:b9:e5:b2:ae:79:65:c9:66:
3c:3c:28:bc:fd:fb:18:5c:87:07:9b:74:c3:69:35:32:38:c8:
21:88:df:b4:56:6d:fb:fb:fa:07:ff:ac:3d:5f:3b:75:d1:ad:
ae:51:26:00:3c:4e:e4:e2:78:be:26:e7:91:dd:13:77:53:28:
70:4f:2f:6a:9b:7a:6b:d3:aa:a3:ec:1e:9c:7b:6a:f2:7d:09:
35:04:47:e7:87:68:49:42:ce:72:cf:a6:da:49:f8:09:ff:2c:
50:70:47:58:b5:4a:79:87:ed:37:94:25:c1:ee:63:bf:03:69:
b1:b7:05:12:38:e3:8f:94:85:86:79:85:36:20:24:cf:e2:2d:
7d:02:c8:60:51:de:1e:0f:80:10:e4:b5:38:39:2b:8e:e5:13:
8d:70:91:60:84:5b:73:25:98:f4:f0:1a:0e:64:c6:67:b8:33:
d0:25:d8:2e:f2:22:d5:cf:db:f3:e8:b4:b2:a8:c0:69:d7:34:
22:43:60:6f:40:c4:28:d5:1f:05:de:59:54:f7:88:c0:3b:e1:
66:d7:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org