Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V3lB48n1joZdq9nVqgtNgVaohro.roa
File: V3lB48n1joZdq9nVqgtNgVaohro.roa (raw, json)
Hash identifier: NbmeN0b4OmxsizyLcsDs+AjG3+ejTj4omhQLO86Lhjs=
Subject key identifier: 57:79:41:E3:C9:F5:8E:86:5D:AB:D9:D5:AA:0B:4D:81:56:A8:86:BA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42560164FAC66916816FB7F444B051C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V3lB48n1joZdq9nVqgtNgVaohro.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.84.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:60:16:4f:ac:66:91:68:16:fb:7f:44:4b:05:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=577941e3c9f58e865dabd9d5aa0b4d8156a886ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9f:dd:20:47:d8:0f:07:b2:a5:ca:fe:48:5c:
0d:0c:06:3f:27:08:9d:6c:95:c8:a2:c3:12:69:63:
03:1c:89:b7:9d:61:a7:18:77:f5:ad:f8:1a:a5:8d:
3f:57:d9:d8:8b:1b:45:66:73:0b:39:38:b5:0c:f1:
8d:29:95:de:27:a3:f4:31:ee:78:12:54:03:0d:bd:
c9:d3:93:e9:b9:02:4b:0a:96:dd:84:5a:a9:54:02:
63:bc:be:76:9d:35:7f:bc:bd:12:91:1d:96:72:9b:
c7:4e:ab:86:39:da:ac:84:f4:87:59:f7:57:2c:6b:
32:39:fb:86:23:02:87:2a:77:fc:9f:ab:8b:13:07:
61:e0:9c:93:d4:d1:21:2c:0d:f9:cf:6a:bd:1a:b1:
09:69:47:fc:13:19:1e:e8:c6:94:22:15:82:9a:9d:
cf:db:25:0d:99:f0:78:bf:f8:4c:12:5b:23:43:21:
18:81:a5:40:39:c6:19:61:4e:61:b4:96:fa:d3:3d:
73:1c:25:8e:ec:ee:d4:b8:1d:81:3b:2a:f6:43:1d:
40:5f:67:75:91:58:f4:fc:c2:b2:02:ad:1f:11:ee:
b5:35:bf:ca:52:97:99:f4:80:89:c1:d8:fc:b0:6a:
2a:24:11:30:2c:d0:f7:bc:11:5b:e5:bf:be:c4:e0:
32:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:41:E3:C9:F5:8E:86:5D:AB:D9:D5:AA:0B:4D:81:56:A8:86:BA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/V3lB48n1joZdq9nVqgtNgVaohro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.84.0/24
163.5.127.0/24
163.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
74:40:37:3c:c7:3a:36:09:d6:9d:66:8d:62:aa:d2:62:d2:69:
8f:41:ca:f7:03:4d:a5:55:d3:04:e5:c9:7d:a0:48:fb:5a:d7:
7e:78:98:bb:6b:c3:86:4f:6e:30:fd:fb:18:08:cb:01:df:08:
21:d7:4b:a4:16:72:34:ba:a9:a7:c8:ef:eb:49:5b:9a:49:ca:
f4:34:bc:3d:4a:4c:ae:d4:19:d3:ff:86:5e:d3:9c:b2:5f:fa:
13:0e:87:5d:3b:63:1e:02:94:a4:f7:7c:af:b2:94:2f:82:d2:
4a:e8:ee:59:ca:9c:4c:1b:05:97:84:39:da:89:11:7a:3d:ad:
33:3a:2f:0b:ad:a4:bc:26:e2:c1:6c:21:ad:4e:fa:4d:55:49:
a4:f0:83:fd:ea:a8:21:fa:e1:9b:5d:0d:64:12:b6:1b:ad:ab:
1f:44:55:c1:a4:6a:a7:b7:39:cc:cc:c9:fa:ec:f8:20:de:d0:
4d:31:0b:08:eb:67:a7:b9:d9:f3:fd:28:31:4f:79:62:51:18:
c1:5e:3c:45:db:28:86:aa:9e:1a:fc:79:06:0f:ac:43:98:4c:
96:74:a7:04:7d:d0:c1:5d:03:7d:7d:66:5b:af:95:ad:70:6c:
e4:ed:1d:ee:a1:c3:69:ae:41:9e:12:e3:ea:a2:61:80:8b:0a:
1c:38:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 5 21:23:37 2024 by rpki-client on console-fra.rpki-client.org