Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X6L5GM1nlRDynIyAdjcptGbbIA8.roa
File: X6L5GM1nlRDynIyAdjcptGbbIA8.roa (raw, json)
Hash identifier: NhAhVjY4NiKsMNrOXNzyz+hU497Xc33P9yrcMVsMfK8=
Subject key identifier: 5F:A2:F9:18:CD:67:95:10:F2:9C:8C:80:76:37:29:B4:66:DB:20:0F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01878FC01108FDF35E43E56C626B5525ACC3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X6L5GM1nlRDynIyAdjcptGbbIA8.roa
Signing time: Mon 17 Apr 2023 15:05:41 +0000
ROA not before: Mon 17 Apr 2023 15:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8f:c0:11:08:fd:f3:5e:43:e5:6c:62:6b:55:25:ac:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 17 15:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fa2f918cd679510f29c8c80763729b466db200f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d6:ae:19:95:bb:fe:64:97:89:26:8e:b9:9f:
f9:14:8d:33:af:a2:be:ca:d2:21:2a:56:83:64:b3:
cd:e7:21:f0:1a:a8:68:4b:1d:d9:e0:35:7b:c3:e3:
c6:c8:8d:c6:a9:62:88:d7:d8:62:a5:59:4e:3f:68:
21:4c:8a:17:e1:63:37:71:ea:01:c6:1a:7f:1b:70:
1e:e7:2d:cc:a5:80:84:d1:c8:40:22:5f:56:05:03:
1c:33:d7:b4:01:75:7a:16:28:e6:b7:ba:3a:3a:36:
57:ec:1c:ed:da:93:de:82:5e:cc:41:ae:78:5f:61:
32:5c:e0:a4:04:d0:d4:33:52:26:e3:48:37:26:d7:
5e:5d:6d:82:07:8e:fc:3b:51:66:df:4e:c8:a5:f4:
86:20:f2:9d:e7:4e:ba:03:97:ba:ff:d9:28:11:4a:
79:5f:7d:14:6a:17:45:18:62:b3:4f:d4:7e:1e:61:
8d:98:c2:97:5e:ce:d6:24:69:1c:aa:d1:b5:75:f9:
9f:3f:e1:2d:11:ba:a3:5b:f9:02:d7:1e:4b:ac:d1:
7d:bb:57:58:eb:7d:78:24:66:81:d5:b5:24:80:36:
06:d8:92:22:17:af:0d:52:86:e7:a1:f9:21:28:ee:
e3:44:a3:bd:33:4a:96:b7:13:e8:8c:33:12:ff:82:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A2:F9:18:CD:67:95:10:F2:9C:8C:80:76:37:29:B4:66:DB:20:0F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X6L5GM1nlRDynIyAdjcptGbbIA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/24
163.5.59.0/24
163.5.83.0-163.5.84.255
163.5.120.0/24
163.5.142.0-163.5.144.255
163.5.154.0/24
163.5.192.0/23
163.5.214.0/23
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a5:a6:14:a9:ee:19:a3:ac:25:de:98:70:a2:6a:02:1e:45:
25:06:67:2b:5c:e5:ae:2a:4d:01:8e:c2:36:e4:46:ca:fb:3d:
38:21:c7:2e:9e:ee:b8:27:c3:39:e9:7b:3d:b8:6e:6e:08:14:
e7:c2:3d:28:59:78:b9:0a:ab:e6:68:08:52:33:8e:28:ed:23:
16:b9:52:18:d3:38:da:a4:78:fb:e6:fd:ee:7f:6d:65:fd:2d:
2c:ad:75:d2:8a:42:6c:1f:5f:05:f9:7f:bc:1d:4f:c0:21:d3:
c2:6a:9a:d0:b8:4f:e3:ee:12:d3:59:17:66:41:ad:44:23:e1:
5a:a5:8d:7a:04:8e:8a:a8:a4:71:d8:cf:26:4a:7c:0e:da:ea:
91:69:93:c3:5c:e5:65:00:30:24:e5:9b:13:63:40:ac:12:9a:
17:f4:6e:36:52:6c:9b:69:7e:93:08:d4:cb:29:5c:ba:ff:75:
14:8a:15:04:aa:0c:64:a8:3d:05:f5:eb:74:ff:98:66:93:34:
65:64:32:6e:02:da:ad:fc:2d:f2:22:d5:2f:0e:c2:be:9b:28:
c7:bf:a7:3a:5b:d4:fa:80:e7:54:fa:87:a3:3b:7a:29:7e:74:
01:db:f8:b7:cb:dd:56:5e:ca:62:42:c3:7a:72:41:00:b4:89:
93:e6:9e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org