Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/c3seON_OiWhfj90jGHOFN1YUgtQ.roa
File: c3seON_OiWhfj90jGHOFN1YUgtQ.roa (raw, json)
Hash identifier: 05oyFYzNAP9zdnspwKJvWRYNDVKModEGYNM7pMGFEwc=
Subject key identifier: 73:7B:1E:38:DF:CE:89:68:5F:8F:DD:23:18:73:85:37:56:14:82:D4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042BEF7D468B56E7038006650416104
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/c3seON_OiWhfj90jGHOFN1YUgtQ.roa
Signing time: Mon 02 Jan 2023 02:15:00 +0000
ROA not before: Mon 02 Jan 2023 02:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.2.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.65.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
163.5.85.0/24 maxlen: 24
163.5.81.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.12.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.50.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.47.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.57.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:be:f7:d4:68:b5:6e:70:38:00:66:50:41:61:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737b1e38dfce89685f8fdd2318738537561482d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:ac:0d:f1:7c:7c:16:01:1b:b4:76:db:49:
0c:f2:09:ef:fe:ac:73:50:6b:73:77:7d:81:92:e0:
3c:78:f8:0b:54:9a:20:8d:24:19:70:f8:1b:c5:f8:
9e:8f:56:70:51:7e:e3:86:00:dc:81:c6:be:cc:d3:
2c:5e:cf:69:02:cd:aa:c7:6f:a1:6f:e4:c3:06:b8:
3d:0d:67:8e:e6:00:bd:ac:4a:d3:df:ab:da:6e:57:
00:84:fa:1e:37:b5:58:3b:1c:c6:2a:da:87:08:90:
11:e1:1e:61:40:32:29:d0:2b:a4:3f:86:46:a9:4f:
a0:bb:9e:6b:79:0e:ba:bf:eb:d8:d8:3c:da:7e:79:
c3:45:78:5d:e7:0a:bf:be:ee:38:ca:03:9b:55:68:
76:3e:1f:bd:13:02:8a:3e:94:00:26:3c:1d:63:59:
a1:9b:18:0e:26:ac:50:34:04:b1:6f:40:47:e2:99:
17:73:b7:eb:3a:86:12:82:9d:c0:2d:b8:ec:7b:2f:
ed:f7:0a:b8:13:32:30:69:e7:5d:b2:e1:67:f0:33:
e6:f8:f8:8d:1d:39:5c:14:5c:c1:5b:b5:ed:27:24:
6b:67:cf:d1:90:b6:60:0f:d1:6a:41:76:ed:9c:40:
4f:7e:8c:00:3e:f7:99:19:b6:9a:53:26:04:62:61:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7B:1E:38:DF:CE:89:68:5F:8F:DD:23:18:73:85:37:56:14:82:D4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/c3seON_OiWhfj90jGHOFN1YUgtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.2.0/24
163.5.5.0/24
163.5.10.0-163.5.14.255
163.5.20.0/24
163.5.23.0/24
163.5.40.0-163.5.57.255
163.5.65.0/24
163.5.68.0/23
163.5.73.0/24
163.5.80.0-163.5.82.255
163.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:9a:b3:70:de:2a:2a:12:49:d4:d3:5e:8d:66:9e:e1:4d:ef:
53:6f:5b:77:30:fc:05:07:f0:0f:31:3b:56:a6:00:49:ba:04:
4b:27:2e:b1:21:57:b4:27:b9:6d:61:a9:eb:83:6b:02:fe:93:
2e:34:b1:63:79:17:df:a8:06:46:a5:79:4b:2e:d4:55:59:d0:
f4:3b:11:57:be:d9:90:33:d8:e5:e4:01:f6:b9:3d:82:53:02:
94:05:6a:81:4f:ef:32:c0:f1:71:01:3b:32:64:e0:02:0b:31:
7a:f3:d6:a1:fb:3e:58:9f:11:4f:be:a6:e5:1c:5f:7e:95:11:
3d:89:50:11:d6:bb:2b:60:28:57:7e:10:42:85:df:1f:82:b1:
b3:92:e6:95:44:ce:cb:11:11:88:92:3a:d6:a8:66:15:c8:a1:
82:f8:d0:b8:21:39:84:19:f2:86:a7:d8:ad:99:1a:1e:3d:33:
13:df:54:52:2d:a2:69:f4:c7:7c:8b:bd:b2:29:79:88:a8:c3:
01:b9:85:1a:e0:6b:b6:d1:b3:99:ae:b2:91:71:0b:77:39:29:
05:80:9e:0a:9c:4c:e7:29:be:25:f0:0c:02:8e:4f:91:0b:3d:
72:38:2a:3d:db:08:a6:da:ed:3b:4c:a5:ec:9b:79:f3:c1:95:
a0:96:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org