Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dk_JakLqRLWTUfSswBQ11umurqU.roa
File: dk_JakLqRLWTUfSswBQ11umurqU.roa (raw, json)
Hash identifier: 2NBBvsrRnuhl623rz23lPzTPZPyxhm6iyU1Qug/yIVo=
Subject key identifier: 76:4F:C9:6A:42:EA:44:B5:93:51:F4:AC:C0:14:35:D6:E9:AE:AE:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018AA7FF242C14611A87AD283C56756457D2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dk_JakLqRLWTUfSswBQ11umurqU.roa
Signing time: Mon 18 Sep 2023 11:13:50 +0000
ROA not before: Mon 18 Sep 2023 11:13:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.111.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:ff:24:2c:14:61:1a:87:ad:28:3c:56:75:64:57:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 18 11:13:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=764fc96a42ea44b59351f4acc01435d6e9aeaea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:53:b4:6a:21:74:00:4f:d7:ee:c7:2b:aa:
b2:f1:0f:46:7c:7e:18:c8:76:a9:8c:6e:9d:d8:c9:
91:aa:fc:71:be:cf:86:a0:06:69:68:2d:31:f1:30:
21:01:73:87:73:75:7e:62:4e:39:4d:b3:4e:de:e2:
15:aa:83:76:be:77:f2:8e:b5:63:f2:e4:25:b9:79:
cb:f7:12:39:dc:0a:65:63:a2:b6:ef:f6:83:ca:94:
54:d4:3f:da:bd:d6:57:51:12:82:ef:1e:ad:e1:4a:
86:9b:82:bb:62:09:f6:39:80:8b:71:f5:04:97:22:
18:5f:a9:0a:26:85:43:73:95:b1:19:ca:dc:ee:d0:
94:bf:bb:bc:fe:ae:de:08:9a:35:5e:ba:91:62:c8:
c1:2a:d2:20:74:64:b4:ae:ba:d0:83:2c:90:af:2e:
56:43:82:3a:83:24:6a:b0:ba:1c:f3:70:c8:06:2b:
eb:e9:b5:c4:f7:f0:cd:0a:7f:cb:21:62:4c:38:4c:
ed:4c:2e:70:47:c3:aa:99:02:5e:29:87:94:d4:4a:
b6:79:a0:15:79:8f:b7:ac:21:a7:15:50:e7:99:77:
f4:f6:da:33:6b:fd:5f:d7:88:68:06:30:8e:ce:8c:
5b:65:da:4c:77:6a:03:3b:9b:63:cc:57:a3:47:cc:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4F:C9:6A:42:EA:44:B5:93:51:F4:AC:C0:14:35:D6:E9:AE:AE:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dk_JakLqRLWTUfSswBQ11umurqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:14:f5:04:44:6e:98:3b:8a:53:e7:5b:a4:cb:ad:c7:fd:fe:
7f:2f:c1:f3:73:d2:f6:62:bf:c1:cc:e6:ae:4a:23:b1:2d:8d:
db:66:96:81:14:f0:a1:50:e6:4e:21:3c:b0:56:a7:26:7c:a3:
de:5a:62:cb:f5:14:a3:d0:52:01:0e:a1:58:21:e8:ec:b5:9d:
5a:49:fb:17:1d:fe:cb:a3:60:2c:f8:b5:bd:c4:ff:cb:56:3a:
71:fc:66:89:c4:8f:60:09:77:3f:1c:21:e0:ac:64:7a:82:50:
0f:89:62:a9:58:a7:35:a2:bf:c5:d7:77:2b:f2:34:99:e4:48:
f9:3e:a7:4f:72:55:00:7b:6b:98:3c:8c:fe:3a:b7:f3:45:a4:
dd:4f:c3:6e:a7:31:21:b7:ed:b9:83:32:1c:6a:77:9c:bb:d2:
15:84:e9:af:0b:b5:0a:4a:e2:37:e3:b6:1d:ef:64:4e:73:9f:
f4:05:a3:e9:20:1d:b0:a0:22:0a:d9:bb:a8:5f:bb:6f:0c:30:
c0:bd:f8:e6:af:ed:fa:fd:de:a3:38:b7:3c:d0:82:e8:7e:ce:
f3:a3:3a:6c:5f:7e:c2:c0:78:ba:90:7b:4b:11:1f:21:77:7c:
ec:7c:ce:4e:ec:00:64:0a:05:4b:fe:29:3f:aa:7d:e5:c1:42:
bd:f3:eb:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org