Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jFbwEkjTJWMbbJDfvkO17tPGPTI.roa
File: jFbwEkjTJWMbbJDfvkO17tPGPTI.roa (raw, json)
Hash identifier: sT6KeTF5uWyizbIdi1CuPmpxnz07VzQS7Dn58P9lyKc=
Subject key identifier: 8C:56:F0:12:48:D3:25:63:1B:6C:90:DF:BE:43:B5:EE:D3:C6:3D:32
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01882E45EC5A92B86FE079E62B45EEEF8793
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jFbwEkjTJWMbbJDfvkO17tPGPTI.roa
Signing time: Thu 18 May 2023 09:51:54 +0000
ROA not before: Thu 18 May 2023 09:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 163.5.123.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 May 2023 13:21:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:45:ec:5a:92:b8:6f:e0:79:e6:2b:45:ee:ef:87:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 18 09:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c56f01248d325631b6c90dfbe43b5eed3c63d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:03:8c:a6:d2:76:fd:6d:00:8a:cc:55:7d:
b1:87:38:f0:ff:5f:46:50:84:41:16:5e:1d:8f:42:
28:9c:06:80:dd:d9:94:75:89:a4:7d:7f:77:3c:26:
85:05:b9:15:49:d3:f0:aa:1f:ac:2d:d9:49:b2:42:
8e:b0:3e:db:a0:c8:8a:4f:15:d4:68:c4:61:02:74:
f4:b5:17:36:78:d7:82:6e:84:a5:f6:f1:ed:7c:67:
d0:08:5a:2a:55:18:d8:e2:55:de:29:39:74:2b:29:
3b:8c:61:7b:9f:48:94:09:bd:38:29:03:d4:b8:17:
c7:25:c0:eb:16:9d:91:c2:cd:02:b4:31:c0:fd:11:
23:18:ef:84:28:19:df:33:1a:30:73:23:0f:b0:d6:
6e:29:5b:8e:30:c5:92:7c:0c:e3:2b:04:a5:5e:4b:
bc:f4:9c:3f:9b:28:b6:63:d7:3e:6b:d3:f6:a6:fa:
d8:10:35:0d:eb:64:51:0a:ce:d6:bd:cb:0a:98:c9:
7e:e4:51:a8:aa:f0:9f:4d:33:9e:e5:c9:d8:56:78:
7b:50:0a:10:48:7f:c4:cf:a1:1d:5f:a1:c4:8d:97:
fc:78:bb:be:1e:52:d0:85:11:a1:b8:f3:32:9f:6e:
0c:7c:fe:c2:bd:86:61:07:d7:08:6a:d5:f2:64:10:
ce:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:56:F0:12:48:D3:25:63:1B:6C:90:DF:BE:43:B5:EE:D3:C6:3D:32
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jFbwEkjTJWMbbJDfvkO17tPGPTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.123.0/24
163.5.156.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:c8:08:66:64:09:a4:35:d3:f6:ee:c0:79:1d:1a:54:b9:db:
4e:d4:34:80:74:ea:e3:98:93:11:ac:55:5a:f9:b1:7a:02:22:
d5:d0:da:af:b6:cf:1a:2e:f9:8a:3c:6e:f0:34:92:d4:6a:3d:
23:c9:27:53:a6:60:11:56:b8:60:9f:82:65:c9:da:8f:a4:5b:
91:ad:bb:9b:1c:59:55:86:e2:af:e9:a2:06:fe:0e:2f:af:4b:
81:55:ca:c8:ba:75:8f:46:68:a8:75:d5:a1:65:95:09:38:ba:
44:11:2f:30:93:bf:0f:f2:01:52:c5:c0:9a:24:8d:22:3d:7c:
fd:5f:ea:6d:c5:11:2b:56:56:0d:3d:1d:c3:b7:44:ee:aa:0a:
73:c8:f4:f1:30:ff:a3:1d:61:67:c5:f3:cc:d8:45:f2:c7:a8:
ac:01:b3:c8:f8:83:90:24:29:bb:98:b1:4d:83:2c:54:59:dc:
b4:ec:d1:e2:39:ea:f1:30:1d:c4:18:3a:0d:e8:0e:43:16:95:
9e:64:2b:60:68:81:6c:7e:66:df:22:13:f9:b3:1c:7d:e0:5c:
aa:10:31:3d:1e:e5:41:a6:0f:d8:5d:56:cb:14:52:70:c7:2d:
64:b1:eb:0a:41:cb:41:b0:81:22:66:26:97:f2:7d:a2:ef:92:
34:fd:cf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:34 2024 by rpki-client on console-ams.rpki-client.org