Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jK406TUKw_uaIkKCxwQFik9O_58.roa
File: jK406TUKw_uaIkKCxwQFik9O_58.roa (raw, json)
Hash identifier: Ou+bQThaW3cPxw2IV33BWxBqp5bUvb4KoexBn8IcnUU=
Subject key identifier: 8C:AE:34:E9:35:0A:C3:FB:9A:22:42:82:C7:04:05:8A:4F:4E:FF:9F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C54CD77880FC4D893B234A193F07A2309
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jK406TUKw_uaIkKCxwQFik9O_58.roa
Signing time: Sun 10 Dec 2023 17:36:40 +0000
ROA not before: Sun 10 Dec 2023 17:36:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.212.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:54:cd:77:88:0f:c4:d8:93:b2:34:a1:93:f0:7a:23:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 10 17:36:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cae34e9350ac3fb9a224282c704058a4f4eff9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3d:f9:11:34:05:eb:a7:b3:ed:ed:85:eb:f1:
7c:2b:65:f7:de:3d:59:e4:98:68:ef:ba:08:93:c1:
81:2c:18:d5:16:8d:ae:6f:70:99:5c:ce:3d:d7:b7:
0e:96:21:ed:26:6f:3d:fa:ee:ad:1e:d6:c2:93:d2:
c3:18:cb:26:f2:92:c9:c7:78:13:61:e2:9f:20:15:
6b:41:b0:2d:f6:bf:d2:a9:a5:b9:20:bf:70:a8:9c:
25:bb:3e:a2:05:c9:17:14:13:07:aa:f2:87:e8:fd:
22:38:c7:d7:fd:ba:88:91:df:79:6d:e6:d4:f6:88:
60:11:98:6d:69:2b:03:9c:99:ba:0f:d3:6c:c1:67:
ad:94:ae:82:dd:62:e5:ab:76:73:f8:bc:f0:9b:af:
fc:3e:65:7b:da:80:68:40:20:32:fd:c9:c7:e3:a3:
af:6e:6b:3c:4e:7a:59:5e:73:20:99:af:b3:0c:5f:
23:87:aa:2d:4c:76:7e:f9:9d:2e:86:73:74:9b:a4:
ff:0c:15:d9:3f:74:e9:ec:6d:55:02:2f:ba:c0:1b:
29:b4:eb:b0:ff:2a:b6:1e:fe:61:85:df:68:a1:b1:
85:f2:e7:f3:96:89:0d:fa:ce:c2:5c:8f:30:77:01:
f8:42:58:f8:47:42:3e:1d:21:1f:0c:a1:7d:2e:67:
3b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AE:34:E9:35:0A:C3:FB:9A:22:42:82:C7:04:05:8A:4F:4E:FF:9F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jK406TUKw_uaIkKCxwQFik9O_58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.61.0/24
163.5.141.0/24
163.5.212.0/24
163.5.219.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ee:0e:c5:e0:95:51:17:4d:94:f8:04:c2:c7:ab:a1:0d:f6:
b2:6c:7f:c6:c2:50:fa:1e:b3:0e:df:e5:ce:59:42:28:53:f5:
d2:2a:73:bf:39:c2:14:51:17:99:dc:12:0a:bb:b8:f5:61:8b:
63:4f:f1:2f:de:65:3d:03:b1:d1:83:d4:44:4c:16:d7:7d:4d:
0e:8f:37:55:7d:d3:46:72:a8:21:d2:a5:d8:db:ad:38:65:be:
e7:f6:c3:5b:a2:a9:f1:ca:af:e1:37:b8:6b:60:89:8c:53:b7:
60:7e:c8:a2:41:87:10:94:dc:b5:22:03:48:96:84:91:0a:87:
cb:7b:6a:d5:88:c8:26:b0:e9:a2:82:58:ad:ca:05:02:38:59:
b8:87:51:89:17:14:40:07:1e:da:d6:a2:ac:3b:c2:f1:e7:85:
9a:dd:c2:98:23:47:de:0c:69:bb:9b:2e:ea:e8:c6:79:9b:96:
ec:c2:29:fa:ad:08:a2:ad:1b:e9:8c:a5:c9:82:e9:67:29:78:
0e:9e:d5:02:ec:28:67:57:ab:35:91:e9:7a:9f:a3:6a:4d:41:
82:10:31:c9:44:ff:41:56:ab:b6:1c:b8:0c:37:19:a4:39:f8:
52:4e:ca:f6:3c:a3:31:f4:8e:a4:1c:a6:1a:f0:5c:bd:73:af:
0a:2a:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org