Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jQSpwAHJnJDD2HVvQJYfJ0_lljs.roa
File: jQSpwAHJnJDD2HVvQJYfJ0_lljs.roa (raw, json)
Hash identifier: DVHrk8wlob2W1+0M3GbYecCLvrRHJ0tXpfH3fNS2Rtk=
Subject key identifier: 8D:04:A9:C0:01:C9:9C:90:C3:D8:75:6F:40:96:1F:27:4F:E5:96:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EECD687EF6483D0FE39834BA8C62EDBC9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jQSpwAHJnJDD2HVvQJYfJ0_lljs.roa
Signing time: Wed 17 Apr 2024 16:14:26 +0000
ROA not before: Wed 17 Apr 2024 16:14:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198831
IP address blocks: 163.5.59.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 08:19:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:d6:87:ef:64:83:d0:fe:39:83:4b:a8:c6:2e:db:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 17 16:14:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d04a9c001c99c90c3d8756f40961f274fe5963b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:f9:15:a9:8a:29:bb:70:47:7d:f3:ae:94:
29:5a:a6:82:fc:4b:b6:b2:58:f6:b4:f6:99:9a:ac:
7b:9f:4f:34:1a:12:2e:2d:ce:73:08:07:09:ca:1c:
4d:50:7a:a2:19:36:93:b8:f4:94:4d:ae:c4:19:53:
87:6e:df:e0:18:10:88:17:a0:a1:38:89:34:b7:f1:
7a:27:c1:69:22:dc:31:10:f3:b9:39:d7:34:0f:a9:
36:99:95:de:0d:11:2a:24:2f:e5:6c:8f:67:14:87:
dc:16:da:26:cd:29:d2:39:36:15:79:91:fb:74:28:
9d:d0:fc:cc:a4:1c:57:a0:21:d6:b4:4c:b4:ae:86:
e4:11:27:98:b2:49:09:b9:5f:69:53:3e:48:1f:ba:
dc:b5:85:1c:3e:1b:32:93:33:0a:71:bd:59:0c:1e:
5d:42:13:c3:f5:d8:d4:f9:60:d8:25:29:1f:9d:19:
65:cb:08:f1:02:43:08:fc:5b:b8:45:c8:89:2a:7b:
53:b6:ba:65:f5:30:ad:bf:4a:6a:76:fd:2e:38:c6:
77:17:f9:6c:47:86:18:ba:8c:0f:9d:a2:26:38:cb:
73:07:19:68:64:29:73:4c:28:ac:2b:4b:8f:da:c7:
49:5e:5a:ae:9e:31:ee:0b:14:89:d3:f7:cd:f3:28:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:A9:C0:01:C9:9C:90:C3:D8:75:6F:40:96:1F:27:4F:E5:96:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jQSpwAHJnJDD2HVvQJYfJ0_lljs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
163.5.148.0/24
163.5.154.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:98:fb:fb:15:13:e1:66:b4:e6:0c:97:6b:d0:62:38:65:05:
9f:b2:2d:f9:55:50:a8:32:b1:16:26:cb:4f:b0:69:74:6c:02:
7b:81:91:6d:5a:84:7e:97:30:67:30:60:8b:44:78:c2:ac:3c:
65:c8:5c:35:d1:15:13:bc:4f:22:a4:f6:2c:60:ae:f6:8a:0b:
b9:9f:dc:bc:b7:91:84:68:eb:4c:42:d0:42:b4:e3:13:b4:f9:
91:72:89:8f:0d:de:dd:06:e8:93:2b:41:5b:2c:4c:d3:55:47:
49:17:0f:16:7b:14:04:ef:82:2f:3c:8d:da:b1:2e:9c:05:88:
c3:c4:43:65:9f:54:9f:43:69:a6:0b:c8:60:3f:cd:ab:b0:47:
89:25:d3:e5:be:be:d2:d9:5b:01:ef:32:6e:99:ce:76:3b:48:
f4:d0:f9:dc:df:d9:49:7b:5a:68:4b:88:6e:30:ed:56:20:f5:
b0:88:72:15:f2:33:60:a4:68:30:3d:ff:6d:da:b2:37:21:99:
49:a9:6e:b5:23:54:51:af:2e:92:19:d8:aa:0c:2c:11:7d:a8:
74:3b:98:8d:66:da:8e:ad:f9:72:c6:b8:2d:6a:5e:f3:be:89:
f5:65:b1:4f:3a:0f:15:db:b4:ba:75:cd:48:ea:46:3d:fd:0e:
7b:0f:e5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:51:39 2024 by rpki-client on console-fra.rpki-client.org