Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lKbSGODlVF-UMuvQS7lesSj_nts.roa
File: lKbSGODlVF-UMuvQS7lesSj_nts.roa (raw, json)
Hash identifier: 6mt9OkAIHbNTFdFIK2jxgDImGPq/r8WGVF3npRyTPDI=
Subject key identifier: 94:A6:D2:18:E0:E5:54:5F:94:32:EB:D0:4B:B9:5E:B1:28:FF:9E:DB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018596493BF849EAD665950E29F3AA88824B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lKbSGODlVF-UMuvQS7lesSj_nts.roa
Signing time: Mon 09 Jan 2023 11:27:39 +0000
ROA not before: Mon 09 Jan 2023 11:27:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.106.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:49:3b:f8:49:ea:d6:65:95:0e:29:f3:aa:88:82:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 9 11:27:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a6d218e0e5545f9432ebd04bb95eb128ff9edb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:6e:92:b8:18:17:ad:ca:bb:ad:cc:fa:ce:
ac:05:13:58:78:98:eb:f9:a8:cc:6b:5f:15:d9:52:
cb:c2:ce:15:be:35:62:44:af:e7:0a:8f:89:f9:25:
3d:68:e4:69:6d:8b:ec:96:26:60:4e:3e:d5:46:8e:
a2:44:84:ea:8a:74:6e:93:2b:fb:32:13:c1:4d:b5:
15:d9:4b:a6:42:00:16:90:30:67:04:66:c1:52:b7:
9f:10:fe:51:07:11:ed:79:cc:3d:c0:e2:86:ee:ca:
09:96:e2:fc:4a:0f:de:cf:35:73:ed:a6:40:8a:24:
e3:91:e2:97:69:f2:30:fc:96:97:c5:52:b9:88:cb:
5a:26:1e:e3:2e:1d:20:be:3c:7c:02:f1:be:9c:07:
96:b7:b5:77:22:ad:db:c0:2a:d8:a3:60:73:db:f6:
cf:f9:d8:58:68:8e:bf:b6:22:36:2a:69:d3:8e:6c:
4b:e1:ef:65:96:74:97:8c:ca:2b:49:2e:d5:a8:c3:
71:cc:d4:2c:51:91:f9:80:5a:01:73:70:20:ba:9f:
ce:83:ce:5a:38:28:7e:41:72:3f:ae:07:b9:83:bb:
1a:e7:e3:06:2a:22:6c:21:9b:e2:52:17:cc:f2:b9:
5b:08:f7:e9:ed:4e:86:b4:30:80:1c:94:3d:a1:44:
b6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A6:D2:18:E0:E5:54:5F:94:32:EB:D0:4B:B9:5E:B1:28:FF:9E:DB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lKbSGODlVF-UMuvQS7lesSj_nts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.106.0/24
163.5.115.0/24
163.5.118.0/23
163.5.121.0/24
163.5.153.0/24
163.5.159.0/24
163.5.168.0/24
163.5.212.0/24
163.5.215.0/24
163.5.220.0/24
163.5.225.0/24
163.5.229.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
00:45:75:1b:b8:43:27:69:0f:f5:3d:87:dd:c4:52:af:19:35:
3a:ee:41:e4:27:f0:a7:e8:d6:bc:a0:38:71:d3:7f:a6:1e:30:
1f:24:46:ab:87:bc:de:8c:95:c2:e0:86:1f:0c:ec:55:29:54:
c3:a1:41:c6:a3:75:ba:d7:75:cc:bd:ca:56:7f:51:1a:7a:ac:
10:3e:2d:74:6f:06:d6:2a:01:ad:c6:ca:07:a6:0b:16:6e:18:
18:2b:8c:f0:5f:09:07:a9:d3:b4:32:16:e8:b3:29:16:b7:03:
82:37:8c:91:90:89:df:57:ee:0d:d0:e9:81:5c:de:95:87:ed:
47:af:51:70:0e:d1:60:c7:fd:fc:0a:09:7f:3b:f0:ab:bd:6c:
27:85:1f:31:c2:91:c6:3e:b2:e5:44:34:ac:89:a3:c0:91:c4:
df:b7:d7:35:f5:e1:c9:ce:23:eb:3f:86:87:31:99:f4:5b:66:
18:77:a0:7a:d3:9b:07:35:be:48:d6:0f:97:c8:e7:8f:a3:f6:
8c:14:5f:37:42:75:cb:4d:65:14:77:57:fe:ff:2b:51:76:54:
ba:5a:8d:9d:52:88:eb:18:c9:a9:8f:b6:db:18:57:5d:37:b5:
0e:4f:2f:72:24:de:a7:7c:a0:71:fd:25:54:97:de:b2:f6:7d:
6a:88:2d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org