Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n7_g5fhLQSPJZlq0_-D8PpU6zCQ.roa
File: n7_g5fhLQSPJZlq0_-D8PpU6zCQ.roa (raw, json)
Hash identifier: kIhlYIi8nphWqH9HS4+Ee+1P5vNTk9uNdObqRvLUqFM=
Subject key identifier: 9F:BF:E0:E5:F8:4B:41:23:C9:66:5A:B4:FF:E0:FC:3E:95:3A:CC:24
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042CFB3F269675B7A6BB682A29C1B4A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n7_g5fhLQSPJZlq0_-D8PpU6zCQ.roa
Signing time: Mon 02 Jan 2023 02:15:04 +0000
ROA not before: Mon 02 Jan 2023 02:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:cf:b3:f2:69:67:5b:7a:6b:b6:82:a2:9c:1b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fbfe0e5f84b4123c9665ab4ffe0fc3e953acc24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:07:1e:f7:70:1c:33:84:44:f4:13:b1:7b:
79:13:88:60:00:b0:a1:28:a1:41:63:bd:58:96:58:
d0:06:b5:8e:52:1c:6d:9c:d3:c8:c1:17:4a:19:8a:
93:c1:5c:ba:53:cc:05:d9:7e:63:79:d9:f4:5c:5f:
9a:34:ae:4f:50:68:a7:a4:f0:7d:ab:93:0c:e9:84:
4a:4e:73:08:32:f0:ca:c2:8f:d5:23:ef:04:76:b8:
b1:f7:07:3b:64:56:0f:15:e8:2a:bb:6b:1a:3f:c5:
2c:a2:bf:49:89:80:54:f7:b6:73:d7:89:68:e2:c5:
b9:11:b5:f3:ba:3b:d1:1a:1f:24:61:2f:48:4b:85:
b3:12:8d:a3:48:c2:17:47:79:69:df:ae:a2:21:f3:
f3:7e:88:5d:15:80:89:2b:73:97:74:32:68:6d:84:
97:c1:34:b0:d2:e4:90:3f:04:1f:bd:94:93:41:fb:
c0:13:b7:9e:3c:29:5b:53:5d:de:50:03:da:1b:84:
50:c3:76:ac:a2:e5:1d:b2:f4:9f:54:ca:a1:bd:f0:
29:c6:ad:08:a7:80:2a:e1:df:27:40:7d:de:64:9e:
6e:2f:ee:d5:12:76:1b:8c:ad:fc:03:0c:75:7f:a0:
51:e4:7c:ec:f9:31:e0:b7:ac:31:7d:79:4e:6b:57:
74:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BF:E0:E5:F8:4B:41:23:C9:66:5A:B4:FF:E0:FC:3E:95:3A:CC:24
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n7_g5fhLQSPJZlq0_-D8PpU6zCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.141.0/24
163.5.146.0/24
163.5.162.0/24
163.5.194.0/24
163.5.224.0/24
Signature Algorithm: sha256WithRSAEncryption
13:3f:86:24:16:fb:bb:8b:95:34:c7:c2:3d:89:a7:5c:f7:b7:
69:83:bb:db:0d:7f:bc:3f:52:09:4a:5b:92:d0:8f:bb:f5:dd:
7c:5f:6b:a6:05:f9:14:bf:a5:df:f5:c7:65:da:99:89:f3:0a:
69:a5:6a:9b:30:b1:17:c0:3e:61:0b:75:3b:9b:56:30:3b:df:
49:51:29:0e:5c:8e:d6:8a:78:ed:93:a4:1c:97:d1:e8:5e:e6:
cd:4c:dc:53:87:4c:ef:cb:0c:18:6a:ca:2a:65:1b:37:4f:b3:
fb:8b:8b:a3:ed:39:2c:ab:f1:b2:4e:7c:ff:82:96:93:2b:f1:
34:9f:3f:fb:e3:91:42:94:49:79:10:82:40:1a:17:18:ab:d0:
57:c5:d1:7c:f0:bb:cf:92:aa:02:25:e9:5e:be:99:f2:55:c8:
8d:fc:77:80:96:92:08:7e:df:ac:4e:8a:47:ca:b5:53:5f:15:
e5:9d:5c:8b:c7:4b:cf:cb:9c:49:83:6b:46:c2:93:26:ac:c9:
7d:2c:a3:f3:1a:7b:39:19:a1:40:62:a3:34:13:34:cd:00:f9:
83:3a:ab:1a:eb:08:98:74:30:2d:80:4f:37:d0:37:4c:61:b7:
42:f7:6f:95:20:cd:0e:3c:e2:f4:61:65:a8:a1:18:1b:b0:e5:
e9:38:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org