Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nr4R-08mtaNHpcMkHLTJx3SCqPY.roa
File: nr4R-08mtaNHpcMkHLTJx3SCqPY.roa (raw, json)
Hash identifier: u3NlbE2/SJ8XtAXpJVljiCaSrztsAyPuembhs7lYUus=
Subject key identifier: 9E:BE:11:FB:4F:26:B5:A3:47:A5:C3:24:1C:B4:C9:C7:74:82:A8:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01863FA90A80CE08D5294883E81EBC307B42
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nr4R-08mtaNHpcMkHLTJx3SCqPY.roa
Signing time: Sat 11 Feb 2023 08:48:08 +0000
ROA not before: Sat 11 Feb 2023 08:48:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:a9:0a:80:ce:08:d5:29:48:83:e8:1e:bc:30:7b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 11 08:48:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ebe11fb4f26b5a347a5c3241cb4c9c77482a8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:4f:e2:73:f4:87:28:18:46:34:57:2f:79:
5c:a7:7d:63:26:8b:11:c4:84:17:8e:a5:be:1a:b8:
92:6f:63:06:98:f3:16:48:98:b4:3c:04:91:7b:06:
18:c9:cd:57:6b:ea:b2:12:d2:ff:e3:49:e9:55:08:
80:56:5a:28:77:a2:21:5d:cc:6b:d1:03:26:0b:5e:
f6:88:fa:de:09:2a:03:f5:a8:a1:34:87:5e:13:e4:
66:ab:39:80:de:6b:5e:0b:56:62:19:1d:a3:bc:cf:
cf:9e:28:30:4c:93:dc:74:58:95:af:3e:2f:0c:80:
31:9a:e1:60:40:61:64:a8:7a:27:f7:0b:a6:0a:48:
af:f7:0a:0e:8c:67:c6:47:de:af:ea:04:51:23:ff:
e2:62:e8:8e:5b:8c:db:16:ac:3d:ea:96:e4:8e:e1:
16:bb:90:0a:c0:0a:0b:8b:e1:cf:af:90:db:45:12:
57:db:c5:df:65:a9:d2:71:43:fc:4f:68:17:bc:14:
20:e3:8e:75:a4:21:70:e1:3c:5b:8f:40:ca:a5:e0:
90:9c:6c:51:a0:0a:08:d0:39:37:74:23:6a:47:00:
5e:2c:31:d5:a6:7d:db:05:50:02:c4:55:d0:9c:63:
4c:fa:49:99:80:61:3d:8e:13:6c:07:42:a5:63:7c:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BE:11:FB:4F:26:B5:A3:47:A5:C3:24:1C:B4:C9:C7:74:82:A8:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/nr4R-08mtaNHpcMkHLTJx3SCqPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.169.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
45:dc:e6:9c:23:8f:e0:02:18:cb:f7:bb:71:af:54:f7:fd:a7:
21:e3:ce:73:65:c5:68:d3:a6:f3:aa:47:79:c9:53:ed:5e:0e:
38:ab:74:c4:0b:4e:39:75:fd:56:4e:7c:8f:93:68:4c:b0:15:
be:ac:28:08:38:96:56:6a:54:72:ea:6f:02:1f:14:31:40:83:
25:55:c7:5b:d3:13:bc:d6:16:6c:02:74:7c:95:63:58:ca:09:
f5:2b:21:18:98:f6:df:4b:b4:71:ce:c0:69:e5:02:1a:fe:ae:
8c:e7:11:22:13:92:88:93:5f:05:29:a9:3d:61:f9:1b:99:5e:
81:a0:1c:09:3d:e0:ae:a7:be:16:20:ba:eb:c0:0c:a3:29:90:
9a:2e:49:a7:cb:cc:9a:9f:f0:6a:1e:93:e8:a1:ca:96:f1:e5:
3f:2f:1d:c6:12:f1:59:70:07:55:07:a2:a7:a9:64:ef:b5:92:
f5:4d:8f:e4:06:ce:0e:55:e2:00:c4:bc:bd:4a:bc:3f:5e:10:
fc:3e:b3:ff:37:e1:bb:b2:31:2c:e7:fb:99:f2:1c:65:18:c3:
f0:e0:b7:c5:46:95:fd:8f:42:31:5b:2b:3c:39:b3:27:5c:af:
4a:56:d6:64:81:a0:3b:27:c6:9b:a5:54:cf:5a:83:40:a1:7e:
af:84:0b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org