Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t1pIf45SgtJkHsw3UyDZEi-yo-Q.roa
File: t1pIf45SgtJkHsw3UyDZEi-yo-Q.roa (raw, json)
Hash identifier: UdQM+zbBjXlQSHeKtQrqcGMwfvCG+9ZiqioZfhKUImM=
Subject key identifier: B7:5A:48:7F:8E:52:82:D2:64:1E:CC:37:53:20:D9:12:2F:B2:A3:E4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B251F1B164670FD487456F1191E50905B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t1pIf45SgtJkHsw3UyDZEi-yo-Q.roa
Signing time: Thu 12 Oct 2023 18:21:17 +0000
ROA not before: Thu 12 Oct 2023 18:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 163.5.66.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:1f:1b:16:46:70:fd:48:74:56:f1:19:1e:50:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 12 18:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b75a487f8e5282d2641ecc375320d9122fb2a3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:77:04:c8:43:4c:8a:82:77:4d:76:ac:74:
00:49:52:27:3e:b3:ba:fd:0a:f5:e2:c7:24:43:59:
e8:f9:58:b0:a1:ec:e4:51:e9:29:0e:df:e2:7e:c1:
6f:e0:1d:1d:d7:dd:bc:3d:b0:01:24:49:ec:a5:36:
fd:fe:34:10:84:14:17:cb:62:a1:6e:b7:2a:ef:0c:
54:d9:e2:19:2d:ef:a3:be:f2:93:bf:79:8d:47:8c:
9e:d2:bb:b8:15:97:a3:45:60:2f:02:8f:7a:50:02:
67:07:e8:8b:e5:dc:14:0e:55:b0:93:54:74:d5:5c:
cb:20:65:74:98:90:95:d9:49:9e:6a:4e:d9:b9:5b:
92:94:16:2f:06:44:81:9e:c3:2d:fb:93:f5:e9:eb:
c3:bf:45:ad:c4:af:90:e6:ba:ec:df:8a:95:df:7b:
09:bf:c2:f8:40:9e:d9:a0:65:61:57:a5:cf:cb:b9:
cd:88:8f:39:98:b8:9d:04:5b:c1:69:70:85:19:96:
a7:61:6b:ec:6f:4a:4e:98:93:07:0e:65:74:d9:fa:
35:42:df:fa:4e:7f:2e:1a:1d:b8:c6:ed:7d:44:0e:
57:82:a0:d4:a1:75:ef:8c:8b:81:6d:c5:01:a0:38:
e9:41:67:da:e0:7b:5c:51:d7:dd:8c:4f:47:e0:da:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5A:48:7F:8E:52:82:D2:64:1E:CC:37:53:20:D9:12:2F:B2:A3:E4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t1pIf45SgtJkHsw3UyDZEi-yo-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.64.0/24
163.5.66.0/24
163.5.123.0/24
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
38:b3:fa:12:51:47:00:52:7f:4f:b2:ed:a9:17:bd:97:6f:85:
99:d5:6c:db:77:f1:4c:88:d6:87:db:ed:af:46:68:20:bf:f8:
bc:b6:d3:9f:ae:82:d4:0b:8b:c4:e7:c2:51:6c:fd:f5:0b:9d:
be:ef:51:f9:48:3e:e3:2c:ef:72:5b:44:da:67:90:8a:ff:3c:
ec:c9:f6:47:6c:20:0f:c2:6f:08:18:5e:97:96:c1:b0:7f:b9:
2f:5b:19:45:91:19:b3:7d:e7:e2:75:c2:6a:16:41:54:f8:3a:
88:4b:b6:b2:27:b0:0d:03:fa:4e:f4:77:ce:cc:5f:c9:7c:f1:
4c:59:cb:56:c0:00:e8:1e:54:69:e8:ad:0d:95:1f:8a:6c:dc:
55:5a:34:27:09:00:7f:25:08:1e:75:17:66:06:35:bf:cb:dd:
d6:6b:1c:1a:04:18:24:bd:5c:19:0f:c6:30:d6:9c:31:5f:ef:
62:ec:da:77:22:8e:d4:2e:91:47:f7:63:a0:f5:a4:d8:ab:f0:
7d:88:c4:ac:b8:fb:c0:25:c9:1d:10:8c:b0:fa:1c:e2:c5:c5:
82:28:e6:91:50:e6:df:1a:6c:32:4d:25:ce:e6:5c:72:26:4d:
ef:c4:ff:9c:2d:6a:ea:29:a2:3a:5a:31:15:b6:6a:7c:52:4a:
0f:50:02:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 19:14:11 2023 by rpki-client on console-fra.rpki-client.org