Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w9c3Rs2xEE_-U0cEBu8CgODwU0E.roa
File: w9c3Rs2xEE_-U0cEBu8CgODwU0E.roa (raw, json)
Hash identifier: IiEeQblHa7+peqwDNEWNyILQrtJFRsOhfBJERBsCw0E=
Subject key identifier: C3:D7:37:46:CD:B1:10:4F:FE:53:47:04:06:EF:02:80:E0:F0:53:41
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186B10723E1BD5497770C050AE586E32EBC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w9c3Rs2xEE_-U0cEBu8CgODwU0E.roa
Signing time: Sun 05 Mar 2023 09:08:00 +0000
ROA not before: Sun 05 Mar 2023 09:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b1:07:23:e1:bd:54:97:77:0c:05:0a:e5:86:e3:2e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 5 09:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3d73746cdb1104ffe53470406ef0280e0f05341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e4:2f:cc:a6:b7:71:10:1f:4d:94:85:b7:51:
84:03:ff:fc:c1:51:fd:96:89:a7:3f:3d:5e:d2:8e:
f7:e5:f1:cb:aa:f4:a1:4a:9b:d2:b6:81:20:b7:68:
e9:1a:7c:3a:0e:39:c6:42:01:1f:bf:7a:9b:61:6c:
10:09:5b:12:17:34:50:16:2a:42:6e:89:e6:3a:d4:
72:0d:06:de:cd:01:81:72:7f:87:2e:d9:2d:56:05:
53:aa:ae:ce:98:88:77:58:29:79:9f:45:b3:0d:05:
dd:12:65:0a:25:b8:f4:89:f9:80:99:38:73:9c:41:
1d:08:3e:99:bb:de:36:f3:79:b7:59:eb:cf:cc:56:
74:f9:9c:2c:9d:c2:c0:42:6c:17:6b:5c:87:6d:2e:
fb:76:20:79:25:4f:97:a0:36:f7:ad:d6:d1:32:fd:
fc:e5:e6:3e:7b:76:8f:bb:f5:d9:77:d7:05:b9:5e:
01:2e:29:76:04:a8:c8:20:64:75:44:72:e7:63:78:
be:a0:8b:99:20:1c:ae:aa:7e:f8:41:c5:76:9a:38:
e9:61:69:04:8d:d9:28:1d:a3:29:8a:2e:35:91:f1:
b0:08:e3:ff:4c:0f:a9:11:55:5d:b9:7f:2e:f9:7d:
66:df:53:fb:92:9d:08:0a:56:a6:31:ae:3e:52:97:
77:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D7:37:46:CD:B1:10:4F:FE:53:47:04:06:EF:02:80:E0:F0:53:41
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w9c3Rs2xEE_-U0cEBu8CgODwU0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.91.0/24
163.5.97.0/24
163.5.169.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:52:26:2f:51:11:22:37:e3:d4:7f:80:0d:da:22:6f:f6:90:
2b:2b:e2:f0:1f:18:b7:23:47:08:f6:25:01:96:25:99:cf:a7:
7d:49:5f:11:26:a5:0b:11:a2:17:f4:0c:c3:ca:8b:63:29:30:
e6:73:b2:ec:fb:ab:f8:16:19:c2:f1:4e:ae:55:91:be:79:10:
0c:d3:1c:91:33:d5:89:53:c0:6e:be:07:5e:23:97:b5:2e:1b:
9b:93:94:f7:67:33:55:cd:b8:bc:8c:40:0d:20:71:99:da:02:
dd:e9:ff:44:40:34:12:95:de:e7:a2:f7:dc:77:90:e2:22:e6:
54:1a:9e:55:93:0f:93:15:ae:58:81:40:bf:73:54:dc:10:d5:
91:67:c5:5e:a9:56:b7:75:0f:e3:62:bc:bc:f4:6d:15:b7:11:
6a:24:ae:db:36:06:52:fd:ad:ae:6c:56:7a:75:3c:9c:ed:4e:
aa:9b:cd:cf:4a:9d:1e:69:56:27:cd:9a:ca:c3:24:74:d7:38:
62:80:8a:41:f5:69:0c:4a:1a:0c:46:7e:c2:09:ed:00:08:9f:
8d:e6:5f:c7:80:f6:65:08:dc:73:d0:e7:4d:e3:65:ad:26:d9:
32:66:04:ae:b8:56:fc:2d:85:0d:0d:83:1c:12:e4:a8:58:77:
94:6c:ce:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org