Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wsFKCzOh3uVWbNXEhpkyeiBk0H8.roa
File: wsFKCzOh3uVWbNXEhpkyeiBk0H8.roa (raw, json)
Hash identifier: 5GZPb3jE5Q2vGfIQX9dJdr00BvZM7dwlJjadCq+ZnAA=
Subject key identifier: C2:C1:4A:0B:33:A1:DE:E5:56:6C:D5:C4:86:99:32:7A:20:64:D0:7F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018ACD7B7F5ACAF2A5FC39E6AEA8D402C8A1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wsFKCzOh3uVWbNXEhpkyeiBk0H8.roa
Signing time: Mon 25 Sep 2023 17:55:37 +0000
ROA not before: Mon 25 Sep 2023 17:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.187.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:7b:7f:5a:ca:f2:a5:fc:39:e6:ae:a8:d4:02:c8:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 25 17:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c14a0b33a1dee5566cd5c48699327a2064d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:88:f0:63:0c:08:b5:74:b8:e0:bb:dd:f5:01:
53:7c:92:bf:12:92:dd:40:a4:de:81:f6:55:f1:dc:
7c:04:db:7c:e6:1e:85:99:7c:af:33:7b:d5:c7:ec:
30:88:b2:f7:8a:f6:a8:4d:96:c2:b8:f8:49:4a:1c:
fd:f0:7e:eb:c5:f9:76:0d:34:d8:d3:5c:d8:9f:7c:
a2:d0:fa:05:dd:65:03:c0:6d:ea:4f:b1:15:a3:f0:
23:a6:f2:84:d1:50:66:d9:5a:ed:da:75:3a:ab:64:
de:34:83:5b:35:d2:e6:32:e1:2a:a1:eb:6b:12:14:
ad:c5:39:8c:e5:d3:6c:ff:34:5b:dd:33:f5:88:03:
88:0c:d3:77:b9:c8:85:7d:11:64:ec:25:e1:4b:a6:
eb:90:bd:07:ab:4a:ff:e5:38:74:43:4c:14:93:6a:
2a:99:09:89:39:a2:39:02:41:37:f8:90:c1:93:f9:
d5:70:92:ae:5c:fb:a6:0c:5d:35:1f:f7:cb:d6:f4:
84:89:c8:ce:4f:ab:fd:7d:0d:0f:28:09:73:3c:1e:
5d:f9:31:f6:86:37:63:e7:c6:eb:9a:28:9d:08:58:
ac:d6:b2:a4:b1:20:0c:d1:0b:2d:b0:fe:a2:e8:42:
6c:48:4e:7d:10:1c:75:1c:1e:38:f4:d1:dc:ee:00:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C1:4A:0B:33:A1:DE:E5:56:6C:D5:C4:86:99:32:7A:20:64:D0:7F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wsFKCzOh3uVWbNXEhpkyeiBk0H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.98.0/24
163.5.162.0/24
163.5.187.0/24
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
77:89:2f:88:fb:70:de:41:a8:32:4f:0d:e6:10:30:6d:d9:03:
f0:56:a8:69:a5:bd:15:7e:39:e1:64:70:84:91:41:14:90:1e:
30:18:3b:59:e8:03:85:94:5b:5d:26:2b:7b:8c:68:7d:3e:b4:
d9:31:fc:12:4a:7b:94:a5:91:d6:12:48:f1:80:f4:86:7c:f4:
97:87:08:3d:2e:9c:3a:4f:f9:7a:c3:03:dc:98:a6:a4:69:e6:
8d:c1:8f:1a:c8:eb:f1:00:d9:eb:dd:77:85:cc:6d:bd:b0:4f:
43:67:9f:1d:5e:e4:b7:54:00:46:30:d2:f5:5e:65:6c:3a:61:
ac:7c:60:a8:3c:06:a9:3c:42:bb:1a:e1:46:b4:0c:7a:37:91:
96:51:e9:26:e3:a3:c8:d2:55:9d:fa:6d:73:37:5a:87:84:15:
a5:b7:42:23:50:d1:25:18:45:7d:8f:f8:e3:7f:2f:28:c6:40:
35:16:0e:84:81:0f:67:78:23:53:b4:6a:74:95:58:d4:b3:9a:
6a:e9:e8:fd:92:c1:9b:a5:06:cb:bf:8d:3b:63:84:20:aa:9a:
7f:0d:f6:ed:3c:2a:4c:15:e4:8c:38:1d:2f:28:30:d3:23:6b:
1f:9a:4e:4b:0d:05:d5:83:67:ca:42:e4:f5:11:bf:67:8d:3d:
5d:c8:f7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 13:25:25 2023 by rpki-client on console-fra.rpki-client.org