Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x182F6Nh-r88GfxC2HOQtw2tuQE.roa
File: x182F6Nh-r88GfxC2HOQtw2tuQE.roa (raw, json)
Hash identifier: +rqzSlD0WHgFzUreBtxZFNWECPcEvkv6HYBuPrhpMR4=
Subject key identifier: C7:5F:36:17:A3:61:FA:BF:3C:19:FC:42:D8:73:90:B7:0D:AD:B9:01
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A7FC2926EFA7C473D26D871AEAB35A098
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x182F6Nh-r88GfxC2HOQtw2tuQE.roa
Signing time: Sun 10 Sep 2023 15:42:52 +0000
ROA not before: Sun 10 Sep 2023 15:42:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198831
IP address blocks: 185.253.54.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:c2:92:6e:fa:7c:47:3d:26:d8:71:ae:ab:35:a0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 10 15:42:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75f3617a361fabf3c19fc42d87390b70dadb901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:25:01:96:4f:1c:f5:91:79:c5:d6:e1:02:74:
10:3a:68:fb:1e:74:e5:8c:88:dd:23:53:2a:46:cf:
7d:e7:aa:57:9f:c3:74:a9:36:1c:b8:37:1a:29:08:
f9:e4:49:78:62:f7:04:93:8c:b1:94:23:85:7f:00:
2d:6e:4e:d1:54:f0:1a:a2:cf:f3:e2:29:79:94:1d:
f8:88:15:c9:4e:93:63:b0:81:fe:79:f9:66:92:42:
1f:b3:3a:b7:89:b0:a4:39:d6:fd:60:ad:70:7c:88:
f3:d2:e6:58:a0:97:fe:f5:bb:7c:dd:5a:64:b7:82:
56:de:ce:9a:f6:95:c1:63:c6:d3:7f:9a:3b:86:de:
59:2e:61:5b:97:45:aa:a3:64:8f:83:fe:fa:62:cd:
5e:37:58:0e:0e:02:6d:70:5d:93:01:b0:aa:6c:3d:
25:d5:b9:42:41:4d:9d:00:56:cc:5e:04:44:56:a2:
be:c1:2a:b9:9e:63:64:18:55:60:c4:ac:6f:5f:1b:
c6:9b:73:98:39:bc:91:0a:ed:cb:91:9e:cf:91:6e:
a4:9d:04:a5:b5:77:29:ac:79:01:0f:52:c8:ed:10:
97:32:3c:bf:c4:02:f8:4b:72:06:b1:00:ee:b5:fe:
f7:24:1f:67:f9:f8:24:da:17:9f:f2:db:88:b1:fe:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:36:17:A3:61:FA:BF:3C:19:FC:42:D8:73:90:B7:0D:AD:B9:01
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x182F6Nh-r88GfxC2HOQtw2tuQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.59.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:b0:1e:55:f5:0d:fe:72:27:8f:d3:cb:1a:d9:26:1a:c2:1e:
64:20:b9:ea:1a:8a:6a:13:6f:ba:2c:aa:58:d0:10:a3:f0:39:
39:7c:cd:50:1b:0e:03:bb:b4:b4:9a:17:26:6a:c7:a1:2a:e8:
0b:61:b9:d9:5d:a8:c9:a6:21:04:c8:0d:66:88:36:7a:f3:54:
4f:4d:5e:78:e7:d9:eb:4b:af:b8:b2:db:22:1e:9a:e0:c8:2e:
cb:a4:66:83:7c:aa:a2:40:a9:11:c6:ab:d0:a3:46:a1:09:29:
d4:41:00:e7:25:1a:33:0e:c3:f8:36:5b:30:3a:4c:f1:3f:8c:
49:10:99:55:a4:d9:5d:2b:74:06:bc:bd:cb:b4:ed:cc:d8:9b:
40:1c:27:01:32:a1:75:71:40:13:6c:00:53:b0:00:b7:bf:05:
e9:79:24:79:85:b7:53:3d:e9:ae:5d:81:ae:91:79:f7:54:c5:
76:35:d4:5e:7b:bd:b7:b5:33:b2:66:54:8c:08:83:5b:7d:76:
8b:ce:d1:9e:6a:82:8c:23:33:ad:14:ca:3a:c4:71:71:e6:7c:
5c:43:be:ca:ba:77:2a:a9:83:4a:a6:f5:58:77:e0:35:c4:d1:
a5:a4:06:7c:ad:a2:43:e7:84:e4:41:8a:84:e1:54:90:8e:a7:
ba:7d:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 10:27:41 2023 by rpki-client on console-fra.rpki-client.org