Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yVge7xOsELWa_fiP6vBH7S-KHsk.roa
File: yVge7xOsELWa_fiP6vBH7S-KHsk.roa (raw, json)
Hash identifier: N1MvM7B7rwBzeh4Cl0RPFTXlTiWn8f5JqIcRyY2elgs=
Subject key identifier: C9:58:1E:EF:13:AC:10:B5:9A:FD:F8:8F:EA:F0:47:ED:2F:8A:1E:C9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018BECA9B33FE8EBCA2B016163CCE4B94D89
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yVge7xOsELWa_fiP6vBH7S-KHsk.roa
Signing time: Mon 20 Nov 2023 12:17:06 +0000
ROA not before: Mon 20 Nov 2023 12:17:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.118.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ec:a9:b3:3f:e8:eb:ca:2b:01:61:63:cc:e4:b9:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 20 12:17:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9581eef13ac10b59afdf88feaf047ed2f8a1ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:9f:5e:6a:30:c0:f4:34:97:de:82:cd:1b:
d8:b1:5b:dd:da:5a:4b:06:55:f5:a7:6b:ba:b8:18:
05:17:21:97:51:3f:1f:3d:d0:08:05:2a:0d:f6:f7:
84:07:6d:9e:7b:0a:80:68:42:83:cc:e8:26:0e:ca:
71:58:d0:ad:79:59:5b:d4:7c:b1:54:e5:f4:88:01:
a5:62:09:56:db:85:b1:48:22:8f:ab:f8:85:f5:9c:
0f:f2:ad:25:db:07:04:12:e4:50:a8:eb:6a:87:6e:
23:6d:44:03:a2:57:3c:33:b0:ae:21:3d:65:1e:86:
4e:a4:c3:9d:bb:5d:24:cf:ec:88:c7:4e:2b:b0:ae:
b4:ab:29:01:a7:bb:00:82:4b:b7:f6:e0:81:2f:b8:
be:6f:fb:6d:6e:7e:cb:e8:e7:64:ba:eb:87:2d:5e:
fc:f8:dc:e3:e9:a2:7d:8e:12:49:ca:51:81:da:44:
81:f6:6b:0a:0a:fc:ab:b8:3b:5f:52:f9:d9:ea:df:
12:08:92:f8:2f:e4:0b:5d:d6:be:82:08:22:41:e4:
be:ce:73:ea:28:0e:93:69:74:42:28:32:f8:63:5e:
76:5d:44:5b:28:27:5b:c6:1a:ab:41:33:ca:3f:11:
25:6d:bc:7f:d3:d7:a2:9c:bf:8e:bb:bb:3d:2c:22:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:58:1E:EF:13:AC:10:B5:9A:FD:F8:8F:EA:F0:47:ED:2F:8A:1E:C9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yVge7xOsELWa_fiP6vBH7S-KHsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.118.0/24
163.5.153.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0a:15:c9:5d:15:0e:e9:3e:fa:26:25:8f:3c:54:6b:ae:52:
3a:13:20:09:5e:9c:23:13:cf:99:dc:5e:2f:eb:65:12:5a:c5:
06:83:f2:2a:4a:cf:b1:cd:15:63:aa:a1:87:9a:6b:b6:6a:99:
56:88:43:d6:31:af:f1:1f:cd:c3:c9:8d:e9:ad:2b:00:73:ae:
d1:f5:83:a0:aa:ae:3c:fb:c8:ab:9b:d4:1c:97:8d:47:83:9e:
37:5b:66:37:85:12:cf:da:11:ee:8d:27:a8:a5:d9:38:56:89:
fc:e1:f1:4f:64:42:d7:2a:a9:a1:bf:59:8b:c0:02:b3:6d:f6:
e1:f3:5e:70:cb:8b:51:54:8d:85:5d:cc:d9:fd:55:d3:54:64:
53:48:0a:5e:35:76:14:fb:94:58:7d:99:f3:96:50:67:25:e0:
c2:cd:c9:a7:0f:e9:6c:47:92:d7:7d:f4:99:7f:05:5f:0c:db:
fe:8f:67:c4:f4:5e:5f:d7:60:93:88:de:2a:ea:38:aa:4e:24:
10:49:0d:7e:5d:38:95:8b:35:33:90:64:ce:f0:f4:30:95:55:
62:41:d8:cc:44:ce:c3:92:08:2a:5b:b6:79:14:49:e7:b6:99:
f0:64:88:b5:d3:1f:22:f7:7e:91:2a:33:85:3c:f6:a3:e7:b1:
c0:8a:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 16:42:52 2023 by rpki-client on console-fra.rpki-client.org