Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/f6kEec8SF-xzHwQHGP4sc7ysWtI.roa
File: f6kEec8SF-xzHwQHGP4sc7ysWtI.roa (raw, json)
Hash identifier: LUh0G9JnW/evGRHfwEhnW7hMAeiAqPHSlBfJvR8gFss=
Subject key identifier: 7F:A9:04:79:CF:12:17:EC:73:1F:04:07:18:FE:2C:73:BC:AC:5A:D2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01890B960C88AC8DF6677F1C30B1578495CF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/f6kEec8SF-xzHwQHGP4sc7ysWtI.roa
Signing time: Fri 30 Jun 2023 09:15:30 +0000
ROA not before: Fri 30 Jun 2023 09:15:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:96:0c:88:ac:8d:f6:67:7f:1c:30:b1:57:84:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 30 09:15:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa90479cf1217ec731f040718fe2c73bcac5ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:c8:f2:38:a9:8f:ef:5a:ee:b7:78:e8:06:
94:bc:b9:59:f1:5d:54:7b:58:17:e0:7a:c6:c7:60:
70:ad:5e:3d:cc:1e:58:99:cf:ff:a1:3e:0e:29:a5:
61:59:f0:6b:86:54:f4:24:96:08:e6:69:4e:c5:87:
78:5f:1c:75:a5:c0:97:9a:e4:45:76:66:c5:57:17:
53:fa:dd:f5:00:3d:37:a4:f1:d3:f1:66:bf:23:18:
56:35:f0:9a:b3:17:79:10:78:8b:95:93:d6:65:15:
98:72:c6:d8:18:ed:63:89:30:e9:c4:15:13:c8:ae:
bf:bd:c1:d7:4c:d1:16:3d:47:ef:4d:ac:e4:f8:b5:
67:72:30:5a:a7:5c:cd:fa:bc:1e:af:9a:74:54:e1:
44:25:56:04:2e:6d:6e:b5:f3:56:ac:82:d6:fe:b1:
5f:35:ff:4a:4e:9f:b5:97:d0:4e:96:ee:ba:28:d6:
ec:aa:f1:fa:0d:cb:c8:55:df:c7:93:6c:5d:26:95:
fb:8f:c9:63:45:6c:5a:b2:a4:05:4f:75:3c:68:14:
66:af:9a:d8:c4:e9:97:e1:84:f9:6f:4c:ad:f4:9e:
0f:85:f3:06:67:89:c1:d7:d4:38:a2:c5:45:1c:92:
cd:6f:9e:68:55:c7:33:6e:98:7e:1c:2f:cb:80:8c:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:04:79:CF:12:17:EC:73:1F:04:07:18:FE:2C:73:BC:AC:5A:D2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/f6kEec8SF-xzHwQHGP4sc7ysWtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.156.0/23
163.5.159.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3f:d6:cd:64:8b:87:45:7d:b2:e6:8c:45:2e:e2:2b:6b:f6:
35:64:2c:71:18:33:ea:75:96:fe:d2:80:4a:6b:cc:ec:d0:e0:
ff:68:51:92:74:21:3a:d4:08:a3:6f:5b:a4:dd:ac:11:4c:1e:
64:9d:e8:99:fe:41:4f:14:4e:39:18:5f:69:e6:f6:f6:69:f6:
09:0b:5b:d3:d8:04:83:f1:ff:7e:6c:c9:f9:06:9b:02:b1:69:
2d:bc:b9:8b:a5:24:d2:f4:49:93:5f:cc:9f:6e:2e:71:52:77:
48:ec:a5:3a:e4:b7:fe:9d:4c:af:51:87:c3:30:e0:b9:78:28:
6b:3c:0e:f6:c7:19:70:6e:6c:c3:2a:a8:52:e7:af:80:68:8f:
94:8e:28:8f:cc:a2:b3:88:6e:59:da:13:13:ec:4c:30:3d:5a:
fc:cb:e6:9d:7f:e0:54:b6:58:40:f4:e5:75:ea:0b:6f:58:04:
86:e6:b2:f9:61:50:4f:c2:d3:c1:8b:c8:88:c3:f6:42:87:60:
42:7c:02:24:ff:0a:69:ef:32:96:a3:e3:b8:f8:4f:8f:01:f9:
0a:59:a0:f8:fa:04:f9:62:f3:95:ce:ae:7f:15:70:ac:89:f6:
b0:2e:0c:67:7f:6a:ac:79:68:90:e6:18:ea:df:bb:7e:cd:5c:
63:9d:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org