Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/exD3zfvr_Qbcup1WlBNeXwqTShA.roa
File: exD3zfvr_Qbcup1WlBNeXwqTShA.roa (raw, json)
Hash identifier: dJ9A8WdrDQQ2WCGFpPMHGXwzia4OhX7blv/eV3u+JDY=
Subject key identifier: 7B:10:F7:CD:FB:EB:FD:06:DC:BA:9D:56:94:13:5E:5F:0A:93:4A:10
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 018B7005E3A78426786CEE2791707806B15D
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/exD3zfvr_Qbcup1WlBNeXwqTShA.roa
Signing time: Fri 27 Oct 2023 07:25:16 +0000
ROA not before: Fri 27 Oct 2023 07:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204720
IP address blocks: 163.171.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 08:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:05:e3:a7:84:26:78:6c:ee:27:91:70:78:06:b1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Oct 27 07:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b10f7cdfbebfd06dcba9d5694135e5f0a934a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e8:74:02:0b:80:dc:c7:93:ad:a9:41:ce:f6:
9d:1c:36:6d:26:df:77:2f:e4:c4:b5:2b:9f:a6:57:
4c:39:e6:a6:2d:06:38:ea:a0:4d:f6:e0:12:e9:ea:
83:ae:9d:17:99:71:96:39:ac:cc:21:a3:ac:88:61:
10:a1:63:a0:d0:a0:65:04:b2:0a:94:95:7d:5e:86:
c1:ee:cd:9c:f3:55:69:4b:06:04:ab:a0:ad:61:16:
07:04:9a:04:44:bb:1d:49:6d:70:53:26:91:18:16:
5d:79:5f:bb:25:02:b5:79:aa:ef:4b:a8:4e:36:c4:
48:07:be:82:07:a8:60:9a:34:d4:9d:ec:e9:c9:1d:
bf:b3:20:f6:93:25:49:fa:53:9f:a1:55:a4:e2:8e:
bb:78:07:96:fd:eb:20:1b:db:38:ad:7c:10:cd:f0:
9a:72:93:ca:04:75:ff:80:77:fe:9d:7d:88:01:42:
ee:9a:40:3f:76:fc:d6:0f:36:5a:81:b8:e9:fe:22:
bd:18:84:b4:7c:8e:8f:1f:ea:6a:c5:9a:39:0c:b1:
64:c8:4e:d1:ad:5f:12:cd:60:de:ef:1b:82:89:98:
e0:70:a6:03:e3:06:9d:d5:36:99:70:fc:2a:47:40:
f6:e4:16:7c:6f:a5:80:c0:47:8a:35:49:0d:93:85:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:10:F7:CD:FB:EB:FD:06:DC:BA:9D:56:94:13:5E:5F:0A:93:4A:10
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/exD3zfvr_Qbcup1WlBNeXwqTShA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.171.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:e6:b3:bd:20:f8:52:38:34:bb:98:2f:27:71:99:66:4e:00:
34:90:f5:96:1d:a5:e4:67:22:e1:9a:cd:41:92:81:5a:e8:b6:
1a:84:19:87:84:81:89:a8:77:9e:a2:94:1d:48:36:2a:2f:44:
ef:c2:77:46:99:9b:b9:36:a3:b7:e5:f4:48:5c:d2:b8:24:70:
09:d6:5c:48:65:6e:3a:7a:ae:9b:9e:41:43:86:89:1a:60:01:
24:8f:7d:a9:9a:15:55:34:ee:07:28:04:60:28:28:0e:69:73:
68:87:86:bb:2b:a5:44:5e:32:c3:af:a7:bc:63:40:f9:9f:4e:
a1:37:d8:d2:cb:78:97:40:14:81:16:df:f5:42:0d:eb:4b:ef:
89:c3:fb:b2:43:14:b2:d4:6c:46:f1:e7:c9:2a:47:d5:b9:b3:
1e:3d:15:61:89:c0:ac:e9:16:7d:b6:49:88:b6:e5:c4:a9:7a:
8d:24:99:c5:4e:8d:29:4e:42:e6:a9:66:ce:e9:8e:2d:31:c5:
35:41:23:76:9c:e8:3c:cc:5a:1a:ae:d4:b2:d8:f5:e8:f2:98:
96:3f:c9:ca:93:6a:78:34:d8:2e:f3:c6:90:11:72:af:f4:a0:
35:f9:33:91:7e:30:34:1e:55:94:8f:8b:aa:7e:82:d7:8b:16:
a4:bb:65:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-fra.rpki-client.org