Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/uVsSXu4BoQzenu7a7wAttMoOSCc.roa
File: uVsSXu4BoQzenu7a7wAttMoOSCc.roa (raw, json)
Hash identifier: fgFx6rjNxFuZe/fS7brgnOCX7wRGOlYHK1BTMdyyqdc=
Subject key identifier: B9:5B:12:5E:EE:01:A1:0C:DE:9E:EE:DA:EF:00:2D:B4:CA:0E:48:27
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 018DF8D904B163BC7247143CAEEB95A3C0D5
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/uVsSXu4BoQzenu7a7wAttMoOSCc.roa
Signing time: Fri 01 Mar 2024 07:09:48 +0000
ROA not before: Fri 01 Mar 2024 07:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204720
IP address blocks: 163.171.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 09:03:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:d9:04:b1:63:bc:72:47:14:3c:ae:eb:95:a3:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 1 07:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b95b125eee01a10cde9eeedaef002db4ca0e4827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a8:65:35:a4:fb:77:2d:15:fe:3b:99:92:de:
39:0e:9d:8b:fd:02:95:31:28:e3:dd:55:e7:6c:55:
49:08:a8:fa:59:a9:6e:bd:07:e3:62:93:da:d3:4f:
f1:e9:d5:a0:de:81:35:7f:55:8b:b8:69:8d:d5:76:
94:2f:d3:6b:65:5d:23:19:93:eb:a0:67:d9:5a:0b:
87:d6:15:19:9e:dd:03:5b:a0:f4:c0:db:9b:f2:56:
07:c8:aa:60:92:b3:6e:1c:15:7f:6c:6a:f0:60:e4:
f5:83:3d:27:a5:bb:29:90:6b:a5:2e:3e:96:58:dc:
3c:5d:d0:da:36:e8:b5:d4:2c:8f:61:15:c0:41:56:
6b:54:9f:db:22:ab:47:a6:93:ab:38:ed:c4:29:bd:
cc:4f:c2:26:2a:be:ad:0b:9c:22:40:63:5c:8e:7f:
cf:45:4f:0d:d9:c4:b3:6c:75:fc:30:c2:2e:b0:44:
41:2d:92:d0:f2:1a:3e:fd:29:18:8c:7a:c7:bb:49:
cb:34:34:95:7c:d5:11:c9:dc:c9:67:d8:a3:65:a8:
d3:02:13:7e:20:99:e9:d7:bb:13:c9:f9:88:0f:a3:
fa:da:0f:36:04:25:c5:c0:2a:54:24:aa:1f:a3:16:
c7:89:90:78:86:38:8e:e4:2e:e4:61:00:9e:da:23:
a7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5B:12:5E:EE:01:A1:0C:DE:9E:EE:DA:EF:00:2D:B4:CA:0E:48:27
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/uVsSXu4BoQzenu7a7wAttMoOSCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.171.153.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2f:21:0d:6f:77:17:9a:cd:b4:6d:7e:ca:af:cc:a0:b7:9f:
19:b2:07:5d:bc:e2:c9:46:d8:e5:9e:27:d7:f3:2d:4b:d6:73:
49:34:1d:d6:97:24:ba:95:80:b6:8b:c1:30:9a:01:e5:88:c3:
df:b5:75:26:80:dd:93:fa:71:8b:91:1e:62:4d:82:be:c8:96:
20:9c:e3:47:be:de:ec:95:cf:2a:8b:20:27:81:31:bb:1d:d2:
c6:a7:40:e2:b0:cd:2b:46:95:cf:43:c3:ae:92:e7:28:6f:2a:
ba:3d:26:59:f1:c3:20:c2:46:61:a7:5f:73:a2:a0:e1:7a:cd:
ac:d3:c0:51:27:3c:0d:dc:36:f0:16:34:78:f6:2a:d6:26:10:
34:e6:6b:24:8c:22:5f:5e:6e:8f:24:0b:8a:d1:30:d0:7f:39:
e0:bd:65:f6:62:a0:96:f2:0c:b3:df:46:df:cf:8f:6c:ac:54:
fe:48:a0:60:a8:fc:99:62:6f:1c:fc:b1:3a:7a:65:57:d3:53:
5c:4d:f0:1b:c4:6d:85:95:c7:da:bc:00:97:33:0f:5b:a3:3e:
c5:e7:ba:a3:86:6e:6e:b1:be:27:51:8a:0c:75:5f:b6:62:ab:
97:0d:a9:87:68:ee:20:7c:cc:1d:d9:9f:02:00:03:15:d9:e8:
b5:4b:9a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org