Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/08wgaSic68DkU6Y6mf55bxCMFvM.roa
File: 08wgaSic68DkU6Y6mf55bxCMFvM.roa (raw, json)
Hash identifier: 9ZM96BLIRWwMnAHKoFMOCKBS19RC0ch7Jof5rmp9GOg=
Subject key identifier: D3:CC:20:69:28:9C:EB:C0:E4:53:A6:3A:99:FE:79:6F:10:8C:16:F3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189EBAE57B48729448EDE54410C413C2CD4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/08wgaSic68DkU6Y6mf55bxCMFvM.roa
Signing time: Sat 12 Aug 2023 21:36:58 +0000
ROA not before: Sat 12 Aug 2023 21:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:eb:ae:57:b4:87:29:44:8e:de:54:41:0c:41:3c:2c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 12 21:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3cc2069289cebc0e453a63a99fe796f108c16f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5f:50:cc:2e:63:43:d7:3e:9a:3f:a1:b5:5f:
93:54:21:ec:5d:93:27:62:10:56:c0:f5:18:08:e0:
33:69:2c:77:78:07:02:a1:82:da:41:57:95:e4:46:
1f:20:c0:7e:12:e6:ec:2a:26:32:09:b4:02:e1:25:
b5:97:b1:5b:b7:57:74:01:93:e9:3d:5f:9f:df:3c:
38:13:cf:54:b2:e8:c1:46:d3:22:b3:a7:d8:0e:c8:
eb:9a:61:8e:b7:c4:4e:36:b7:82:94:98:ae:a5:c3:
fb:78:ed:81:24:6b:3f:ac:0d:a9:2f:68:f6:06:4b:
6e:f3:03:9c:f6:19:f2:87:95:fd:ac:57:53:34:3e:
1c:39:88:b6:95:c5:a2:df:79:ad:fc:1c:3e:e6:b3:
bf:51:47:56:4f:f8:f1:03:5d:b2:9c:f5:15:c9:8b:
04:7f:00:b3:73:96:26:f6:a8:4b:ca:c0:c5:b2:ef:
86:d6:d6:52:33:7a:b7:d6:1a:1a:49:1a:cd:3f:09:
66:96:f5:a2:6c:8c:fd:9c:a8:f9:26:6d:ac:e9:cd:
ae:81:57:12:50:b1:c0:9d:c1:44:df:54:df:89:af:
72:22:e7:7c:e3:f7:02:2c:1c:69:91:a1:44:68:b1:
c8:d3:28:3a:08:60:bd:fe:dd:70:c3:6f:73:f5:af:
3f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CC:20:69:28:9C:EB:C0:E4:53:A6:3A:99:FE:79:6F:10:8C:16:F3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/08wgaSic68DkU6Y6mf55bxCMFvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.127.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f2:87:0a:70:81:08:66:64:fc:40:a9:e9:2b:fd:80:ae:db:
e5:88:c8:37:29:e1:74:98:e8:ef:dd:97:c6:46:9f:ba:38:87:
9a:6a:ee:a4:69:bf:90:76:47:0c:31:01:c7:3c:9a:59:e9:7d:
7c:f7:22:34:17:c5:b2:07:b3:19:84:bf:de:b8:34:5a:45:d9:
1b:ff:f5:c4:fb:ce:23:d2:42:84:0e:49:12:1f:1a:e7:61:b2:
28:e3:44:b5:ab:54:2e:95:07:5d:b9:d5:51:10:33:63:1a:26:
cb:24:ae:cd:80:e7:ab:15:c3:7d:2e:a5:c6:86:88:d6:68:c6:
0c:bd:b5:ee:b8:e4:37:ea:ab:05:30:9f:f7:e6:3b:7b:05:bf:
83:dc:be:87:b2:58:4c:84:ce:20:70:39:66:1a:93:d1:7f:83:
4f:b5:c5:ac:4e:9b:a2:bf:a4:81:a4:5f:9e:68:bb:76:d9:31:
f5:35:8b:38:3c:05:34:46:b2:9e:07:5c:84:27:1c:d1:49:3e:
6e:4c:72:4c:f7:a7:e2:a0:f1:b1:5a:45:37:65:e8:0d:d9:4d:
fe:97:6c:30:6c:d5:f7:81:48:5d:d2:4e:04:c9:52:de:86:58:
49:bb:3f:07:58:2e:cd:52:e0:33:65:85:fe:f3:12:ed:1d:1c:
16:f2:10:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 21:35:58 2023 by rpki-client on console-ams.rpki-client.org