Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-msIZjgZYPFIMwffVZTkbENXX40.roa
File: 1-msIZjgZYPFIMwffVZTkbENXX40.roa (raw, json)
Hash identifier: ti+7wpVXV0/nLQd2iYrYknh37Jnwisx8mJrStXFAiSc=
Subject key identifier: FA:6B:08:66:38:19:60:F1:48:33:07:DF:55:94:E4:6C:43:57:5F:8D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189DF6496CFFA22751BA748C193556A5112
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-msIZjgZYPFIMwffVZTkbENXX40.roa
Signing time: Thu 10 Aug 2023 12:20:58 +0000
ROA not before: Thu 10 Aug 2023 12:20:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:64:96:cf:fa:22:75:1b:a7:48:c1:93:55:6a:51:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 10 12:20:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa6b0866381960f1483307df5594e46c43575f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:55:1e:d9:df:39:c0:05:63:93:8c:7c:95:18:
0d:f9:81:bf:eb:74:c0:0c:3a:d6:33:7c:c1:f7:d0:
ec:f7:51:a8:43:1b:3b:d6:c7:bb:ff:06:87:4c:2f:
26:32:41:f6:73:ed:4e:c3:1c:ed:60:6c:22:86:81:
fe:ce:3e:fd:bd:10:8c:80:5d:e2:77:30:ac:42:c1:
e2:45:27:b6:21:12:3d:da:a9:a1:6b:a9:63:dc:45:
78:76:17:58:06:66:33:81:8c:3d:45:c3:82:98:78:
cc:8e:b6:18:d3:f5:61:f5:bd:9a:19:7e:c2:b3:0f:
f2:d8:b8:e9:a8:27:57:19:04:b2:96:83:f4:ea:62:
41:91:ce:dc:dd:9a:08:8a:72:b9:4f:9f:a2:39:e2:
23:58:d3:69:2d:00:6b:7c:24:2d:70:4e:ae:58:42:
bc:99:2f:8f:cd:84:87:e1:43:fd:55:66:18:ad:36:
bc:56:cd:c6:da:f2:04:c6:d7:eb:e5:7a:04:b5:8d:
48:25:fd:11:38:06:a7:80:46:c6:19:93:e5:1e:9a:
7a:89:79:b7:05:7c:4e:ac:b0:2e:40:3b:99:be:17:
b0:68:4e:08:8a:24:d1:ec:3c:48:b5:94:65:b9:69:
5d:62:26:70:7b:9b:3a:49:48:38:c4:19:fa:09:6e:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6B:08:66:38:19:60:F1:48:33:07:DF:55:94:E4:6C:43:57:5F:8D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-msIZjgZYPFIMwffVZTkbENXX40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.129.0/24
163.5.194.0/24
163.5.197.0/24
163.5.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:7a:b1:39:e8:89:24:e9:aa:00:6e:ef:c4:c4:c0:b1:61:1f:
29:3b:bf:d7:84:3f:d4:b0:f3:8d:d7:c2:60:96:53:41:33:ff:
07:3b:ae:35:01:c1:9e:00:8e:94:da:4c:79:55:c7:04:57:e8:
dc:52:72:e4:ac:40:5d:72:b4:41:2e:18:21:15:b1:d0:15:91:
2c:3a:c8:82:3e:6f:8e:e0:d8:f5:16:fd:e6:24:e0:ca:ca:cb:
8e:73:41:6a:fd:3d:bb:44:23:7c:ab:23:34:1e:83:8c:b7:43:
98:d9:f5:c7:89:00:d6:c1:8b:b3:ff:66:54:de:26:fd:5c:ef:
3d:07:73:89:1e:c3:e8:a4:56:b7:a4:64:3a:5a:a9:ca:23:a4:
63:af:35:18:34:45:05:1d:d4:cb:f4:a6:22:e4:36:37:9c:8a:
eb:17:6b:4b:2a:bc:c5:d7:e2:f3:1b:bc:7e:fe:72:19:e8:46:
92:e8:e3:ae:a5:57:da:6a:82:14:16:03:11:62:19:e2:0a:e2:
51:a6:68:43:e7:26:9f:c4:71:8a:b8:6e:aa:b1:d7:f1:d5:45:
c2:d2:9b:15:f0:b2:e1:53:b0:92:3e:9b:ac:d9:9c:50:be:a1:
4a:70:11:b8:4f:c8:c4:5e:d0:35:fa:95:e9:0c:9c:0a:28:9c:
77:bc:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 20 08:16:12 2023 by rpki-client on console-ams.rpki-client.org