Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-p5l1aJfpn-PsKYN0dzGgWDCjzQ.roa
File: 1-p5l1aJfpn-PsKYN0dzGgWDCjzQ.roa (raw, json)
Hash identifier: UHkz73Q+2yfVOKRuzGS8hZGbaO8JDiyqSuIkTOsWG+Y=
Subject key identifier: FA:9E:65:D5:A2:5F:A6:7F:8F:B0:A6:0D:D1:DC:C6:81:60:C2:8F:34
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A4D98A8B81C19854F6151253C52042A6A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-p5l1aJfpn-PsKYN0dzGgWDCjzQ.roa
Signing time: Thu 31 Aug 2023 21:56:04 +0000
ROA not before: Thu 31 Aug 2023 21:56:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.187.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:98:a8:b8:1c:19:85:4f:61:51:25:3c:52:04:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 31 21:56:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9e65d5a25fa67f8fb0a60dd1dcc68160c28f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:93:18:5d:23:0b:85:c2:b4:68:82:aa:43:
71:50:0b:af:00:55:ba:df:75:03:0f:21:09:09:15:
ab:d0:f7:f2:5a:61:af:b2:f0:0d:db:07:04:92:37:
2c:ad:f9:8f:fc:5d:91:fb:5e:2d:9e:4d:63:83:59:
b6:0c:c8:18:3b:ed:ff:e7:d6:93:c8:04:36:3c:1f:
f5:04:dc:74:f7:45:7e:23:78:c2:c4:2e:33:40:0c:
2e:23:fc:92:17:93:c2:58:37:8d:a3:ee:29:8e:b1:
33:2e:11:3d:d8:8e:fc:7e:20:82:ab:92:70:4d:7e:
48:19:07:8c:84:ee:3a:09:5d:60:70:8d:6b:74:16:
25:e6:3b:07:8e:37:3b:27:5c:53:bd:5d:3f:69:e2:
9f:e1:d6:bb:6e:ec:c0:ce:2e:c1:45:f7:53:52:fb:
45:50:82:88:b9:14:3d:31:f2:a2:14:9d:8d:76:ed:
6a:05:f8:69:c0:df:2e:d7:07:fa:59:f3:4c:bb:de:
04:da:10:67:6c:50:1d:be:e8:93:67:e0:93:ce:e8:
9b:29:f6:ba:08:f9:74:02:bb:43:46:28:99:83:d9:
91:a3:c7:da:cf:88:2b:a5:c3:01:51:f2:38:b1:10:
5e:c6:2a:30:9d:1f:cd:7a:66:3e:88:72:d0:b0:db:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:65:D5:A2:5F:A6:7F:8F:B0:A6:0D:D1:DC:C6:81:60:C2:8F:34
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-p5l1aJfpn-PsKYN0dzGgWDCjzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.98.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:65:da:98:7f:5d:be:3d:43:1f:4a:0d:4a:cb:35:f4:2d:47:
c4:8f:62:1c:7a:d3:21:ca:f3:96:d1:79:c9:cb:b7:c6:26:fb:
43:4a:fa:8f:6c:7a:77:1a:a9:0d:b1:4d:b3:4f:3d:90:cb:3a:
77:45:79:4f:55:8e:b2:5c:3a:ae:a5:ce:57:bf:af:a9:3a:62:
57:e6:fb:32:d4:5f:21:65:75:c0:79:7e:fe:09:32:2c:35:b9:
84:05:25:8e:e0:b2:13:8d:a5:3b:30:da:32:94:6d:9b:98:f4:
a8:93:4f:df:6a:2c:2a:d0:08:71:cb:9e:0e:46:d0:d2:b4:ec:
a3:76:8c:be:8c:d6:fa:e7:7a:19:28:1c:4f:85:5c:0c:63:c6:
8d:26:f4:30:8d:13:2a:5e:d3:78:6b:71:bf:3f:ba:43:61:e6:
ca:94:c0:ad:8e:35:a7:0b:c9:2b:a3:4d:36:c3:02:1c:0c:77:
f2:27:2f:e8:38:ed:51:4b:b6:35:d5:95:ab:31:c1:e2:ed:a2:
b2:74:5a:ab:86:e2:f9:12:c5:8a:ef:2b:a2:60:fa:b1:f6:40:
a5:97:23:cc:68:31:07:2e:44:cc:ad:35:87:4c:8f:c1:8a:d1:
9d:49:62:1e:23:22:6f:27:8c:d7:2b:ca:14:65:5a:01:04:88:
0d:d7:0f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 20:55:54 2023 by rpki-client on console-fra.rpki-client.org