Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1zAXGUDoo8kyzGFE994mnsLQeyY.roa
File: 1zAXGUDoo8kyzGFE994mnsLQeyY.roa (raw, json)
Hash identifier: CZhZjjR/RW4VLqsbv+MNF2bXwPtyGSAb8+LYH/Ne5QI=
Subject key identifier: D7:30:17:19:40:E8:A3:C9:32:CC:61:44:F7:DE:26:9E:C2:D0:7B:26
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188A0A86B65CAF5F1FC3CCBE64E42B1F79B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1zAXGUDoo8kyzGFE994mnsLQeyY.roa
Signing time: Fri 09 Jun 2023 14:56:12 +0000
ROA not before: Fri 09 Jun 2023 14:56:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207083
IP address blocks: 163.5.97.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 12:22:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:a8:6b:65:ca:f5:f1:fc:3c:cb:e6:4e:42:b1:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 9 14:56:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d730171940e8a3c932cc6144f7de269ec2d07b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:72:d2:08:c7:62:f0:30:9c:65:4c:6a:b4:
73:1d:62:cf:58:41:7e:74:4f:da:b8:fb:33:3e:54:
0a:b7:66:c9:18:be:70:8e:25:cd:d2:28:d8:87:64:
8f:c5:90:cb:81:87:51:29:e6:ab:7b:95:41:7f:b9:
eb:eb:cc:37:6a:7c:02:e5:01:8d:43:11:bb:a9:5e:
a7:2b:93:13:7a:9f:b3:77:87:cf:d0:35:62:b1:5f:
82:cb:9d:19:08:e3:3b:b4:51:42:07:fd:a5:27:cd:
28:46:2b:16:e6:7b:8b:f4:89:fe:ff:39:97:36:05:
4c:c3:6b:af:6b:b7:c9:cd:5c:b3:53:fd:0f:92:b3:
fd:fe:01:df:5e:fe:24:31:42:22:70:6b:31:f4:bc:
0b:ae:24:1e:7d:37:c9:5a:17:4d:99:4b:03:fc:09:
e2:70:6e:f9:2c:cb:f4:55:1e:74:91:7a:31:a6:f1:
ba:a1:62:d3:83:65:ea:7f:66:23:3b:cb:a4:18:f9:
85:14:40:e8:16:a0:af:11:bc:57:6a:e4:18:87:c3:
b4:b5:10:c7:b8:da:1e:ca:30:09:0a:2b:2c:0c:45:
01:f0:77:87:65:04:34:c8:ba:e1:a5:80:f8:2c:8b:
a3:52:f8:f6:cb:a1:8b:c6:28:91:59:31:f8:75:a8:
d7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:17:19:40:E8:A3:C9:32:CC:61:44:F7:DE:26:9E:C2:D0:7B:26
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1zAXGUDoo8kyzGFE994mnsLQeyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.97.0/24
163.5.155.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ab:3b:cc:e1:a5:e7:22:97:ca:77:e5:82:30:45:df:2d:91:
60:e7:dd:2c:9b:6e:79:60:6c:4c:d4:98:d4:cb:20:e4:95:8c:
1a:52:91:a6:37:81:54:bb:0f:bf:7c:70:c5:32:7a:51:27:6d:
60:62:44:b3:ab:ae:39:4a:f1:c4:28:29:34:8a:73:b7:ef:73:
1f:c9:ff:69:15:1f:98:0e:ee:1e:60:90:95:7a:e9:aa:40:b6:
b4:0c:fc:df:9d:27:26:dd:a5:f9:bf:d8:71:d1:6e:73:80:01:
43:94:c6:d6:6f:59:dd:ae:bd:e6:0d:f0:a8:90:8c:1b:b1:bf:
59:a6:a9:1d:ab:54:ad:54:7a:0b:98:30:af:46:a1:98:e9:bf:
82:67:c7:53:17:2e:02:cc:a0:97:48:d9:87:34:43:f2:5e:72:
51:f3:b7:80:15:df:30:7d:38:0d:4c:a3:04:62:33:23:56:57:
86:20:e8:d9:7e:90:14:d6:1f:38:6a:c9:8c:4c:93:b7:c0:73:
e3:4a:30:07:8d:35:ae:d3:3b:c2:d5:44:42:4d:39:41:82:99:
96:ba:aa:92:70:b6:b0:4f:64:05:de:1a:86:d1:65:9b:24:94:
7d:09:f2:6e:ac:97:45:5c:1d:1f:6e:03:b6:a4:e6:08:88:ab:
b6:26:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:00 2024 by rpki-client on console-fra.rpki-client.org