Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1znprPfYWIMMRT3Gj_f9E6R0ZaU.roa
File: 1znprPfYWIMMRT3Gj_f9E6R0ZaU.roa (raw, json)
Hash identifier: 8ncK+wAtJT6INdGijaeOBifi/8qmdBpyl4H7LlK6uEI=
Subject key identifier: D7:39:E9:AC:F7:D8:58:83:0C:45:3D:C6:8F:F7:FD:13:A4:74:65:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018AC1783E1B48624BAC77CFD047BA4AE6F7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1znprPfYWIMMRT3Gj_f9E6R0ZaU.roa
Signing time: Sat 23 Sep 2023 09:56:37 +0000
ROA not before: Sat 23 Sep 2023 09:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132825
IP address blocks: 163.5.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:78:3e:1b:48:62:4b:ac:77:cf:d0:47:ba:4a:e6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 09:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d739e9acf7d858830c453dc68ff7fd13a47465a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:b7:5f:98:3d:81:44:cb:f4:8f:80:79:0d:
3c:11:7c:55:5d:78:77:fd:56:8e:7b:cd:6d:2d:0b:
37:46:e4:2e:50:78:fd:e9:f3:66:c9:c5:4f:d3:1d:
7b:da:2b:4c:e1:b5:df:0c:f2:81:2b:bb:60:ba:42:
c9:56:97:46:4b:e2:15:54:08:b2:e3:a8:b9:5b:b9:
08:a8:c4:db:4b:5f:14:16:62:6b:fe:19:aa:ca:6b:
88:4e:cf:4a:c8:5a:b1:6e:ff:96:74:2c:b6:ec:f7:
db:7c:3f:9a:70:1b:b8:ca:0e:d9:60:2c:f3:c2:f2:
2d:f4:3b:77:c4:12:6a:7c:05:c1:eb:5b:3c:a3:c4:
a5:00:c8:d6:ed:a6:2f:e2:98:2a:a6:21:cd:24:99:
d0:b9:b5:cf:b6:a1:60:f2:fd:ac:15:dc:d8:2e:f8:
40:da:c8:b0:2f:4e:ae:46:31:84:ac:35:f7:12:17:
55:20:d2:ed:56:82:dd:76:aa:c5:81:fd:f3:b7:71:
3b:c4:27:53:e4:6f:b3:0a:dc:65:9b:99:3f:5d:ef:
8d:ab:49:e3:e5:81:15:2a:b5:09:ae:7e:89:77:5c:
61:f9:4e:50:2c:7a:3a:04:5a:55:48:75:f3:c0:4a:
c3:49:70:3d:32:a5:72:a7:14:c6:ca:b8:15:1f:f6:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:39:E9:AC:F7:D8:58:83:0C:45:3D:C6:8F:F7:FD:13:A4:74:65:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1znprPfYWIMMRT3Gj_f9E6R0ZaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.70.0/24
Signature Algorithm: sha256WithRSAEncryption
38:d2:42:5f:b5:0e:15:f3:12:4a:72:47:67:36:a6:2d:21:f6:
27:0c:26:31:68:aa:a6:dc:b1:3c:d1:a4:78:2c:91:97:4d:61:
62:ad:3b:ea:f6:73:5b:32:90:54:c6:45:33:41:12:c3:17:88:
a9:50:55:7a:22:72:81:b1:11:16:8a:fe:1d:ca:29:43:2f:ff:
ec:35:35:64:e8:94:b2:fd:30:24:3b:08:f6:89:0d:4e:59:3e:
bc:c6:82:5b:5a:bd:5c:d7:63:6e:31:30:07:bd:34:a6:20:8a:
06:d7:68:eb:ac:c9:c6:70:1b:e3:3a:09:b3:a4:32:56:25:06:
4d:fa:3c:84:38:bc:95:9c:78:1d:b4:ca:d4:a2:07:06:79:04:
60:58:3a:06:05:bd:97:bf:ac:ea:18:8e:46:02:fe:1b:7b:09:
0b:38:f9:b4:3e:af:9f:ab:e3:df:e9:15:68:d5:f4:10:00:08:
62:36:89:9c:aa:23:1a:ef:bb:81:cc:22:9e:9a:81:fc:b9:cf:
52:89:b9:bd:89:69:8a:2a:22:f8:bf:06:ef:20:67:54:e6:40:
67:52:60:97:8d:61:6b:a6:88:a4:02:a3:4e:2e:22:39:1f:fc:
e1:68:ee:6b:4b:7c:23:f0:92:85:5b:95:61:d5:be:2e:d0:9b:
58:44:05:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org