Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2gZC_Lg2z_958c1NzMTD1bHVhJo.roa
File: 2gZC_Lg2z_958c1NzMTD1bHVhJo.roa (raw, json)
Hash identifier: Wn2eZoCoFR6o0rutAnYBM5/VstYWmwhAQXxggWkYDb0=
Subject key identifier: DA:06:42:FC:B8:36:CF:FF:79:F1:CD:4D:CC:C4:C3:D5:B1:D5:84:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A672FEB7276291BA4192694FD794427F0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2gZC_Lg2z_958c1NzMTD1bHVhJo.roa
Signing time: Tue 05 Sep 2023 21:11:48 +0000
ROA not before: Tue 05 Sep 2023 21:11:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.127.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:2f:eb:72:76:29:1b:a4:19:26:94:fd:79:44:27:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 21:11:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da0642fcb836cfff79f1cd4dccc4c3d5b1d5849a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:67:db:7a:40:bd:80:72:03:95:41:f9:b0:
d4:a5:a8:e7:0c:8e:3a:7a:c1:e5:27:eb:6b:7e:3c:
97:5b:ce:27:07:93:d3:ac:8d:44:d3:1c:e0:b5:96:
ee:2f:81:e9:e8:9d:25:a9:54:f1:40:83:9e:22:21:
3b:0c:47:d3:3e:0b:a7:56:b2:b1:36:28:c3:5b:c4:
09:c3:cb:d3:5a:87:1e:7e:c4:78:b4:54:f2:21:bd:
53:00:5e:1d:ef:c7:3c:72:46:5e:18:6b:ac:5c:fb:
11:2e:3d:69:7b:70:8c:8a:f7:3f:84:f9:5b:2e:2a:
35:ae:92:0d:c5:26:bc:70:8d:ab:03:40:08:2d:ae:
d8:9a:6c:e0:e5:17:12:bc:b1:63:03:52:80:2d:89:
f4:36:cc:a4:2e:8f:0a:5a:0a:ec:22:56:5d:09:4c:
10:08:b8:ab:ee:27:ad:a3:04:94:17:8a:b2:94:72:
2a:8a:ff:c9:ac:03:b9:e5:60:08:ac:a7:f6:65:53:
01:b8:4d:34:13:06:50:a8:b5:9d:be:cd:f7:4a:91:
99:0d:66:23:c0:4a:9a:0d:0c:27:08:ec:86:ea:71:
24:b0:95:d5:09:e4:3a:bb:94:66:93:16:ee:8c:7b:
3a:c8:ed:fd:88:9e:b0:d7:3a:32:11:94:59:25:5d:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:06:42:FC:B8:36:CF:FF:79:F1:CD:4D:CC:C4:C3:D5:B1:D5:84:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2gZC_Lg2z_958c1NzMTD1bHVhJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.127.0/24
163.5.145.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4b:7d:63:44:3a:e7:48:34:26:27:eb:07:07:7e:56:cd:da:
d6:16:3f:a3:ad:6f:2a:36:6a:0f:1f:a2:5b:00:de:03:b0:0b:
37:34:7e:b9:29:70:6d:d7:19:0e:37:e1:94:f0:e2:0f:8f:fa:
03:c9:d1:6b:67:23:dd:64:bf:66:e7:47:0c:31:69:b4:0b:d1:
75:9d:b6:9d:f9:64:05:ee:3c:38:d8:e0:85:23:67:5e:be:36:
d2:4b:ee:4d:da:9a:70:e1:7d:4d:a4:f9:91:21:36:77:a1:fb:
30:eb:10:e9:15:c1:66:51:97:73:95:e9:26:51:cb:92:1a:65:
07:b5:b7:8b:60:94:67:de:d1:1f:35:ed:f5:67:a0:d3:d3:bc:
86:03:22:41:39:af:6f:f2:6f:79:e5:0d:ea:30:39:3e:09:12:
71:98:5d:77:18:ce:1b:ee:88:e7:73:70:ce:ba:f3:58:5e:3c:
a6:27:ac:a4:62:48:10:07:9a:cb:fa:48:05:62:35:16:5f:38:
cc:71:e5:c4:ed:f8:88:56:93:b0:9a:d2:10:b1:0e:2c:de:5a:
1a:26:46:02:0a:dc:07:75:c9:6c:e5:38:85:08:c8:d8:56:3c:
ed:4f:b6:1a:77:42:12:23:81:5c:57:91:81:40:ba:20:5a:82:
0a:db:74:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 10 16:12:54 2023 by rpki-client on console-ams.rpki-client.org