Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/36WQc2R-LV70K957pw9XYsvvN2g.roa
File: 36WQc2R-LV70K957pw9XYsvvN2g.roa (raw, json)
Hash identifier: cuz7lv+pZcjILsjmiXD5DL+4WCZK4VVbiJ+C/EzE0H8=
Subject key identifier: DF:A5:90:73:64:7E:2D:5E:F4:2B:DE:7B:A7:0F:57:62:CB:EF:37:68
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B6FB37DFD05FC435803AEE46E91E6D575
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/36WQc2R-LV70K957pw9XYsvvN2g.roa
Signing time: Fri 27 Oct 2023 05:55:16 +0000
ROA not before: Fri 27 Oct 2023 05:55:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 163.5.137.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:b3:7d:fd:05:fc:43:58:03:ae:e4:6e:91:e6:d5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 05:55:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfa59073647e2d5ef42bde7ba70f5762cbef3768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:c2:0b:2b:a7:c8:b2:4b:7c:91:c2:03:75:
51:a0:86:3e:36:05:87:9e:54:31:3e:29:ff:87:32:
76:2d:6e:f2:2f:0d:4b:72:84:16:8d:31:28:e7:f1:
7e:9d:1a:9e:c7:3a:05:0e:b6:e5:ea:10:59:b2:44:
87:f1:2f:1a:1e:86:b4:4f:64:0b:c1:a3:07:4a:b1:
4e:6b:24:b0:0c:3a:b8:ff:6e:8f:ba:2b:5f:d6:84:
37:ae:8f:54:14:b2:cf:9e:e5:62:8d:6b:9a:15:b2:
06:b8:0b:1c:87:bf:1b:a0:e4:a5:e6:09:ec:45:dc:
1b:e1:56:42:00:d8:f7:01:fc:5d:12:6b:d8:1b:29:
ca:64:d2:bd:30:17:c3:e5:0a:d3:14:8e:68:ef:d8:
d4:c6:95:7a:b2:48:9f:d8:ae:fd:2f:8c:d9:8e:b8:
6d:53:92:f1:10:c7:bf:be:23:a3:b3:15:bd:79:0a:
b7:13:39:d9:1c:f8:2c:15:8d:75:91:53:e3:0e:b8:
34:65:5c:ed:54:d8:4e:70:b6:25:73:9c:85:4b:93:
0a:b0:35:2d:a4:f4:02:c2:b7:7c:40:91:86:7a:e3:
2a:b0:43:ee:eb:1d:da:08:7b:72:06:13:bc:93:77:
be:7e:7f:d0:5f:d5:38:48:e5:e1:db:82:d8:72:32:
a9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A5:90:73:64:7E:2D:5E:F4:2B:DE:7B:A7:0F:57:62:CB:EF:37:68
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/36WQc2R-LV70K957pw9XYsvvN2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
46:b8:92:39:40:a2:bf:72:37:e1:ee:f2:87:8b:4b:51:f6:0c:
c5:e4:81:f6:93:5f:69:8d:9c:e2:8c:eb:54:2c:32:a1:a8:d4:
c6:a8:75:35:0e:9d:d6:62:a8:aa:36:cc:68:93:02:24:f9:83:
a1:cc:da:6c:6f:2c:e9:39:bf:45:35:3c:f0:a3:2a:e4:15:be:
00:a4:4c:60:7a:bf:0a:1b:99:69:be:d9:7c:54:d1:c7:5d:d6:
4a:7f:59:0b:21:70:4b:b8:89:8f:41:5b:98:dd:9c:c7:91:74:
70:8e:52:7a:ea:82:9c:7a:6d:a7:5c:d8:6f:4d:9c:a5:1b:f1:
9b:57:51:1f:74:b7:e5:3a:61:d2:d3:3a:93:2d:b6:7c:a7:15:
f9:4e:43:f0:b6:36:56:e4:65:90:b1:0c:fd:31:c9:86:09:2a:
df:9f:69:9d:5d:27:6e:64:7e:96:5b:24:42:8f:0e:8e:95:77:
f6:bb:88:f1:b4:76:44:6c:b6:49:e9:a4:b5:7a:21:66:b0:6d:
ac:bf:2b:6e:3f:4a:e7:76:6a:9f:3c:47:2b:ca:cf:36:e6:7a:
4c:71:d6:74:7f:b4:08:47:cb:b2:24:83:b9:44:1e:a4:51:e4:
72:70:60:9f:24:f7:41:6c:75:f1:ed:ab:a1:53:75:96:5c:c9:
7d:f6:7f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 11:46:07 2023 by rpki-client on console-fra.rpki-client.org