Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3IU04QXQ-2VwlzwoJZqbss1Lqro.roa
File: 3IU04QXQ-2VwlzwoJZqbss1Lqro.roa (raw, json)
Hash identifier: WjEtLZPYZK6nnKojHd6vSM7BsmL+M2AtUXL86I+YQA0=
Subject key identifier: DC:85:34:E1:05:D0:FB:65:70:97:3C:28:25:9A:9B:B2:CD:4B:AA:BA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B62344C81F546F1E1AFE451042E3C0D77
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3IU04QXQ-2VwlzwoJZqbss1Lqro.roa
Signing time: Tue 24 Oct 2023 15:01:16 +0000
ROA not before: Tue 24 Oct 2023 15:01:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57229
IP address blocks: 163.5.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:34:4c:81:f5:46:f1:e1:af:e4:51:04:2e:3c:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 24 15:01:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc8534e105d0fb6570973c28259a9bb2cd4baaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:69:09:03:78:26:75:f4:b4:d0:ac:9e:53:
75:21:20:f6:a5:c2:2e:20:54:73:cd:6a:25:b3:38:
64:75:61:e5:75:86:03:57:52:fe:0d:33:86:3d:24:
56:df:e8:38:61:59:71:38:cd:42:76:ee:16:ab:ad:
ae:62:b1:50:b7:80:d4:e8:25:7e:bb:a7:be:e7:6f:
e1:a6:83:a2:06:0f:39:7a:63:1d:59:da:2d:1e:2b:
84:a4:a5:dc:97:cc:04:7c:96:20:4f:30:d8:e8:b8:
cb:b0:42:16:48:63:f4:68:3e:c7:90:e4:8a:33:db:
39:24:ef:d1:55:19:fb:ec:45:13:9a:be:a5:22:4d:
9d:6f:81:8d:c3:f9:0f:55:f6:a8:f9:11:bd:ee:52:
67:c8:21:74:93:82:2a:d3:d3:46:1d:50:3b:a4:8f:
ef:88:b8:f3:6c:2f:72:e2:d1:88:bf:f6:69:8a:ad:
21:cb:f3:ae:38:38:29:ba:1b:3c:e6:73:04:9d:90:
b1:e1:2d:a6:47:66:6c:79:cf:ff:93:5e:f4:ff:4f:
d1:03:ad:07:44:23:a1:51:0c:c6:c7:a1:b6:02:a4:
54:42:ee:17:65:21:50:8c:5f:54:46:9f:ad:08:1c:
50:30:4e:0b:e7:f6:9b:9e:9d:2c:04:7a:db:86:c1:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:85:34:E1:05:D0:FB:65:70:97:3C:28:25:9A:9B:B2:CD:4B:AA:BA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3IU04QXQ-2VwlzwoJZqbss1Lqro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
Signature Algorithm: sha256WithRSAEncryption
03:59:a9:2f:a6:11:72:33:e6:2a:f2:5e:00:b4:0d:0b:72:f9:
7c:89:a1:f6:99:ca:54:24:9c:aa:13:fc:b9:9a:99:17:7d:0b:
c4:1d:ec:c7:c0:2b:5f:14:ca:5d:57:af:97:a4:5e:b7:bf:94:
e5:7a:14:4b:88:e3:e0:cb:88:90:51:da:91:bd:db:74:31:79:
0a:68:0b:7b:69:5b:9e:1b:af:38:29:c0:a7:2c:a8:2c:3a:d9:
a3:86:d1:f7:bf:4a:58:d3:74:21:e9:30:47:96:cb:38:1b:67:
06:5c:82:37:22:9a:71:50:85:21:85:01:59:eb:42:1e:3a:e4:
10:cd:96:2e:b4:0c:1f:0c:fc:1e:17:74:91:7e:17:da:a9:3d:
e2:1e:33:8c:04:da:c3:9d:7e:5a:5e:14:9b:7b:28:68:96:d2:
fa:cc:4d:fc:c2:a7:5c:9e:a3:23:8f:4a:fe:a9:4f:2a:0e:f5:
e1:94:e7:8e:26:06:0e:9a:5f:5c:b0:40:52:15:35:05:31:c0:
49:e7:02:8d:9c:f3:58:e3:42:d2:a7:a0:21:de:e9:9e:8d:76:
9d:a7:3d:ca:08:a0:d4:d8:d1:81:85:06:1e:8e:e8:36:7e:3a:
9b:33:7f:39:c6:e0:d0:40:c1:b9:4f:d2:5b:8f:7e:4a:d1:a0:
69:96:58:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 24 04:33:17 2023 by rpki-client on console-ams.rpki-client.org