Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3YFcC8vTaLbyqxQI364aLmlSNiw.roa
File: 3YFcC8vTaLbyqxQI364aLmlSNiw.roa (raw, json)
Hash identifier: zcprJfAHd3pU9yR7DHNsvOb7Qcktu7M7A4v9vrKJNPM=
Subject key identifier: DD:81:5C:0B:CB:D3:68:B6:F2:AB:14:08:DF:AE:1A:2E:69:52:36:2C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C91399219B79F6F0CF1EF384202F73C16
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3YFcC8vTaLbyqxQI364aLmlSNiw.roa
Signing time: Fri 22 Dec 2023 11:11:58 +0000
ROA not before: Fri 22 Dec 2023 11:11:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 163.5.137.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:39:92:19:b7:9f:6f:0c:f1:ef:38:42:02:f7:3c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 22 11:11:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd815c0bcbd368b6f2ab1408dfae1a2e6952362c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6e:5c:d9:ea:70:c2:78:68:1b:24:a3:c2:91:
d9:81:1f:6e:b2:64:60:74:b1:06:04:62:65:52:b2:
41:7f:6b:32:02:c6:08:59:b0:83:62:11:08:27:96:
92:af:98:93:7d:07:61:b0:15:bb:8a:bc:0a:60:5e:
4a:d5:11:5f:0a:09:1e:a7:fc:79:58:99:b5:86:31:
e3:1a:a3:16:a5:20:e4:b3:24:98:c2:e0:f0:db:f3:
8a:04:fb:f3:bd:3b:29:b1:9c:74:c5:4f:28:67:85:
d3:6d:fa:29:31:f8:15:c2:4d:36:dd:11:85:1a:1d:
05:45:2c:51:f0:ea:b3:33:1c:66:cc:0d:ff:3b:bc:
8a:04:ed:bc:3b:e5:61:07:4d:45:53:c5:8f:be:9f:
88:ff:ef:3e:5a:dd:db:c2:86:42:ca:c8:39:df:aa:
ff:1d:2f:6e:0a:1c:07:27:35:87:63:4d:6d:18:78:
69:4a:f5:ee:15:26:48:08:e1:4e:13:09:de:9e:59:
d9:f1:d7:b8:46:93:25:13:59:a8:a6:18:ca:7c:ad:
33:29:da:82:9c:9d:ad:4c:e2:9c:0e:2c:82:31:82:
36:b0:11:0f:c8:3a:d4:df:7b:40:42:21:c5:54:ea:
66:f0:49:44:d9:46:38:ad:78:b9:76:32:70:89:77:
7b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:81:5C:0B:CB:D3:68:B6:F2:AB:14:08:DF:AE:1A:2E:69:52:36:2C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3YFcC8vTaLbyqxQI364aLmlSNiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.149.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b4:31:f5:7b:1a:19:61:3e:7d:3a:6a:9e:5e:99:04:06:7d:
14:13:66:a3:bf:41:62:02:7c:6a:42:ec:8e:ec:45:e9:9c:58:
f5:40:be:d5:cb:f0:12:6b:11:f4:f4:45:6a:86:80:b8:08:c0:
ee:3a:01:c9:5f:70:42:cc:e5:73:82:ba:4f:ff:b6:9a:d0:26:
3e:90:e2:52:d7:a2:b7:31:45:50:42:ba:92:1f:cc:52:e1:39:
6b:6e:fa:28:f9:a3:9b:0b:b2:9c:4b:0b:20:bd:52:13:70:3c:
e5:f0:94:2f:7b:3a:c2:d5:16:b1:1e:30:b6:6c:6b:da:a2:66:
7d:b9:c0:79:68:5d:03:57:41:a3:9c:84:7e:73:6d:9d:36:01:
e1:57:d0:30:84:da:16:6b:46:66:a0:63:78:b1:9c:e1:f8:1d:
cd:91:ec:69:99:b4:9f:a6:3d:8d:d0:9f:1f:d1:11:b2:bb:16:
7f:de:3e:6b:a2:4a:b6:a7:f0:c5:f0:2e:e1:39:c7:e7:a5:fd:
29:de:ec:87:42:6e:2c:28:96:0e:86:64:c8:4d:a4:56:b1:3b:
e1:c7:44:b8:5c:66:7b:1d:93:16:c4:c8:d3:08:cf:56:b3:f8:
4d:04:1d:6e:78:b3:b8:ab:54:25:bd:68:6b:cc:8e:d2:01:a6:
79:a5:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org