Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3dmIZRiLQvnDsaiSalaFxeDNd6o.roa
File: 3dmIZRiLQvnDsaiSalaFxeDNd6o.roa (raw, json)
Hash identifier: fK1Oy0ewppXG9yEi9sIa5P+7MCaRStxvgVILZpOGbGs=
Subject key identifier: DD:D9:88:65:18:8B:42:F9:C3:B1:A8:92:6A:56:85:C5:E0:CD:77:AA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018692F3F0C1D53E5305826BBC93E648FFD7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3dmIZRiLQvnDsaiSalaFxeDNd6o.roa
Signing time: Mon 27 Feb 2023 12:58:25 +0000
ROA not before: Mon 27 Feb 2023 12:58:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:92:f3:f0:c1:d5:3e:53:05:82:6b:bc:93:e6:48:ff:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 27 12:58:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddd98865188b42f9c3b1a8926a5685c5e0cd77aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:11:b5:45:40:3f:87:7d:7d:55:a2:17:32:74:
87:8d:de:f5:0d:27:c1:f3:d5:05:f2:aa:81:e1:de:
83:c6:74:94:01:21:5c:e5:bf:b5:3e:94:fc:2b:1e:
b3:74:d7:e6:9d:dd:e0:4d:62:11:b6:51:12:24:af:
7b:9b:b3:21:15:df:00:76:58:d4:2e:f4:5d:0e:71:
4a:9f:19:4f:77:23:e2:be:bc:bd:98:c9:8e:82:79:
79:dd:62:de:d4:af:92:f7:d1:34:75:c6:cc:dd:ff:
c2:99:b0:53:7c:18:f0:c4:56:c8:dc:a0:75:5c:f1:
e4:28:2e:3f:a0:8f:5b:80:a7:01:5b:93:3a:ee:6b:
a4:d5:46:ac:50:f7:65:fc:e3:e1:e0:64:b5:ae:15:
ab:64:a5:36:d8:18:fe:e2:c6:ac:61:a0:1d:ef:e7:
59:2f:c1:9d:58:3c:d5:77:81:22:a3:de:fd:06:11:
ed:07:de:9f:78:4f:73:80:7d:86:d8:9b:e2:57:76:
24:be:ff:2d:3c:50:73:cf:63:57:80:ba:24:a7:bf:
30:95:13:df:6c:d4:27:19:85:5d:fa:4d:68:77:19:
a7:4d:28:ce:da:31:5a:35:65:ce:b0:08:34:24:d4:
14:fa:ad:6c:21:aa:f3:9d:06:35:5c:3f:20:69:b4:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D9:88:65:18:8B:42:F9:C3:B1:A8:92:6A:56:85:C5:E0:CD:77:AA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3dmIZRiLQvnDsaiSalaFxeDNd6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/24
163.5.176.0/24
Signature Algorithm: sha256WithRSAEncryption
47:9d:fb:75:45:c9:3b:6c:cb:98:6e:2a:16:ed:4b:86:10:cb:
7d:69:d8:7e:85:76:f0:1d:b3:27:41:6f:09:fa:ae:01:46:48:
c3:75:77:0c:65:e1:66:19:82:07:7b:e8:72:f2:d9:c3:54:f0:
46:76:16:d8:b9:51:a8:10:75:57:8b:02:af:37:5b:9e:f2:3d:
bc:77:34:d0:f9:f5:c8:6a:8d:2a:a5:9e:95:d0:b4:bd:db:9b:
41:4b:39:80:20:eb:15:f7:66:14:21:7f:54:5f:e3:9c:a8:ab:
91:a9:e0:d6:a5:7e:df:95:30:31:00:04:f2:2b:73:e4:fc:6e:
9a:9d:36:ca:47:62:dc:b7:97:38:af:b3:4a:27:c4:b5:66:5b:
c5:ef:ad:c7:f6:43:9e:93:81:8a:96:da:dc:e6:70:e7:8b:39:
e9:a5:d1:09:a5:b7:5f:cf:2c:18:91:2b:be:9a:c0:5c:c5:ed:
e8:5e:a4:98:26:47:23:5a:3c:02:f2:a2:1d:e2:8d:62:68:a6:
e2:2e:ca:1e:49:70:69:d2:94:6d:1a:3a:d1:f7:4a:0a:82:28:
e2:2c:ea:9e:66:79:1c:a4:98:55:60:b8:f6:8d:e0:f0:96:a7:
a9:cc:0e:b8:6a:3d:5d:0c:b9:8d:f0:f7:e1:14:1c:f8:7d:bb:
40:47:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org