Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3grg0a5FudhXyp6CrWWRs1RiMwM.roa
File: 3grg0a5FudhXyp6CrWWRs1RiMwM.roa (raw, json)
Hash identifier: Jh640gcwX2IbFI7uoluAXAnVyMVy62rraPJ9OqMLJko=
Subject key identifier: DE:0A:E0:D1:AE:45:B9:D8:57:CA:9E:82:AD:65:91:B3:54:62:33:03
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01858C75638F24CB2AE526A87AF8C131522E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3grg0a5FudhXyp6CrWWRs1RiMwM.roa
Signing time: Sat 07 Jan 2023 13:39:41 +0000
ROA not before: Sat 07 Jan 2023 13:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 163.5.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8c:75:63:8f:24:cb:2a:e5:26:a8:7a:f8:c1:31:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 7 13:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de0ae0d1ae45b9d857ca9e82ad6591b354623303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:32:6e:ff:9d:b5:6d:e2:b8:78:14:c1:99:
c2:4f:9a:32:9a:8a:90:4e:e5:12:22:f7:12:f8:8a:
f3:b3:73:93:fa:38:e6:31:33:15:01:e3:68:e2:ba:
92:b8:96:0e:c1:9d:11:53:18:f1:0e:d0:e8:cb:80:
c6:a8:a6:99:c6:13:f5:09:4e:d9:3b:26:9c:94:a3:
ad:34:6a:5d:ac:82:d9:bd:6a:37:e9:cc:92:f2:20:
20:2c:48:fe:68:46:d1:ea:df:73:56:02:c0:06:79:
d8:d3:04:e7:cc:24:ba:01:95:8f:d5:c2:27:f8:94:
23:4a:fa:3e:5e:3a:0a:98:14:4b:bc:7e:a5:3a:cd:
a3:45:90:28:95:62:82:7d:20:94:f2:d4:27:c3:07:
55:6a:56:e7:71:35:35:65:b5:88:67:b3:1d:0e:68:
cb:81:c1:0e:38:1c:11:f2:01:7e:49:7a:4b:0a:45:
ed:7c:f0:b1:20:46:14:5d:17:cd:e3:d6:6c:f5:52:
f2:c8:89:98:6e:50:30:09:a0:48:83:5b:b8:0b:a5:
d1:f0:3a:cc:e0:be:3b:f9:d0:b7:4c:ee:1a:0a:d3:
dd:5e:9b:95:86:ed:83:20:c4:53:aa:13:22:d8:b5:
b3:34:89:ed:f7:be:b4:f1:ed:53:b0:40:f3:86:c6:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:E0:D1:AE:45:B9:D8:57:CA:9E:82:AD:65:91:B3:54:62:33:03
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3grg0a5FudhXyp6CrWWRs1RiMwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:63:4b:3d:36:e2:ec:86:8f:a9:87:15:bb:33:03:ed:1a:28:
9e:d7:4a:1c:2a:ea:03:52:d4:50:58:e6:c7:50:88:3e:ea:6b:
e3:10:ff:3d:95:d1:1b:e0:b6:27:28:76:7f:e7:47:94:1f:92:
71:b8:33:2e:02:08:b5:72:9b:ba:cf:87:9e:69:f6:44:dc:45:
ba:3b:46:87:1f:3c:a7:7d:6e:02:bc:dd:eb:e4:db:4e:31:a9:
6b:3e:39:ee:3b:af:6e:88:80:40:4d:e5:42:68:20:56:15:99:
2f:31:eb:44:e3:30:ed:ec:22:4f:88:75:b0:f1:85:8d:e9:6c:
b7:6d:31:cd:1d:c5:f8:7f:47:86:d0:d7:7b:42:54:bb:fd:ea:
61:ed:2f:e3:63:7c:3f:53:d7:1e:da:e9:cc:79:a1:b1:33:94:
32:f8:07:de:82:ac:11:33:69:ec:ed:42:01:a0:4c:f2:0c:03:
c0:87:e0:16:44:e8:99:2c:41:c6:9c:10:4b:dc:3f:f0:01:a4:
98:e8:0d:8e:0e:79:60:ee:73:1d:06:2e:f6:8e:35:99:bb:05:
f1:bb:a6:9f:2e:ff:ef:c9:d9:a3:ae:0b:13:41:58:c3:c4:a2:
2d:c7:61:dd:83:65:a3:36:10:f4:19:03:fd:96:98:fd:c1:ab:
9a:fe:f5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org