Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5WMLBG-nIUhdc8Vk63DbW5c8Yws.roa
File: 5WMLBG-nIUhdc8Vk63DbW5c8Yws.roa (raw, json)
Hash identifier: lTpjWocY4jiq6S5NUVm8xLiLOaK8JKCL2Pybw9rGrRQ=
Subject key identifier: E5:63:0B:04:6F:A7:21:48:5D:73:C5:64:EB:70:DB:5B:97:3C:63:0B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C5F9F53DC653FF7B03B9AC5D160E7ED8E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5WMLBG-nIUhdc8Vk63DbW5c8Yws.roa
Signing time: Tue 12 Dec 2023 20:02:06 +0000
ROA not before: Tue 12 Dec 2023 20:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1
IP address blocks: 163.5.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:9f:53:dc:65:3f:f7:b0:3b:9a:c5:d1:60:e7:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 12 20:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5630b046fa721485d73c564eb70db5b973c630b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:a6:f3:26:c8:8b:44:b0:5a:c0:d5:ea:21:
8f:f6:f4:ad:1c:7c:17:f8:e6:74:93:4b:2e:c7:8d:
f9:e5:7b:4a:25:8d:b4:b1:f6:98:00:6c:76:c8:a2:
a6:61:9f:83:87:b6:46:b1:6a:5d:ab:80:b6:56:b8:
98:02:2f:4d:6a:e2:39:44:2b:36:41:fa:89:b1:ad:
18:a7:6b:8e:19:38:dd:f9:8a:31:b2:40:0b:b6:3c:
e4:ba:32:50:50:66:38:5a:99:bd:a2:4a:76:92:5a:
8f:33:ea:fa:62:5b:81:76:92:32:f0:f2:06:27:1b:
7b:f8:22:a1:90:9c:7f:63:82:16:6c:e8:02:1b:96:
45:4a:b4:6d:79:aa:38:03:c2:87:08:db:d6:d9:94:
0d:78:45:96:89:a9:bc:b3:ba:34:48:4c:27:40:74:
75:78:1e:7d:62:3d:3e:e6:2c:b6:dd:12:c1:83:c1:
ad:c2:72:56:99:51:c6:f6:5c:28:b8:06:a3:83:f9:
04:a5:c2:e5:83:1b:cc:cf:f9:93:e2:d4:fc:fc:dd:
fa:4f:2e:d0:9b:7a:f2:64:ca:28:ae:8e:4b:70:f6:
ff:d1:66:22:17:cb:cc:72:cd:63:42:79:94:05:73:
da:3e:f2:48:45:56:0b:e7:55:ce:f8:eb:da:46:f3:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:0B:04:6F:A7:21:48:5D:73:C5:64:EB:70:DB:5B:97:3C:63:0B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5WMLBG-nIUhdc8Vk63DbW5c8Yws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.176.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d6:83:9b:93:3f:6a:42:8c:fe:16:55:a6:84:9c:d5:e7:6a:
f4:7e:3e:4f:21:74:4e:c9:d3:a7:6f:a9:ce:a6:73:b2:c5:7e:
2c:5f:4a:a8:55:e7:4a:c6:e5:5c:00:49:66:67:ec:8c:90:5a:
c8:de:5e:15:8a:2d:5a:08:21:81:bd:45:ea:fe:15:19:82:9e:
da:14:6a:32:b6:d1:72:4e:37:cb:5c:d6:35:54:a5:88:a6:0a:
57:10:3b:30:da:9e:64:ec:71:4d:4e:9e:ee:1d:55:32:84:45:
44:1f:af:ab:68:b7:a8:40:91:1d:94:ab:11:9b:bf:94:6b:04:
5d:62:65:f4:d8:ab:3c:6a:f5:8c:14:05:fa:cc:cb:ae:6f:8f:
c9:a4:32:21:b4:d5:8f:ba:6b:a8:a5:7f:f1:2f:0e:f0:eb:4c:
6f:9f:79:a6:37:5a:d9:ed:36:aa:13:8b:2c:e3:d5:c9:2b:60:
99:75:19:1b:7a:62:d2:d3:e8:7c:07:d8:03:6f:e2:86:8b:f5:
77:c9:f7:cf:ba:78:36:72:85:e2:01:44:f6:c2:15:22:3e:13:
8a:d3:3e:8e:91:a6:ad:a3:65:49:6f:c5:76:4c:0e:9e:5c:d3:
49:72:45:a9:04:f7:a7:a5:6c:8b:d7:ad:65:2a:07:1b:94:6a:
63:4b:90:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org