Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jyuUuuZwFtlrP-uXe73IydCf58.roa
File: 5jyuUuuZwFtlrP-uXe73IydCf58.roa (raw, json)
Hash identifier: 0m8t5SgemrKJwNx9kh64uSN3EB82ecBvMPMrqjj5lWU=
Subject key identifier: E6:3C:AE:52:EB:99:C0:5B:65:AC:FF:AE:5D:EE:F7:23:27:42:7F:9F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185CEC909140EE25C4FD3121FA6CB694C2A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jyuUuuZwFtlrP-uXe73IydCf58.roa
Signing time: Fri 20 Jan 2023 10:45:59 +0000
ROA not before: Fri 20 Jan 2023 10:45:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 163.5.188.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Mar 2023 11:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:c9:09:14:0e:e2:5c:4f:d3:12:1f:a6:cb:69:4c:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 20 10:45:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e63cae52eb99c05b65acffae5deef72327427f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:27:84:c6:df:42:88:08:d4:4e:f5:dd:53:
98:10:6e:c3:67:cb:cf:86:2b:98:fa:1c:3d:ff:6e:
5e:4c:a4:b1:48:6b:bb:f2:7e:c1:a1:69:b7:0f:c5:
7b:f3:ad:d7:08:60:f1:4d:c9:84:2c:2e:19:a7:13:
b4:08:66:6e:fd:ad:6d:d8:d9:57:96:bf:18:80:3b:
92:85:34:f2:92:15:96:84:99:4f:b9:14:4e:4c:06:
fb:db:73:3b:a6:d7:e5:93:a3:36:d2:ec:98:79:8c:
bc:94:c6:52:ea:e0:8a:45:dc:9c:e9:e7:9f:86:e4:
ae:7e:84:70:4d:a4:9e:d9:e4:c9:1c:1b:25:a2:d2:
6c:d6:96:c0:af:6f:cd:f3:d9:ee:bb:59:e8:f0:f1:
bf:c3:1b:86:2e:ca:cd:83:fb:17:53:06:71:b6:ed:
14:5a:52:8a:53:22:91:1e:79:ad:15:9f:98:25:17:
57:cc:bc:9e:77:f8:f5:20:19:ee:1c:7c:e1:c8:3d:
5c:fd:c8:e6:87:aa:0a:a5:a5:ed:6c:40:74:1b:bf:
1b:4e:80:97:2f:c5:a5:8e:2c:46:6e:82:1e:fd:e1:
6e:3c:87:68:58:6b:65:ca:35:ae:1a:97:9b:db:2c:
5c:0f:9b:46:c9:3c:fb:13:c7:e0:67:77:62:fe:65:
93:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3C:AE:52:EB:99:C0:5B:65:AC:FF:AE:5D:EE:F7:23:27:42:7F:9F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jyuUuuZwFtlrP-uXe73IydCf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.170.0/24
163.5.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b0:16:92:29:22:a0:37:6b:df:35:6d:75:ab:a4:fb:8a:41:
0e:8f:9b:86:8d:4b:ec:a4:d4:05:79:92:b6:d6:60:67:fb:65:
a4:34:f9:05:25:a2:9c:a8:23:68:e5:b3:d5:c6:de:bc:27:d8:
d8:95:19:f4:05:d3:25:19:cf:75:22:9d:81:a7:d6:5c:e3:a7:
b0:39:51:be:9d:92:55:fb:7d:d8:e2:95:72:9a:f8:e4:f7:72:
f2:04:41:f4:09:99:c6:77:88:31:72:72:57:ef:69:d9:df:ff:
89:0f:24:8a:c9:28:b4:c3:46:87:b2:d8:33:f1:da:09:42:56:
ad:28:a5:2e:b8:51:1e:14:d4:bf:85:07:1b:1f:35:71:99:27:
5e:3c:3d:f9:c2:0b:b5:ab:8e:7b:ea:e6:36:ed:0f:73:65:8b:
8e:43:fd:7e:78:41:26:94:9d:76:e3:bf:fe:93:7f:69:30:d9:
4f:0e:c9:83:03:f0:18:1b:66:b1:1b:4c:ea:75:ef:1a:d7:63:
d9:b8:18:9f:60:03:de:16:1f:7d:45:ad:96:04:22:6c:36:6b:
28:2b:c0:35:19:da:35:31:e7:17:58:3f:81:26:2b:46:b5:97:
76:df:c9:e6:08:30:4c:b0:45:44:9e:0b:86:85:d2:d2:af:80:
c1:c2:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:28 2024 by rpki-client on console-ams.rpki-client.org