Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5p-zYv5CL7XBl1f3Ier3i99AZu8.roa
File: 5p-zYv5CL7XBl1f3Ier3i99AZu8.roa (raw, json)
Hash identifier: Zq7f2glfE84ZTeB1LLDZKxYHG6zqJsHFl4T2Rd63/uE=
Subject key identifier: E6:9F:B3:62:FE:42:2F:B5:C1:97:57:F7:21:EA:F7:8B:DF:40:66:EF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188BFC0D0FF88E87AD45C246C406086215B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5p-zYv5CL7XBl1f3Ier3i99AZu8.roa
Signing time: Thu 15 Jun 2023 15:51:04 +0000
ROA not before: Thu 15 Jun 2023 15:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:c0:d0:ff:88:e8:7a:d4:5c:24:6c:40:60:86:21:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 15 15:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e69fb362fe422fb5c19757f721eaf78bdf4066ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:59:f5:f2:fe:68:5b:8a:0a:03:d8:31:15:9d:
6c:9c:59:7e:07:99:6c:df:e7:be:4b:23:b3:d3:3d:
d6:67:23:16:03:18:ad:46:51:2e:23:69:52:f6:2f:
14:1a:f7:d0:b1:23:08:4f:6d:17:b5:88:57:8d:95:
76:a8:84:a7:5e:30:0e:bd:98:eb:95:0b:66:ad:64:
d8:6c:06:3b:92:72:fe:f2:53:33:17:f8:0d:49:51:
f5:f7:bc:3e:cb:1d:1f:0c:6e:f8:64:3c:4f:b7:e5:
93:98:b5:1f:f6:7d:5c:65:fa:5d:86:1a:f1:39:14:
f5:07:78:e4:3b:0b:5d:96:8e:77:55:d3:da:90:e1:
85:88:6c:09:bb:41:ef:30:61:76:82:d7:b1:87:e3:
2b:65:82:f4:9f:73:f4:e7:e0:28:06:7b:f4:94:f4:
4e:19:79:2d:79:35:12:c8:b3:56:6a:cc:89:db:95:
28:0e:ab:bc:f2:06:88:08:a0:db:9a:e7:68:b5:24:
3a:4c:d2:18:0d:79:56:b3:15:0c:02:cb:38:58:9b:
5c:a9:6a:b7:8b:02:37:1e:7d:e8:a3:d1:0a:13:4a:
eb:2d:34:62:94:71:0b:0a:d3:85:cc:2e:ee:57:a1:
55:2b:bb:b9:11:5f:c0:96:96:a6:06:70:43:cf:35:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9F:B3:62:FE:42:2F:B5:C1:97:57:F7:21:EA:F7:8B:DF:40:66:EF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5p-zYv5CL7XBl1f3Ier3i99AZu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.159.0/24
163.5.168.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ae:87:e1:2d:2e:60:8c:7b:e9:59:7d:fc:6c:eb:fa:7e:f6:
26:ef:ed:9d:7b:0c:15:dc:3b:b4:ea:da:0b:95:79:24:be:82:
07:d2:f5:41:aa:59:3e:67:ab:b9:74:53:0c:85:c9:c4:b4:ff:
eb:b6:10:b0:20:7c:de:f0:ef:4a:01:a1:52:48:03:50:e9:f8:
1b:c5:8d:ac:ee:09:f5:dd:45:70:48:f8:d6:2f:fe:e5:9e:a3:
44:75:ee:9a:51:07:3b:cf:eb:55:92:ce:93:3c:17:0f:12:dd:
76:1a:3e:13:8a:97:88:9e:b6:be:59:c7:2d:51:53:c3:fc:a7:
4d:37:a3:cb:cb:8a:49:7e:14:b3:0d:b4:ed:87:16:2f:06:94:
3d:bf:8f:17:70:e3:35:99:58:4e:f2:50:26:29:84:da:c4:b1:
ab:f1:be:12:a8:19:51:95:cb:d9:95:6f:7f:3e:c1:b1:06:90:
40:ad:6b:13:c5:80:19:8b:fe:2e:8a:ac:2f:01:53:f6:2b:d3:
0a:df:95:36:e2:ef:4e:eb:dd:71:19:c2:53:44:44:54:95:3f:
b5:5b:87:1b:9a:9c:4a:4d:9c:d0:17:35:a5:f7:74:3f:d7:74:
24:0a:29:86:30:22:94:71:17:2b:4b:cc:87:f2:b6:f4:41:5a:
44:bb:4f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org