Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6VFB__vsaExYn2rYVu3dk_1eTiQ.roa
File: 6VFB__vsaExYn2rYVu3dk_1eTiQ.roa (raw, json)
Hash identifier: e2lVCXSLAuXUmCDNiZU8UYnszT0Nq62W9VqrSgpEp/s=
Subject key identifier: E9:51:41:FF:FB:EC:68:4C:58:9F:6A:D8:56:ED:DD:93:FD:5E:4E:24
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C45666EC091F306A54188F7B998A0DC33
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6VFB__vsaExYn2rYVu3dk_1eTiQ.roa
Signing time: Thu 07 Dec 2023 17:49:49 +0000
ROA not before: Thu 07 Dec 2023 17:49:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397630
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:45:66:6e:c0:91:f3:06:a5:41:88:f7:b9:98:a0:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 7 17:49:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e95141fffbec684c589f6ad856eddd93fd5e4e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:d2:8f:13:d1:03:b2:8d:9a:20:c5:b8:5b:
8a:a4:fa:e2:0b:5e:32:08:c0:a1:5a:3b:c7:ad:d2:
c8:38:39:a6:79:31:3e:c8:fa:4e:ec:7a:99:7f:ed:
5c:23:76:6f:b6:80:fa:b3:bc:cb:88:e0:fc:85:ac:
32:88:90:3b:d1:df:79:44:7a:e4:64:98:9f:d6:b5:
a3:ba:1a:24:5d:7c:0a:ef:19:73:29:92:0c:1e:db:
d3:76:16:a8:10:ac:b5:16:5f:9d:95:97:97:7c:28:
c3:81:16:98:1c:11:57:63:48:18:55:e0:87:9e:92:
91:31:11:ba:1a:5c:7b:93:57:40:83:27:85:bb:8a:
4b:c0:77:0e:de:4b:ff:4f:ee:4c:e0:b4:b0:6d:eb:
a9:74:3a:be:87:8c:28:dc:c5:95:45:bf:dd:dc:5d:
39:91:54:7e:30:b6:87:5b:e1:2a:dc:76:86:51:a4:
85:f7:2c:c9:20:6e:92:39:9b:98:d7:33:5a:72:de:
0c:b6:3f:38:6e:e6:72:52:65:77:c1:8b:46:68:9b:
f1:f5:3d:5a:ae:18:dc:32:0e:a9:61:ab:3a:4b:62:
c7:7d:05:15:73:31:b4:7d:70:f0:de:60:28:06:1d:
fe:60:fe:43:8b:6f:bc:fa:6a:2a:69:95:20:1a:0a:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:41:FF:FB:EC:68:4C:58:9F:6A:D8:56:ED:DD:93:FD:5E:4E:24
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6VFB__vsaExYn2rYVu3dk_1eTiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
163.5.138.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:17:df:45:d2:c5:e3:aa:f0:06:6d:09:2d:fc:56:97:98:88:
b9:ad:12:49:c0:0a:4b:19:8a:6c:5c:0a:37:78:29:51:4d:44:
25:bd:2f:f9:d8:b8:f6:25:84:9d:8e:59:87:4f:26:e6:0b:76:
7f:05:91:74:5a:0c:af:58:18:e8:eb:3f:7a:5c:aa:4e:01:ad:
7b:24:9a:17:7b:fd:c2:2c:8f:1d:03:d9:93:3f:27:23:9f:a8:
97:e2:24:cc:40:0f:17:6c:de:7a:61:5a:ac:ae:94:96:d1:88:
0a:13:b2:18:c9:34:25:40:b1:5f:aa:c2:1f:02:ad:10:fb:cb:
ee:ed:d1:5d:2a:c6:9e:81:25:32:9f:52:cc:c0:9d:f4:0f:e5:
fc:3d:dd:72:34:7e:8f:4b:c2:f0:f2:ce:2f:4b:49:dc:fc:f7:
0a:30:1e:06:ff:59:a4:f6:82:19:0b:5c:86:c3:03:09:79:b6:
20:72:9c:7d:c2:46:a7:3b:dd:3a:87:04:50:4e:f4:3c:ed:50:
a1:6a:4c:1b:99:1b:67:4e:95:fc:1a:d7:1b:4a:67:a5:c0:1a:
98:44:02:93:ec:f9:f5:2d:69:ac:0e:09:bf:ba:8e:09:95:2c:
4b:d5:9a:90:cc:42:bd:03:66:d4:2d:54:1e:c4:10:86:ba:92:
2c:ce:dd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org