Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6rnivy9zft1LxeXIfunBVE6l2k0.roa
File: 6rnivy9zft1LxeXIfunBVE6l2k0.roa (raw, json)
Hash identifier: CLnsMHnxaqiwnSeB4G6jD2mp4Lhqkz9T8oGN5FRTRGk=
Subject key identifier: EA:B9:E2:BF:2F:73:7E:DD:4B:C5:E5:C8:7E:E9:C1:54:4E:A5:DA:4D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042BC2A1226310FAFF17EAC5F038D78
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6rnivy9zft1LxeXIfunBVE6l2k0.roa
Signing time: Mon 02 Jan 2023 02:14:59 +0000
ROA not before: Mon 02 Jan 2023 02:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43431
IP address blocks: 163.5.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:bc:2a:12:26:31:0f:af:f1:7e:ac:5f:03:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eab9e2bf2f737edd4bc5e5c87ee9c1544ea5da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:31:72:28:4c:0f:c2:d5:32:45:68:e2:76:
c3:ab:01:cb:17:d7:65:fa:72:64:66:a9:59:84:f8:
d6:80:48:35:ec:66:6d:d1:19:e3:cf:e3:f1:d6:2a:
1b:3d:03:b9:7d:eb:0d:a6:84:2a:bf:f2:5b:5d:f3:
42:1f:5f:e0:2f:6e:c6:99:a5:0e:05:9a:83:50:08:
30:4f:b1:ab:b9:a5:7b:46:52:30:8d:0f:20:6a:39:
59:65:02:45:de:d8:d0:d9:db:dd:51:e5:dd:92:05:
02:f4:a7:6c:b6:54:86:f5:7a:28:f1:ae:7d:eb:38:
10:b4:8a:c6:c6:1d:a3:be:8e:0a:35:a2:c4:b5:62:
88:2e:77:dd:6a:98:aa:52:7f:09:b6:58:85:e6:46:
7a:3a:c1:7b:c8:3b:09:e4:60:15:5c:5d:82:bd:c8:
38:a5:22:3e:f3:dc:70:de:e6:42:22:ce:b4:59:56:
28:c5:8d:c0:d6:07:a0:ac:b6:03:0d:ba:2f:ca:f2:
c3:49:aa:53:7e:38:4a:78:4b:0d:e6:f3:73:15:72:
33:78:4a:14:a2:9d:96:18:ac:05:88:ec:f1:bd:2f:
64:91:c3:87:56:72:1f:9f:cb:cd:53:6c:28:10:9d:
8a:b1:5a:8e:a6:38:27:b6:0e:ad:95:f8:c0:74:ac:
ef:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B9:E2:BF:2F:73:7E:DD:4B:C5:E5:C8:7E:E9:C1:54:4E:A5:DA:4D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6rnivy9zft1LxeXIfunBVE6l2k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.193.0/24
Signature Algorithm: sha256WithRSAEncryption
60:14:74:d0:6c:66:f0:64:bc:25:2e:02:bf:11:c8:1a:9f:2c:
cc:f4:e6:66:1b:12:ff:82:c6:52:a3:40:03:6c:93:9f:82:2e:
8d:68:5a:06:ed:c3:9f:aa:fb:d5:9e:22:aa:2c:47:21:f0:98:
ca:6d:22:98:a5:ab:01:4f:6e:68:52:e0:e2:c3:f8:68:f2:89:
9e:f1:d0:41:31:dc:bc:83:70:58:07:9b:fb:61:4e:d7:d6:f3:
8a:eb:6b:0b:d9:9f:44:a8:da:fc:f0:46:ac:bc:61:21:bd:1e:
06:ef:2b:cc:93:d5:41:f2:66:73:9e:b7:cc:b0:7a:64:e4:8d:
90:e7:e3:f8:5d:be:3b:ac:16:a3:01:0c:d3:3e:d6:b7:fe:7d:
13:88:ac:82:71:5a:73:3e:50:da:28:d2:fa:a0:7e:dd:d6:cf:
26:fd:ee:64:5a:5b:c7:be:57:b9:a2:ab:d4:e1:d0:0c:ec:f6:
90:ca:99:f3:0a:b8:db:14:66:8a:c5:60:08:ad:d0:d7:a2:ef:
90:cb:61:fa:d9:a7:ea:62:ad:8c:03:74:35:b1:39:9b:cc:93:
57:91:ec:97:67:46:dc:ce:35:b1:6c:64:3f:11:9d:36:2e:01:
f7:b0:32:d5:21:ae:dc:17:e8:2a:26:a6:5a:26:2d:c2:56:6d:
0e:cd:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org