Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7B6I361UG1iKWgHzmbQfAm6yatA.roa
File: 7B6I361UG1iKWgHzmbQfAm6yatA.roa (raw, json)
Hash identifier: G6WQI0nVFqsBdvOnZI+sAiQsBmTMF+ub+81zkWVyz6M=
Subject key identifier: EC:1E:88:DF:AD:54:1B:58:8A:5A:01:F3:99:B4:1F:02:6E:B2:6A:D0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018586935B9D4A42D65E207E174E7A19E79F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7B6I361UG1iKWgHzmbQfAm6yatA.roa
Signing time: Fri 06 Jan 2023 10:14:42 +0000
ROA not before: Fri 06 Jan 2023 10:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 163.5.103.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:93:5b:9d:4a:42:d6:5e:20:7e:17:4e:7a:19:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 6 10:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec1e88dfad541b588a5a01f399b41f026eb26ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4c:68:a2:ca:bb:de:88:49:f1:d9:73:15:bb:
cc:e7:3a:04:b3:32:0a:93:84:60:f8:64:b6:d7:f1:
6a:a0:ba:3a:8d:3a:77:51:e3:6a:e4:ce:6c:f6:74:
05:1f:98:cc:03:53:6b:23:f2:ae:11:17:28:a0:5d:
f6:43:60:31:ac:a6:f9:b7:2d:ca:ff:af:36:7a:46:
36:30:59:73:13:c1:f0:4b:4b:cf:bf:da:da:3d:c4:
3f:3f:18:61:9e:d6:29:68:ea:2d:ce:fe:07:ed:23:
73:35:30:6f:ca:39:e0:66:55:69:9d:04:33:99:18:
d8:c3:89:76:c6:2b:a1:9b:61:aa:7e:d1:47:ae:71:
9d:79:98:f6:f4:87:4b:11:a2:8e:7f:7b:90:f8:d0:
f5:fe:3f:9b:55:79:b8:69:b1:02:d4:20:29:9e:ee:
8d:57:67:bb:e9:05:25:65:96:c9:76:f8:08:48:97:
cf:ad:d4:d6:a1:d5:38:4c:4c:48:a5:a5:dc:ee:7a:
34:ad:4a:eb:d0:1b:de:fe:23:ff:9b:0d:c7:bb:fa:
4e:07:32:d4:39:8a:9d:ca:1b:c2:4f:f4:ce:c7:55:
5d:6a:26:48:1e:69:b1:6f:ae:7f:d3:98:ad:1b:7a:
21:fd:9b:ba:e6:24:0a:a5:39:a8:c2:7e:7d:1c:ad:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1E:88:DF:AD:54:1B:58:8A:5A:01:F3:99:B4:1F:02:6E:B2:6A:D0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7B6I361UG1iKWgHzmbQfAm6yatA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.103.0/24
163.5.109.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:db:8b:6f:d3:4c:99:a1:6c:6c:a8:07:f2:92:b8:08:00:51:
20:65:c8:5f:79:f0:ef:3c:f5:ea:60:b6:da:bc:fe:da:61:88:
7f:0c:5b:5d:8e:f6:45:ab:7d:9c:28:c1:47:4e:45:f9:53:bc:
a1:9a:08:34:88:ee:d3:b6:20:4d:78:20:dc:7c:70:6e:f0:9d:
df:a7:2c:97:73:57:c8:14:db:56:2b:37:7b:87:6d:1d:86:a1:
d6:eb:33:aa:62:29:76:11:48:21:a9:46:eb:8b:18:cf:8d:4c:
f5:aa:80:cc:12:62:6e:8c:8f:1e:27:58:87:d1:48:e0:8a:be:
d3:d0:02:c8:4a:f2:d8:c6:8e:7e:ae:30:d4:53:78:46:8d:d8:
7c:c6:91:a3:30:b3:89:4c:bc:f1:06:b7:57:da:db:08:fc:89:
c4:b6:55:cc:88:7e:81:13:17:b6:a9:e1:43:c7:76:db:2e:84:
2e:15:2a:27:98:99:57:19:42:6f:9d:7b:df:d1:d7:91:e1:37:
19:60:23:7f:00:2b:2a:b0:c1:af:93:76:80:0f:13:0e:9a:af:
96:7d:8f:89:a7:2f:90:4b:05:d1:ad:4b:76:7b:14:7d:d2:0e:
74:87:cc:c6:66:ad:66:cb:1f:06:4d:81:fe:65:3b:b8:89:7e:
da:04:b8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org