Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7dJwM0LoBgx_bExV8IYhLiUXEp4.roa
File: 7dJwM0LoBgx_bExV8IYhLiUXEp4.roa (raw, json)
Hash identifier: a2IminMFrwsyvyvLVtle+JamAJcFUrydKQjlUrNQitM=
Subject key identifier: ED:D2:70:33:42:E8:06:0C:7F:6C:4C:55:F0:86:21:2E:25:17:12:9E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01872603808C474843E93B16AA2FDEB3B90E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7dJwM0LoBgx_bExV8IYhLiUXEp4.roa
Signing time: Tue 28 Mar 2023 02:19:36 +0000
ROA not before: Tue 28 Mar 2023 02:19:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 163.5.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:03:80:8c:47:48:43:e9:3b:16:aa:2f:de:b3:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 28 02:19:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edd2703342e8060c7f6c4c55f086212e2517129e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d7:3a:8b:ab:f9:a3:5f:08:d1:76:f2:7f:ed:
c8:ba:c4:6c:eb:15:bc:64:27:01:c1:71:51:81:f7:
fe:6b:37:2e:2b:b1:a0:4f:2f:91:10:dc:b8:38:43:
bd:d4:06:14:58:22:54:8c:7e:3e:d5:c8:79:4b:85:
07:b4:44:35:32:86:ee:eb:38:0d:85:e1:37:f0:db:
98:5d:53:ff:9f:53:86:04:b5:1b:e5:75:0c:b6:6c:
f5:8e:2c:53:7b:2d:b1:bc:f7:9a:5a:0a:7f:c9:9c:
86:78:cb:ba:a8:69:03:a3:1e:64:55:06:b6:0f:af:
c7:23:24:70:1c:79:10:4e:90:32:6a:6c:2c:68:28:
6c:0e:99:b2:47:03:2d:25:c0:7e:27:a1:bc:74:88:
53:f5:6f:d3:35:b6:21:85:89:24:dc:bd:02:54:91:
99:db:db:e9:54:62:05:53:25:dc:77:17:e9:f8:93:
93:e2:1d:5c:5d:b8:92:7f:be:3a:29:76:8a:1d:a4:
21:79:20:5d:8c:35:38:bd:8d:bf:0f:bb:ba:a5:9b:
a3:fe:68:c9:57:4f:f0:ca:8b:99:eb:b5:fb:5b:3a:
f3:41:b5:9e:d7:80:e7:61:54:be:19:08:98:7f:65:
3b:6a:8b:39:19:c4:7b:9f:44:b1:6a:d9:28:69:99:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D2:70:33:42:E8:06:0C:7F:6C:4C:55:F0:86:21:2E:25:17:12:9E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7dJwM0LoBgx_bExV8IYhLiUXEp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.148.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:43:bc:55:3e:0d:5f:d9:ac:ca:b9:10:ff:d3:df:87:b8:55:
65:e9:66:e9:52:c5:c1:d9:8f:72:5b:51:47:c5:a5:46:2d:71:
c2:a0:00:0b:f8:04:f4:28:12:bd:40:3a:af:60:89:56:57:e1:
c2:58:49:1c:ef:a9:10:f8:41:fd:6a:18:d2:a3:9d:c8:f5:fc:
c7:00:d2:55:1e:d5:fd:6e:2b:9d:0f:76:3b:9e:29:80:d1:34:
e8:16:ba:05:87:33:39:1f:2d:32:6a:6d:6f:38:2c:d5:20:3d:
7d:4d:19:48:5a:2b:1d:13:d7:6a:c2:0b:04:c1:30:ca:cd:b4:
39:12:c6:4c:32:f0:d3:72:66:1a:25:4c:26:c3:cf:21:23:15:
c6:a0:de:13:60:b3:49:de:3c:be:2f:57:4d:0a:76:60:4a:75:
69:89:17:22:0c:74:7f:90:3e:93:6e:8f:03:e7:b1:dd:21:30:
a5:2b:03:24:b0:43:bd:05:22:de:15:6e:bc:f2:53:9c:7b:40:
d0:4b:90:02:13:89:37:62:f7:82:e4:1a:0b:65:e0:50:e9:78:
de:96:f9:2e:3f:00:5e:bc:6c:3b:c4:23:d9:19:a9:81:25:e0:
98:62:aa:05:8a:f2:04:26:0f:50:fd:fe:7f:77:1a:34:59:c3:
dc:c2:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org