Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7z0CcznnSFgYzhhLmZFsgEPZ9Sw.roa
File: 7z0CcznnSFgYzhhLmZFsgEPZ9Sw.roa (raw, json)
Hash identifier: TCrpi0Ol3x9xBwQ9zyxwwD8aiEjxOaD36oGbhnUShQg=
Subject key identifier: EF:3D:02:73:39:E7:48:58:18:CE:18:4B:99:91:6C:80:43:D9:F5:2C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01877BD7DDB561011A197BC3755698EEFDCF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7z0CcznnSFgYzhhLmZFsgEPZ9Sw.roa
Signing time: Thu 13 Apr 2023 18:19:17 +0000
ROA not before: Thu 13 Apr 2023 18:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 163.5.67.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:d7:dd:b5:61:01:1a:19:7b:c3:75:56:98:ee:fd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 13 18:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef3d027339e7485818ce184b99916c8043d9f52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:1e:50:f8:e4:c5:82:cd:8e:ed:27:5b:30:
80:c4:ac:b2:92:1f:44:7c:f2:68:c0:88:f2:9e:f3:
5f:90:0c:a2:7f:11:7e:11:fa:bf:dc:2b:2f:86:ce:
f8:8a:44:c6:c1:c9:8c:1e:c9:5c:93:97:65:db:51:
d8:cb:db:cb:02:0b:12:83:82:62:03:10:d7:90:4f:
ea:d8:dc:42:01:4a:97:1f:23:ac:e2:0b:9c:5a:5a:
b6:15:a3:4f:c4:92:0b:12:cd:55:30:2e:65:ec:aa:
da:89:59:95:46:c0:d9:cb:24:58:65:16:f9:4b:df:
ba:1a:86:0e:e7:28:47:58:73:df:fc:fa:6d:0f:10:
94:d1:0e:41:8f:e1:44:26:b6:57:6d:8e:23:7f:c7:
80:e0:df:55:93:74:ab:98:93:5c:18:c4:21:92:b7:
f6:14:4d:85:5b:1c:c1:ae:d1:e3:ae:79:f3:2f:af:
78:24:0f:f1:54:70:0f:8e:60:b1:37:f2:49:22:0e:
7a:c1:07:ad:84:9c:7e:a7:88:0c:40:be:26:17:4a:
d4:54:53:0e:6f:68:4d:fb:3f:03:54:8d:06:7b:95:
d0:6e:f6:65:e4:cd:fe:e2:a0:f1:dc:94:65:4b:42:
88:c8:85:3a:60:39:f0:89:62:3c:5f:f0:df:ee:84:
5f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:3D:02:73:39:E7:48:58:18:CE:18:4B:99:91:6C:80:43:D9:F5:2C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7z0CcznnSFgYzhhLmZFsgEPZ9Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.67.0/24
163.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3d:7b:8c:b3:47:d4:a5:4a:68:41:ed:ea:eb:4a:da:91:87:
da:c5:85:bc:89:a2:8a:6c:78:3d:5f:49:cf:76:6a:01:da:a9:
b0:68:fe:1c:09:89:5f:34:5d:cf:d8:91:f4:11:ff:ba:49:36:
f1:50:39:fc:d9:29:e9:c2:38:37:1b:52:f5:e2:98:45:80:f2:
17:99:90:fb:57:e7:ff:2c:ac:5d:df:d4:3f:dd:ee:61:d3:6a:
25:4a:42:e6:c0:13:49:ae:a6:7b:c6:b7:f9:2f:9a:fe:58:46:
68:79:be:e5:6a:48:8e:44:d7:53:eb:0f:3b:8a:f2:41:a6:2d:
b0:7b:69:64:94:7a:e9:2b:9e:7c:ac:8f:d3:8c:c0:45:e9:f9:
a4:1a:1a:a0:6d:ec:af:27:49:fb:57:af:52:a3:62:a8:6b:8f:
90:fa:55:f3:da:ef:ea:ac:cb:c2:45:f8:b4:f6:ff:37:ff:47:
10:93:a8:7b:8c:4f:55:dd:f7:9d:4c:3b:1f:cf:0c:1c:fd:9f:
5e:c6:f1:c6:aa:07:50:a1:9d:c0:cb:1e:c3:57:01:16:59:48:
e1:1f:55:ee:22:38:12:fa:20:af:a8:ec:8e:49:5a:99:19:78:
fa:14:1b:b2:31:ee:e5:12:5d:b2:26:3b:d6:3e:59:a6:35:e4:
5d:36:ba:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org