Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9gbv3KYn_dXyCekkw-QvEmsAvns.roa
File: 9gbv3KYn_dXyCekkw-QvEmsAvns.roa (raw, json)
Hash identifier: sXpIZUc8x13p/TdpR63uTJJDUJ2tyaGCRxoRPVQPGuI=
Subject key identifier: F6:06:EF:DC:A6:27:FD:D5:F2:09:E9:24:C3:E4:2F:12:6B:00:BE:7B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C7F0D643C6F7F4F47C97A6FF3706
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9gbv3KYn_dXyCekkw-QvEmsAvns.roa
Signing time: Mon 02 Jan 2023 02:15:02 +0000
ROA not before: Mon 02 Jan 2023 02:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 163.5.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c7:f0:d6:43:c6:f7:f4:f4:7c:97:a6:ff:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f606efdca627fdd5f209e924c3e42f126b00be7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:f9:1e:43:39:b9:d1:b8:d1:91:25:02:d5:
2d:93:c8:74:95:bd:a7:cd:36:31:80:cb:58:5e:af:
af:c2:b5:e0:01:7d:4b:fa:a8:62:05:90:67:0c:f2:
e1:c6:7f:23:1e:e9:f4:5f:12:45:f2:f3:1a:dc:de:
58:39:9d:89:f1:a7:13:3d:8e:49:28:6c:8c:de:40:
1a:62:81:ae:2d:77:f6:ab:1b:22:fd:16:b1:d6:6c:
b3:a3:c8:ce:a7:7d:01:59:b8:61:e3:07:84:c9:4d:
4a:d8:81:61:e1:68:cc:ee:81:97:95:2b:d2:da:c7:
23:9c:a1:e5:dd:35:40:e9:3c:5d:45:85:51:ac:22:
bc:85:d6:03:4c:18:26:f3:ee:d5:13:9c:70:77:f7:
e0:87:f1:b7:05:32:4b:a6:31:69:81:80:5b:68:70:
62:6b:5d:95:59:e8:b5:f7:15:1c:fd:3f:0e:17:8f:
f1:d9:e9:de:2c:3d:dc:4c:ae:67:23:e0:d0:08:7a:
23:10:ee:cf:f0:ed:01:3c:c6:be:31:52:e5:80:01:
23:67:e7:93:26:26:6d:da:e4:bf:c6:3e:6f:7d:d2:
c4:29:2b:56:ea:b6:6a:ac:f9:9c:79:4c:4b:19:7a:
2c:06:b6:ac:d3:48:c0:12:12:e3:7f:3c:4e:cd:94:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:06:EF:DC:A6:27:FD:D5:F2:09:E9:24:C3:E4:2F:12:6B:00:BE:7B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9gbv3KYn_dXyCekkw-QvEmsAvns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.236.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fc:c6:27:0f:08:48:66:1b:83:9d:e3:a3:b0:07:5d:47:58:
fe:2c:76:fc:c5:7c:e1:7e:d1:e6:e4:f5:e5:53:39:cf:7a:2a:
39:42:c2:2a:c5:ae:d2:2a:83:24:84:9c:e1:cb:89:f4:d0:6f:
56:95:88:cc:e5:54:94:50:2c:e7:73:78:ab:9b:05:46:b7:a4:
b7:7a:c0:86:0a:95:7d:e8:c6:ff:5c:14:40:2c:99:96:18:49:
f4:46:86:09:20:bb:e7:2a:51:87:ea:94:99:cd:5b:1e:f2:ba:
83:d6:b5:ee:5b:4b:c4:35:3d:ab:eb:75:98:21:62:9b:0b:4e:
8f:8b:19:50:5b:aa:89:2f:fa:cb:96:a2:53:59:4b:cd:59:b5:
83:df:6a:e3:90:3b:59:4e:35:48:90:41:0f:fe:c1:f8:40:99:
5c:1b:6f:8b:1f:2c:a0:77:8d:d0:ed:1a:00:23:7f:a2:28:4a:
1d:7b:74:e9:e7:9d:9f:40:df:ef:45:18:71:8f:fc:c7:da:4b:
26:68:71:c5:cd:ec:5c:1e:ef:92:0e:42:5d:51:9d:b5:14:88:
81:ae:1e:f8:95:f7:ce:d6:9c:bb:e5:da:e1:65:45:13:ef:68:
61:c8:d6:81:81:cd:69:da:df:58:9d:6a:ce:fe:e6:83:74:1d:
f9:3b:b5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org