Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9tiFgOVHm7W2ngpxxROmKg1dtrI.roa
File: 9tiFgOVHm7W2ngpxxROmKg1dtrI.roa (raw, json)
Hash identifier: cO8ChbTzkyhqQ1pW5HT5zF5e6oxYPyZd/mZ7a00wJLw=
Subject key identifier: F6:D8:85:80:E5:47:9B:B5:B6:9E:0A:71:C5:13:A6:2A:0D:5D:B6:B2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042CF65FCD9BF83E91A7CF007A4C1F2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9tiFgOVHm7W2ngpxxROmKg1dtrI.roa
Signing time: Mon 02 Jan 2023 02:15:04 +0000
ROA not before: Mon 02 Jan 2023 02:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 163.5.252.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:cf:65:fc:d9:bf:83:e9:1a:7c:f0:07:a4:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6d88580e5479bb5b69e0a71c513a62a0d5db6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5d:3c:c4:a2:80:26:85:fd:e6:6d:18:98:55:
bb:77:eb:a8:7d:a6:50:44:c9:5a:ad:ba:23:76:38:
3c:b3:db:94:5d:6d:b2:17:1d:1a:c2:46:eb:96:69:
5b:db:57:5a:be:e0:6b:37:dd:ef:64:e2:54:54:37:
ae:14:40:59:92:44:61:19:b9:ca:66:b0:69:9e:a8:
dd:98:84:67:c1:0f:cb:3a:4c:46:ec:20:f0:54:98:
d5:96:78:9b:d8:de:1f:8e:6c:c2:74:cd:67:9f:73:
d5:49:5b:e2:5f:75:b6:9f:a9:18:ab:e5:3a:7b:c5:
bf:0d:83:c7:62:c0:44:cc:6b:bc:67:4b:95:d7:e0:
f9:38:6c:c5:72:b1:aa:5b:c2:25:e8:b4:37:2c:ea:
3a:62:6c:64:3e:95:5a:46:2c:b4:7f:76:a4:38:60:
60:c6:fd:d6:f5:f7:f9:78:b5:7f:8e:ac:85:7b:41:
a2:8a:d1:99:a5:a2:b6:8c:ef:dc:84:ad:27:02:84:
9b:53:d7:4c:0a:4b:99:dd:4f:ef:eb:5e:b1:f5:80:
71:81:c4:b5:4a:b2:85:74:09:13:9b:4c:51:39:dc:
e0:b4:c5:42:d4:81:20:a2:60:2c:ad:5a:1e:cd:28:
11:6e:05:23:d2:3f:e6:a6:35:b2:40:e2:0c:0c:73:
35:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:D8:85:80:E5:47:9B:B5:B6:9E:0A:71:C5:13:A6:2A:0D:5D:B6:B2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9tiFgOVHm7W2ngpxxROmKg1dtrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
77:74:25:b0:2f:ba:da:9e:58:86:f3:1d:45:6f:9b:44:b2:8c:
aa:26:56:3c:ef:fc:ad:9b:ce:c3:b5:88:63:66:eb:1a:41:98:
1a:e7:1b:3a:cb:21:39:f2:5b:6b:a5:0e:06:cc:b4:2b:20:2c:
6c:89:6a:8e:3c:2c:08:27:6c:4c:64:6a:61:b6:bd:8f:06:6e:
f0:9c:ef:9a:6c:1c:4f:a1:29:eb:da:47:04:d9:4e:3f:b6:d3:
f2:8f:d7:42:55:09:c8:62:03:9b:89:00:83:ee:ed:99:f2:47:
c2:1f:7a:98:23:7a:ae:46:2a:c3:b6:e2:63:72:0f:9b:d3:82:
a2:c0:4b:f0:c9:20:ac:5f:60:55:4b:78:24:47:b4:5d:ab:70:
08:eb:4f:b5:ff:8d:ca:30:1f:1c:e0:52:f2:79:97:d1:70:79:
bd:ba:41:4f:cf:33:1f:07:0c:61:43:0b:f0:ff:53:11:bc:42:
6d:8e:44:43:9f:d7:fe:f9:c7:e6:8a:3b:34:8d:31:69:15:4b:
5a:8f:2b:f0:2a:7d:3e:1a:ae:94:96:70:fb:62:1a:9a:53:49:
81:32:da:ef:13:17:03:3a:01:d7:c9:ef:23:b8:19:1f:57:03:
c0:ba:9c:cd:60:68:ea:1b:18:54:81:36:c7:a5:ef:b7:47:50:
6f:5c:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 17 19:38:55 2023 by rpki-client on console-ams.rpki-client.org