Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ADXf3D_NuqtmkkxbyAINwfUah7c.roa
File: ADXf3D_NuqtmkkxbyAINwfUah7c.roa (raw, json)
Hash identifier: lCJwdVMzuZaPg2NgbUdbIwCfGxBDSQRiwzjCM1p02Wo=
Subject key identifier: 00:35:DF:DC:3F:CD:BA:AB:66:92:4C:5B:C8:02:0D:C1:F5:1A:87:B7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CAE5C5F361A5DEE4316C3A744858BBB9D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ADXf3D_NuqtmkkxbyAINwfUah7c.roa
Signing time: Thu 28 Dec 2023 02:58:58 +0000
ROA not before: Thu 28 Dec 2023 02:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22781
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:5c:5f:36:1a:5d:ee:43:16:c3:a7:44:85:8b:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 28 02:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0035dfdc3fcdbaab66924c5bc8020dc1f51a87b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f6:4c:43:44:66:45:1f:66:72:a2:7d:6e:20:
45:b3:28:53:8e:ec:ba:85:59:b2:71:6e:8c:89:94:
bc:ed:42:80:99:91:b3:b2:fc:7c:58:05:4d:f9:1f:
91:f4:5e:ce:8d:19:04:92:35:4b:83:3a:42:40:fc:
8a:74:53:a8:cc:59:78:bb:e1:d6:a6:cd:eb:ed:e8:
f7:dd:f1:9e:44:61:85:8f:20:b3:4d:44:3b:47:bc:
70:5e:05:ae:b8:0c:ee:46:b0:e6:7e:d5:e8:ef:20:
66:01:a0:02:35:15:02:f9:5b:0b:ed:95:e2:c0:f2:
bd:d4:3b:33:c7:ec:d0:6a:e7:7f:b8:57:3a:50:95:
c7:e8:d0:f0:d7:81:d1:59:bd:80:a2:a0:fa:8b:e3:
9d:d9:10:64:c5:17:4d:24:c0:91:47:2b:a2:1c:b0:
41:2c:72:07:1d:4c:67:c7:d1:cd:2a:05:c1:a4:be:
42:90:cf:cf:18:4c:71:d5:0b:c2:1a:3e:60:fa:ba:
23:ae:66:5d:43:49:98:68:b5:44:90:22:9c:5e:9e:
6a:9e:50:34:56:a4:76:ad:da:fb:b0:8e:51:08:7e:
84:5b:46:13:62:30:4f:b1:6b:95:9d:33:97:c6:1a:
81:53:b9:e0:1d:72:46:0f:96:0d:16:93:4d:d3:d6:
c9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:35:DF:DC:3F:CD:BA:AB:66:92:4C:5B:C8:02:0D:C1:F5:1A:87:B7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ADXf3D_NuqtmkkxbyAINwfUah7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
79:c9:d4:53:eb:d7:53:f6:c3:ac:9a:54:94:d0:bc:21:09:f9:
68:d1:c5:cb:e7:8c:05:3c:ff:da:82:d6:44:16:67:73:96:57:
77:7d:a7:f8:45:b9:d0:16:b3:06:f7:21:a2:81:23:a5:40:ec:
d6:86:06:5f:d9:bb:ba:2e:b9:f9:95:73:47:6a:1e:56:d3:02:
4a:28:7b:e1:32:d6:a7:ea:39:11:46:8c:97:df:77:a5:3a:cb:
62:cb:b6:89:63:ad:e6:7f:4e:ee:46:01:0d:69:dd:1e:d8:63:
01:41:6c:0b:9b:a1:43:2b:31:76:b8:c8:79:7d:3b:ee:43:f6:
9c:94:fa:83:2e:7b:60:c4:91:10:4d:fe:15:c4:3c:69:bd:d6:
56:4b:3c:1f:bd:e4:56:30:88:bc:9f:a7:6c:02:39:ec:d7:8b:
af:88:cf:ae:d6:dd:d6:8f:81:35:50:01:1e:2b:4d:25:87:98:
58:78:c0:76:fe:ed:43:c8:d2:c4:57:14:f8:9f:38:7b:46:6c:
a6:6c:14:ba:5d:ae:f3:78:c4:1c:a3:26:47:0d:af:ab:42:a0:
d5:2a:86:95:c8:42:e0:0a:33:46:5c:39:70:cb:09:5d:23:16:
4a:01:45:54:4a:7f:65:8b:24:6c:87:9e:a9:93:92:a6:a9:94:
d7:8c:9f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org