Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AjQFVBm8twBCvI_t1AiUfqDEJhg.roa
File: AjQFVBm8twBCvI_t1AiUfqDEJhg.roa (raw, json)
Hash identifier: Ynj41QxU1t/xzMGYVz4VW8TFJu4KDb0V/VXuT4SleZY=
Subject key identifier: 02:34:05:54:19:BC:B7:00:42:BC:8F:ED:D4:08:94:7E:A0:C4:26:18
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B96CA35D405C900AD33D9376E3277EED3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AjQFVBm8twBCvI_t1AiUfqDEJhg.roa
Signing time: Fri 03 Nov 2023 20:05:16 +0000
ROA not before: Fri 03 Nov 2023 20:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 163.5.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:ca:35:d4:05:c9:00:ad:33:d9:37:6e:32:77:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 3 20:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0234055419bcb70042bc8fedd408947ea0c42618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5b:64:2e:db:6d:11:a0:5c:ae:d8:e9:ff:73:
a3:41:88:60:dc:62:31:d8:84:22:cc:6c:73:0f:22:
6b:c6:38:29:b6:10:04:f1:eb:70:b0:2e:62:60:37:
69:1f:34:f7:0f:10:ce:bc:d2:0a:07:5c:f4:69:6e:
e1:d5:17:48:16:ee:60:a1:c5:a9:da:24:6e:a8:5b:
c0:a4:d8:24:f0:a3:d5:e0:0f:0f:19:2d:e8:3f:55:
f3:6e:d6:cf:2f:76:d8:d9:ab:8d:9d:57:d2:b3:55:
a2:00:45:d7:b9:dd:52:30:89:b6:97:d8:b0:f7:25:
0c:74:84:1b:b8:60:47:a7:cb:be:85:4c:2a:ce:f5:
1f:55:f3:50:9c:d9:21:a8:04:ad:80:52:50:de:60:
84:7e:00:e6:fa:c8:3b:d6:95:1f:1b:4e:11:b4:71:
e9:89:5a:29:97:13:06:2a:d7:f4:f0:69:e6:be:c2:
2e:35:9e:b5:01:b6:74:5c:5f:99:ac:5c:77:cf:fc:
a8:ec:ac:d6:3a:c8:7f:c5:0c:68:01:fc:b6:81:28:
56:77:17:8d:b2:2b:48:98:4a:60:12:6d:c2:35:5a:
90:e9:39:1d:11:1b:8f:1a:2e:ae:ba:5c:d1:09:3d:
3f:14:a7:2f:0a:63:15:f7:b9:a9:4f:ba:c3:85:f8:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:34:05:54:19:BC:B7:00:42:BC:8F:ED:D4:08:94:7E:A0:C4:26:18
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AjQFVBm8twBCvI_t1AiUfqDEJhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bd:5f:87:bd:e5:50:42:33:fa:b1:cc:79:f7:84:9d:6f:14:
02:01:7e:1e:0b:99:0e:cb:27:3d:09:b4:7b:82:78:62:f4:05:
91:02:e2:d7:93:45:16:f2:4b:77:9a:ae:25:99:17:ce:32:61:
b0:fd:33:5c:fc:e6:ad:21:e7:01:7d:8a:9e:31:d5:f2:17:bb:
e4:0f:27:03:21:d7:8d:e3:79:55:7a:4e:3e:1b:77:13:02:33:
97:51:af:a5:8c:3c:0c:55:78:12:b9:8b:08:de:f9:bc:e5:91:
5c:5f:36:ad:88:a1:8a:20:da:9f:c2:29:17:a5:89:80:90:df:
68:ba:5c:84:d4:97:11:83:32:50:48:f0:21:67:68:8f:e3:03:
92:69:95:58:f7:7a:66:41:fa:05:02:bc:56:ef:ad:e1:2c:73:
b5:e1:c5:fe:92:78:07:7f:c8:17:2f:06:82:ac:5c:a5:ee:b3:
fe:bf:af:b6:6b:5e:77:b6:b5:2d:e3:60:9a:61:81:e3:48:ae:
e6:c2:28:89:3b:a1:16:c8:b5:68:88:bf:cf:48:2f:7b:ea:43:
1c:1b:fc:32:d4:51:0d:b0:0b:06:59:03:18:36:97:98:42:e1:
58:00:9e:5c:b4:ed:3b:f9:4e:62:31:b9:f3:16:bc:fb:86:14:
38:83:3f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 24 04:25:46 2023 by rpki-client on console-fra.rpki-client.org