Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CLqKsQ_5Q8RtYvnruhO8QmEb934.roa
File: CLqKsQ_5Q8RtYvnruhO8QmEb934.roa (raw, json)
Hash identifier: YrV5cleE6M+efJDcZtBbHNr4pkfDo28sblpZ2J5Jc+Q=
Subject key identifier: 08:BA:8A:B1:0F:F9:43:C4:6D:62:F9:EB:BA:13:BC:42:61:1B:F7:7E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186216E1B86A19A911FBA4DEF4FE193BEFF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CLqKsQ_5Q8RtYvnruhO8QmEb934.roa
Signing time: Sun 05 Feb 2023 11:55:09 +0000
ROA not before: Sun 05 Feb 2023 11:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140947
IP address blocks: 163.5.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:6e:1b:86:a1:9a:91:1f:ba:4d:ef:4f:e1:93:be:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 5 11:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ba8ab10ff943c46d62f9ebba13bc42611bf77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3f:0f:52:02:20:52:0e:92:e1:66:2a:09:5e:
89:63:70:4c:dc:66:cd:3b:98:ea:1f:a5:5a:c0:c7:
d9:98:8e:bd:ae:41:7b:40:ef:28:bf:c6:42:ce:02:
50:c7:0b:84:1a:31:8e:08:19:9d:ec:47:00:22:ad:
32:0d:2f:3f:e4:60:45:b1:35:96:0e:af:d2:96:fe:
8c:32:70:b7:62:ae:42:d9:71:46:86:25:b0:bf:4d:
5b:85:b2:f6:23:62:2e:f0:ad:eb:ae:64:bd:89:a6:
42:16:df:da:5b:67:3f:79:81:60:de:eb:31:4d:3e:
a1:1a:0b:e1:a4:c6:87:24:8e:28:63:41:41:21:fe:
97:f7:50:3f:07:56:74:5d:46:98:67:cc:05:6d:71:
5a:6c:68:df:d6:02:4c:2a:34:33:9a:2b:97:d3:f5:
82:9c:6d:f9:ed:b3:3b:19:1f:b8:3b:05:74:19:00:
ea:27:50:77:dd:89:38:aa:77:fe:cf:78:3c:c6:4e:
c0:3a:69:b6:aa:f0:00:b8:a7:57:b2:d5:64:6c:41:
a2:3b:bb:7d:64:c4:76:e5:e4:2f:1d:89:8f:be:00:
22:81:90:5d:d1:e5:2f:0d:19:3e:4c:89:bb:d9:33:
ad:2e:8a:36:d7:cc:93:8c:c3:0e:27:30:9b:58:98:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BA:8A:B1:0F:F9:43:C4:6D:62:F9:EB:BA:13:BC:42:61:1B:F7:7E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CLqKsQ_5Q8RtYvnruhO8QmEb934.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.103.0/24
Signature Algorithm: sha256WithRSAEncryption
53:5d:3d:6c:f1:f7:35:0b:48:34:65:1c:67:fa:88:95:7c:95:
6a:b3:53:54:73:86:14:a2:63:b1:de:0a:cc:03:fe:19:c6:42:
dd:14:70:01:1a:3d:0f:be:2a:25:20:85:15:40:5f:70:aa:bd:
00:bd:7b:47:a8:e1:82:9d:63:05:d3:a8:f7:d8:63:6f:91:1f:
e9:ed:0d:f5:2b:9e:16:ff:5c:7a:20:ad:04:81:7d:6c:02:3a:
c8:e7:2b:30:42:be:1c:52:e1:75:3d:ea:5e:46:c8:98:37:41:
05:69:1d:0e:41:4d:2b:9e:db:e4:d9:98:b4:be:36:58:73:6f:
63:96:82:9b:db:fb:a6:45:f4:20:a9:e6:c1:a0:35:65:51:d6:
1f:56:2f:79:f9:37:08:d9:16:e1:7d:ec:e8:89:5d:41:93:bd:
95:dc:8b:7a:62:4c:8c:60:35:62:cb:fa:a1:91:56:6f:2f:bf:
bd:c6:12:9e:4a:43:c5:6e:05:49:16:36:58:ac:8c:f1:c3:d5:
e8:34:ae:3c:27:8e:2a:80:40:2c:e9:67:fa:ca:8d:4f:55:1b:
98:02:80:b8:7f:73:a7:62:7c:27:6e:b4:78:d1:2f:d2:c7:9b:
be:01:71:b8:af:59:e4:f3:cb:04:8f:63:68:36:58:91:69:1d:
e3:88:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org