Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTUMK-4x6S7aqBbkfIuXMV6--fE.roa
File: CTUMK-4x6S7aqBbkfIuXMV6--fE.roa (raw, json)
Hash identifier: uFE4TEFSU5KWAG1q4ylgFwfojlqExMyMQEzXwJf9oZY=
Subject key identifier: 09:35:0C:2B:EE:31:E9:2E:DA:A8:16:E4:7C:8B:97:31:5E:BE:F9:F1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185BB69A805D57408433B24B62B54AE0484
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTUMK-4x6S7aqBbkfIuXMV6--fE.roa
Signing time: Mon 16 Jan 2023 16:29:01 +0000
ROA not before: Mon 16 Jan 2023 16:29:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 163.5.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:69:a8:05:d5:74:08:43:3b:24:b6:2b:54:ae:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 16 16:29:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09350c2bee31e92edaa816e47c8b97315ebef9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:1a:e5:a7:92:48:f9:fe:02:06:0d:3a:10:
40:f6:ac:ea:8f:d0:17:4a:0f:68:68:94:a7:7c:e3:
85:ca:15:9b:a8:28:6e:a2:d8:b3:5b:1e:4e:3c:e9:
54:c1:4a:ff:94:33:b8:8b:49:f5:d9:c6:ad:df:84:
27:d8:fd:d1:7d:1e:4b:8d:2c:86:ee:1f:bc:ee:f4:
70:c7:8d:33:ea:e2:66:52:8a:66:d8:16:48:02:c1:
f7:39:83:e8:dc:dd:6a:bf:ba:96:d5:c6:61:c7:be:
9e:73:8a:43:6b:95:52:c6:0c:15:fb:21:89:51:20:
54:24:5d:75:23:d7:87:18:17:8b:97:8d:c0:37:a9:
79:57:2d:49:5f:11:27:69:b6:e1:99:7e:a1:d9:f7:
12:9c:dc:bf:cd:bf:77:5b:27:81:76:5d:9c:65:12:
6f:cb:3e:96:c9:84:72:e7:a3:5e:4e:6f:0c:8e:36:
31:53:6c:9a:f8:b2:6e:b6:c4:0b:11:e0:fa:60:8c:
c5:eb:13:38:6d:c9:c2:54:d1:14:72:fa:1b:a6:e1:
39:da:2d:6d:a6:31:54:87:77:3c:87:c5:00:c1:71:
b7:46:1e:59:a0:53:09:fa:6a:c5:6a:90:83:62:24:
fb:16:e7:ff:dd:80:f7:18:dd:9a:af:5c:d5:04:a1:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:35:0C:2B:EE:31:E9:2E:DA:A8:16:E4:7C:8B:97:31:5E:BE:F9:F1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CTUMK-4x6S7aqBbkfIuXMV6--fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.101.0/24
Signature Algorithm: sha256WithRSAEncryption
20:15:b4:28:7e:8a:b2:b3:6c:bb:93:79:0f:70:ea:6c:be:d9:
52:57:20:eb:6e:8a:e5:cf:c9:28:2e:b1:0e:f0:43:c5:ba:17:
6f:88:a6:cc:87:ad:8d:e8:c5:a5:9b:c7:af:64:da:07:75:b1:
1e:b3:85:09:eb:22:89:34:2d:9e:c4:46:0f:97:9b:4f:17:7c:
cf:f2:94:9d:80:95:45:8d:1c:58:33:f0:c8:71:19:47:99:0b:
a2:0c:82:7f:73:27:47:fc:3a:e0:85:a6:c6:34:85:f7:9b:79:
ed:49:ef:14:79:05:5c:39:29:d7:ae:3e:cc:01:d7:24:c8:13:
91:0b:11:45:4b:c7:b3:1b:94:fc:5e:bd:6d:85:05:74:4a:e4:
09:2e:f8:3c:71:bb:60:0a:5b:c5:63:80:8c:3e:2d:1e:a9:1d:
e6:3b:24:cd:a6:21:6a:ca:c1:1d:58:0b:8b:ae:87:85:4a:00:
6a:7d:eb:66:a6:8a:0c:f9:fb:dd:a8:08:01:73:ad:de:20:ab:
81:5b:5b:f6:c8:db:68:d6:ff:a7:b1:46:64:92:4e:c2:0f:75:
fd:4c:f6:8d:9b:c2:a6:c4:f7:d8:7b:c9:26:04:60:54:c3:a3:
13:56:83:67:58:ab:cc:28:85:09:d2:67:4f:45:b4:bd:d3:e5:
37:22:9c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org