Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CXGkNlSd11Friol3m_j_-N2GS4g.roa
File: CXGkNlSd11Friol3m_j_-N2GS4g.roa (raw, json)
Hash identifier: RmCCLWuWga1bfI//ShOTxGYFPXm8+pToio9q4GrBmh0=
Subject key identifier: 09:71:A4:36:54:9D:D7:51:6B:8A:89:77:9B:F8:FF:F8:DD:86:4B:88
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CAE5A8A60BD1355CF3BC05B8B15A2ECDC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CXGkNlSd11Friol3m_j_-N2GS4g.roa
Signing time: Thu 28 Dec 2023 02:56:58 +0000
ROA not before: Thu 28 Dec 2023 02:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400897
IP address blocks: 163.5.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:5a:8a:60:bd:13:55:cf:3b:c0:5b:8b:15:a2:ec:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 28 02:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0971a436549dd7516b8a89779bf8fff8dd864b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:46:8f:16:8f:37:82:cb:bc:80:66:07:a6:a7:
11:a2:55:3d:43:03:54:82:2b:c7:ba:09:5b:4f:ce:
86:28:a8:8e:85:08:3b:3c:6f:f0:46:2b:b3:97:59:
95:33:18:3e:65:b6:93:3b:fe:98:1c:a9:bc:bc:06:
02:01:e8:fa:62:5c:2b:34:1f:8a:6b:94:b5:bb:4f:
88:3d:33:b0:12:0c:4b:67:b0:50:ec:cf:1e:cb:5e:
6b:ee:db:6f:9d:4b:3e:3d:16:18:9d:ac:55:83:07:
44:18:9d:45:f9:7a:f2:fe:10:37:2c:e6:43:5c:29:
7d:39:8f:ea:11:25:9a:6c:3f:b4:c9:21:83:89:ce:
d7:23:a5:26:78:5f:ae:84:72:e0:70:95:2e:a4:ad:
be:5e:f1:1a:17:74:0b:79:e6:0f:a3:3b:48:57:61:
7e:92:13:13:e8:55:8a:4e:68:ae:b5:86:d1:ec:14:
e6:de:14:3f:49:8c:4a:d9:74:e7:33:a9:62:5b:86:
35:28:d3:d9:df:b1:23:d7:3c:6d:43:62:6c:02:30:
8c:49:d1:71:d4:e4:8e:a3:77:3f:ba:62:de:05:ca:
d9:5b:ed:0b:75:db:33:e0:72:88:fd:be:87:f7:b3:
de:a9:95:f3:6a:45:73:4a:b5:b4:49:92:b8:ad:66:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:A4:36:54:9D:D7:51:6B:8A:89:77:9B:F8:FF:F8:DD:86:4B:88
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CXGkNlSd11Friol3m_j_-N2GS4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ab:05:0a:f6:89:28:dd:17:65:c4:69:3f:4d:6c:5b:a5:f5:
32:8a:08:2b:eb:95:3f:33:e8:0a:58:20:99:fe:cf:5a:93:fe:
ea:7d:3a:59:df:fa:51:a1:cf:78:19:76:0a:6b:9f:d4:0b:62:
1d:a7:96:24:bb:a4:bb:25:4a:f8:6c:52:76:e4:7d:3b:7a:69:
7a:8b:f9:65:1f:13:50:c8:76:87:7d:09:96:0d:94:0d:2b:e5:
84:e9:08:37:05:53:47:ab:12:a6:46:07:8b:bc:cc:02:41:03:
e8:6f:84:1c:39:b9:58:d4:38:58:01:a8:66:80:3f:24:7e:f4:
1f:6b:51:c0:de:c8:65:1a:70:16:d7:f9:43:f1:ae:5c:a3:2a:
10:92:39:b9:29:75:b6:02:b3:5f:87:e6:d3:a4:60:d9:b4:a1:
0d:95:6b:cd:e4:bc:3c:56:d9:95:70:1c:f0:c6:95:0d:76:ad:
f6:d3:50:7e:91:70:2c:dc:f1:c5:fc:55:4a:84:f5:c2:d1:b9:
e4:b5:36:d5:20:64:09:f0:51:88:17:ab:62:69:fc:6a:b0:93:
cb:a0:81:58:79:19:2f:33:b5:a1:85:9f:96:aa:77:e2:a9:c3:
12:c6:47:16:78:77:a6:4d:37:3f:f3:8b:ee:a7:41:3f:6a:29:
d4:5f:c8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org