Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D6PeX_ZnyQrD2F2m6EVQziruwU4.roa
File: D6PeX_ZnyQrD2F2m6EVQziruwU4.roa (raw, json)
Hash identifier: rjuf+s0ZpN2gi6ckRQ4+QB/XP8A/ZEfmOT7AV83B/zs=
Subject key identifier: 0F:A3:DE:5F:F6:67:C9:0A:C3:D8:5D:A6:E8:45:50:CE:2A:EE:C1:4E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042BFD1D11C1E05C16C21BA36393B34
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D6PeX_ZnyQrD2F2m6EVQziruwU4.roa
Signing time: Mon 02 Jan 2023 02:15:00 +0000
ROA not before: Mon 02 Jan 2023 02:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60546
IP address blocks: 163.5.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:bf:d1:d1:1c:1e:05:c1:6c:21:ba:36:39:3b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0fa3de5ff667c90ac3d85da6e84550ce2aeec14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:07:6d:b0:27:ca:20:dc:c7:91:7b:99:a7:
98:c8:8a:1f:53:d7:c3:e3:7f:62:a1:c6:51:33:26:
29:fe:c8:82:85:e2:a5:9a:8f:a7:92:64:7e:99:9c:
71:d6:64:7b:54:d7:49:59:a2:68:c3:d0:68:c4:b1:
5f:c8:de:2f:e2:3b:c4:f2:65:91:b5:36:33:97:d6:
2c:28:f2:40:57:ca:a9:f3:bf:4c:13:b8:46:d2:a9:
0f:0e:f3:b6:c5:50:94:a9:ec:25:32:33:66:cd:2c:
4a:90:b9:7e:9b:f1:a9:fc:11:ea:80:7e:8f:a7:ba:
c4:fa:4d:69:52:a5:08:ab:bf:c4:a5:4d:18:20:2e:
d7:22:56:d5:b5:42:88:cb:0f:92:75:79:a3:98:cc:
7d:5f:76:b2:94:46:12:18:e4:02:26:ad:a4:3c:e4:
1b:ac:d4:79:b3:68:12:8d:8a:17:4b:07:68:93:b1:
e8:80:ac:9c:c4:fa:47:26:b3:eb:f5:9e:21:16:86:
51:9b:4d:2f:8b:1b:76:42:8f:84:43:ef:6b:13:63:
54:90:93:87:22:bd:78:6a:4f:1c:06:bc:68:61:8a:
97:d7:e8:ef:10:26:93:af:f0:72:4b:23:18:f6:a1:
29:62:4c:86:9c:f7:12:45:0a:a6:f4:07:b1:ed:af:
55:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A3:DE:5F:F6:67:C9:0A:C3:D8:5D:A6:E8:45:50:CE:2A:EE:C1:4E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D6PeX_ZnyQrD2F2m6EVQziruwU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:f7:3e:d8:24:ac:48:2e:ea:fc:d5:98:9d:a3:61:f5:28:b5:
5c:f0:b3:ed:3c:31:1f:76:9e:e9:d2:a0:9d:f4:72:04:da:df:
19:21:3b:a5:50:24:27:02:3e:cc:bb:d9:03:fd:7c:21:b3:d1:
1a:cb:8c:1d:6c:18:3c:77:ed:92:27:d9:c0:f7:4c:8c:d7:38:
2f:4a:06:53:5d:a3:ab:1b:ec:29:51:03:43:2e:8e:c5:b4:94:
77:25:10:14:ea:de:f2:10:a2:9e:1d:00:f8:1b:17:07:66:d4:
52:75:31:32:34:c6:a1:1b:77:b0:06:32:53:22:5f:5a:cd:d9:
25:25:6e:31:76:65:18:f5:ea:4e:d6:d8:c8:98:cb:cf:07:d6:
fa:94:d1:dd:8a:bb:2d:48:49:ec:88:45:48:d3:b5:89:1c:88:
56:93:6e:da:a1:a4:ac:83:d4:80:a9:8d:9f:96:17:62:ab:19:
ea:28:d7:c9:cf:63:fd:1e:26:8d:d5:3e:33:c5:fb:fd:97:f5:
eb:8e:8d:ad:ba:a5:72:7f:c5:dc:d6:2c:74:c0:7f:3f:54:f9:
76:b7:ec:0e:51:e3:52:95:36:0d:ee:ce:77:6e:58:fc:72:1a:
46:42:6f:54:86:b4:85:64:fe:e8:8d:b9:35:eb:21:fb:44:42:
c2:b0:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org