Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DlAyyT8N3K40mMHtWR_o95-B-jw.roa
File: DlAyyT8N3K40mMHtWR_o95-B-jw.roa (raw, json)
Hash identifier: 2DaMvGGZw7wxBljnUe2Iqdq/+ENLZoGgJxHOdb/KUM4=
Subject key identifier: 0E:50:32:C9:3F:0D:DC:AE:34:98:C1:ED:59:1F:E8:F7:9F:81:FA:3C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01898E8634862F84BFCA520B66AAF0C9EE55
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DlAyyT8N3K40mMHtWR_o95-B-jw.roa
Signing time: Tue 25 Jul 2023 19:28:27 +0000
ROA not before: Tue 25 Jul 2023 19:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 163.5.178.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:86:34:86:2f:84:bf:ca:52:0b:66:aa:f0:c9:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 25 19:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e5032c93f0ddcae3498c1ed591fe8f79f81fa3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:87:7f:4e:69:7a:78:22:34:e1:1a:e4:ff:65:
7e:44:ed:9e:0b:f4:cc:52:01:66:85:b2:f3:4b:43:
c7:89:7f:ba:e0:22:13:6f:4d:4a:38:17:8a:c3:70:
32:ab:46:13:4b:29:d9:9f:35:00:25:d2:72:90:a4:
31:38:e2:ca:75:1e:06:35:6b:5c:0c:61:f7:d5:10:
ed:06:f0:80:fc:b5:b1:3a:61:df:75:02:eb:14:c8:
68:42:5f:25:c4:2f:55:c0:c1:da:a6:80:56:b6:71:
6f:7d:9b:80:9e:4a:00:e6:10:c3:ee:6c:48:da:0c:
13:07:1f:9b:4e:78:e0:1e:c5:2b:69:13:21:b5:19:
aa:70:88:93:89:3c:38:a8:14:b5:eb:be:0a:a0:6c:
ba:cc:dd:e3:56:f4:76:de:8b:cc:31:0f:7b:e5:4b:
fb:d5:82:ac:2e:09:2f:a0:be:2e:1d:56:07:d8:e1:
f9:ac:cc:3a:1d:46:8b:ab:eb:e5:f7:19:e7:e5:aa:
7f:a2:70:1e:f1:df:af:48:bd:a0:b8:8d:ae:93:95:
56:77:3d:2d:35:58:c9:c5:47:3d:05:78:9f:47:23:
9f:20:aa:e5:58:fb:66:b6:da:1c:5d:b2:98:3e:95:
9f:d1:60:8d:af:9e:9c:f5:65:fe:aa:6a:e8:29:aa:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:50:32:C9:3F:0D:DC:AE:34:98:C1:ED:59:1F:E8:F7:9F:81:FA:3C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DlAyyT8N3K40mMHtWR_o95-B-jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.178.0/24
163.5.184.0/24
163.5.188.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6f:da:7b:f5:58:98:37:32:af:5f:ac:48:d2:2b:52:a1:94:
06:24:fa:5c:13:a3:1b:6f:70:da:c3:97:1e:be:ec:f5:0c:0d:
50:41:41:71:ae:15:af:97:fb:2c:ee:53:45:6f:34:09:49:5e:
16:a7:85:88:bd:cd:37:fb:bf:4a:f5:76:a9:52:44:33:3b:74:
85:ce:de:72:58:ef:1c:41:1b:d0:11:01:49:b7:eb:86:20:76:
c5:78:b2:5a:3a:bf:9f:f0:54:5c:ca:02:b3:6f:7f:5c:f1:cf:
b7:13:15:d6:4d:1c:66:52:f8:94:37:a4:f9:d4:e7:fe:83:e5:
a8:1b:50:f1:0d:aa:a4:1f:b0:dd:b9:51:51:10:88:a0:5e:e2:
4b:8c:ae:82:0b:3e:bd:2c:60:ad:65:72:45:60:ae:a0:95:a8:
64:81:03:12:da:b1:40:ee:ca:6b:22:b1:04:bc:59:e0:fc:1e:
f7:17:22:74:f9:8f:6d:2e:dc:72:07:79:b6:6f:d5:6a:2c:71:
99:5f:8c:21:e7:14:50:93:e0:85:bb:3f:66:97:91:17:e0:6e:
e4:e0:0c:a8:48:77:80:37:11:9c:d6:ad:fe:2c:04:ec:2b:29:
d9:a5:fe:80:f0:0f:46:26:48:43:2c:2b:ae:75:a5:a8:ad:43:
60:02:ff:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org