Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EMyzQVVTDK-XngH7BAiQgI3uW60.roa
File: EMyzQVVTDK-XngH7BAiQgI3uW60.roa (raw, json)
Hash identifier: Q6ld/CBj5coEhcnSTLHH1gINkhSSZ0DKV9FqoLsNFTk=
Subject key identifier: 10:CC:B3:41:55:53:0C:AF:97:9E:01:FB:04:08:90:80:8D:EE:5B:AD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042CCB7E9BD20A1EF716C4B4493F876
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EMyzQVVTDK-XngH7BAiQgI3uW60.roa
Signing time: Mon 02 Jan 2023 02:15:03 +0000
ROA not before: Mon 02 Jan 2023 02:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211440
IP address blocks: 163.5.177.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:cc:b7:e9:bd:20:a1:ef:71:6c:4b:44:93:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ccb34155530caf979e01fb040890808dee5bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:67:7d:f2:0d:51:c4:fa:34:56:5c:ca:84:cc:
e9:30:67:60:d3:d8:59:d2:07:52:2a:46:cd:40:1a:
b8:2a:59:52:5f:e8:5c:fc:94:40:12:d7:64:8a:90:
d7:fb:3b:54:fb:d8:0a:71:b2:d6:1e:f2:fd:ce:98:
3f:a5:e6:49:03:83:8c:da:df:f6:1c:7b:9f:c0:2c:
59:60:d0:33:9d:e5:eb:3d:ea:25:54:cf:d7:38:45:
f6:01:00:b9:79:17:5d:ab:68:62:0d:a0:f8:9d:5e:
a8:00:19:9f:2f:fd:3b:1c:a7:41:cf:cb:dc:79:76:
71:09:88:f0:21:29:82:14:3d:e5:23:31:c2:d3:d6:
80:57:72:8e:d1:ea:75:09:5d:43:8d:46:33:ba:61:
43:e9:01:0f:33:22:29:18:cf:91:76:1d:5c:75:4b:
e4:c8:b3:92:81:cb:51:c9:08:51:89:6f:a0:b8:c8:
95:70:59:77:76:e3:c1:21:81:7a:e2:fd:34:f1:40:
f8:9c:b1:58:aa:f6:fe:47:1e:e8:e2:b9:18:cf:a4:
a6:b9:96:b6:06:7f:4a:a8:6e:e2:0e:7e:6b:48:29:
d3:03:7b:0e:39:f0:bc:86:f3:65:30:8e:3c:7d:fa:
a9:29:b9:b0:64:a4:47:f5:92:43:83:6e:9d:af:16:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CC:B3:41:55:53:0C:AF:97:9E:01:FB:04:08:90:80:8D:EE:5B:AD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EMyzQVVTDK-XngH7BAiQgI3uW60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.177.0/24
163.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9b:bf:45:d1:6c:05:48:1e:02:4c:ed:a3:36:42:75:e0:c4:
1c:0b:e6:e6:cf:03:6c:01:5e:2b:be:fd:1f:60:e9:98:82:1e:
9b:f0:e8:cb:dc:23:88:6a:fd:c5:ee:bd:be:3c:65:5e:29:ca:
49:95:95:b1:70:74:a8:8b:48:77:e9:f3:ae:c3:b6:b7:24:7c:
fc:d6:58:91:bb:44:7b:4a:de:36:5c:9b:e4:87:c0:8d:24:60:
b7:81:ab:41:66:3b:77:62:72:3c:08:76:f7:10:9a:d2:47:2e:
76:7e:16:80:40:44:f7:c6:9b:25:a1:65:bd:7f:fb:2d:03:f5:
92:f9:d5:92:d6:b6:9a:02:a6:7e:3d:c7:fe:d2:0a:b7:ea:1a:
39:dc:58:2a:f4:d2:e1:0b:de:fb:78:02:de:0b:5e:7c:bf:5d:
a5:eb:c0:54:19:f0:df:9d:42:69:99:84:81:9d:d7:7c:73:a8:
42:a7:24:b1:20:aa:68:ac:62:e7:aa:52:aa:62:97:3f:b0:f3:
d6:ff:07:c2:dc:7e:d9:cb:c3:ac:f3:8c:59:98:55:2e:16:e0:
62:e7:0d:66:34:89:b5:0a:9d:3b:44:94:d9:3e:b6:ca:b7:d4:
b0:a4:b3:ec:17:15:4b:a8:2a:39:bf:6b:e0:9a:d6:b9:0b:68:
c4:6c:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org