Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ENLe7-f-RIfh5r7QsucZNjpp7mE.roa
File: ENLe7-f-RIfh5r7QsucZNjpp7mE.roa (raw, json)
Hash identifier: Gj7m5ybpO5KwlzQMGeEmM3Mn4VQsNE82iKDy0fZizIg=
Subject key identifier: 10:D2:DE:EF:E7:FE:44:87:E1:E6:BE:D0:B2:E7:19:36:3A:69:EE:61
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A374C92A8F156B0A2FAA29013E69EB552
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ENLe7-f-RIfh5r7QsucZNjpp7mE.roa
Signing time: Sun 27 Aug 2023 14:01:19 +0000
ROA not before: Sun 27 Aug 2023 14:01:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 163.5.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:4c:92:a8:f1:56:b0:a2:fa:a2:90:13:e6:9e:b5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 27 14:01:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10d2deefe7fe4487e1e6bed0b2e719363a69ee61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:8b:08:2b:fd:84:8a:02:55:6b:05:fc:5a:
fd:55:18:bc:a1:94:16:b4:66:bc:6e:4e:04:dd:a5:
6a:24:cf:bc:7a:a8:e8:c1:2a:fc:b9:f0:f7:70:bc:
21:e0:b1:7d:c6:2d:df:f7:a7:ff:6d:b7:86:49:ca:
63:6c:9b:f6:6e:4a:b1:b3:d5:b2:e5:a9:7d:85:8a:
af:33:9e:dc:39:0b:3b:6d:e3:74:df:1b:6d:5a:5b:
7e:dc:1e:d8:af:df:19:57:90:2e:fc:88:a8:b3:0c:
fb:0c:e4:45:90:58:04:4f:d5:35:77:26:97:c5:35:
ff:2e:60:bd:7b:a3:8a:2f:54:d7:07:8f:62:c7:e9:
a7:8c:43:7e:9d:63:be:5e:d1:f1:53:04:9b:e1:94:
fc:20:af:d4:90:6f:4e:56:65:30:fa:a9:33:16:12:
58:65:1b:d4:05:79:3a:18:d7:7b:e3:03:e8:38:08:
d8:eb:a8:d2:ad:b4:41:6b:99:f1:68:94:5b:77:27:
d9:23:2e:40:27:a4:21:a1:2c:22:52:7e:67:07:0c:
35:b6:dc:7b:de:51:96:6f:74:cc:fc:1b:76:03:91:
8b:9a:c0:81:72:46:28:4a:9f:e9:65:10:f5:9b:a2:
52:81:99:01:81:aa:72:25:a3:b8:70:a8:12:c9:6b:
01:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D2:DE:EF:E7:FE:44:87:E1:E6:BE:D0:B2:E7:19:36:3A:69:EE:61
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ENLe7-f-RIfh5r7QsucZNjpp7mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5c:65:10:88:8a:8f:f4:84:2b:28:5c:05:19:52:38:e1:85:
93:c7:60:95:f1:05:f8:44:45:0a:1a:53:71:ca:99:b9:29:f2:
d4:25:10:89:ff:58:d3:a1:15:5d:8c:23:bc:aa:b7:33:c0:73:
bc:10:74:ad:2c:fc:fc:81:57:87:8d:2a:93:49:f0:29:9e:70:
4e:22:71:6f:04:9a:81:ea:c8:a4:5d:41:a4:ba:7f:11:5a:a2:
b3:50:6d:70:d2:e5:fb:e0:dc:af:a2:6a:5d:1a:b5:5e:d2:14:
db:ef:01:c8:5f:2a:28:93:fd:bd:80:ec:35:92:92:73:c6:c6:
6a:7d:8c:79:8f:55:fc:73:97:8a:85:31:c2:60:95:f7:b1:95:
e9:00:5b:98:bc:e2:df:0d:bf:8d:75:b1:4b:79:0e:23:98:7c:
e5:bd:fe:11:24:8b:d0:01:e4:66:65:19:d2:4e:7a:49:56:a6:
35:8d:9e:e8:f2:40:04:1f:55:55:63:ae:3a:b4:2e:cd:44:03:
0e:18:62:c0:3c:3c:59:a8:51:b2:c7:29:9b:27:5a:33:d3:09:
ca:82:de:65:29:96:c6:2c:a2:0b:57:35:d0:21:01:56:4e:3f:
ae:45:8e:b2:30:4c:a3:3d:f2:28:57:1c:4c:ab:d7:18:d8:29:
71:d0:98:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 22:20:02 2023 by rpki-client on console-fra.rpki-client.org