Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Epu--LoiWC2XJXBGfSFuDgIRFgE.roa
File: Epu--LoiWC2XJXBGfSFuDgIRFgE.roa (raw, json)
Hash identifier: 4X93uObASiu12rVtNOrYEOaM1bKGp5vvEXsByn9ZOwU=
Subject key identifier: 12:9B:BE:F8:BA:22:58:2D:97:25:70:46:7D:21:6E:0E:02:11:16:01
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188BFC0D02BF6A4294A267086EE11907512
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Epu--LoiWC2XJXBGfSFuDgIRFgE.roa
Signing time: Thu 15 Jun 2023 15:51:04 +0000
ROA not before: Thu 15 Jun 2023 15:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 163.5.159.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:c0:d0:2b:f6:a4:29:4a:26:70:86:ee:11:90:75:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 15 15:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=129bbef8ba22582d972570467d216e0e02111601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:82:62:21:a4:be:9a:18:4d:e1:28:f0:fe:
64:68:d7:cd:8c:82:7f:a6:00:7c:83:16:57:fb:14:
5f:84:0d:94:13:03:a9:ce:4e:9f:18:bc:bf:66:ac:
86:88:f9:08:c5:ff:d3:32:7b:f4:f4:b4:7b:d9:d1:
ce:1d:00:1c:80:cb:58:c5:32:51:8a:14:74:af:fe:
84:c4:ed:ec:1e:19:6d:fa:3a:72:4d:a4:f0:73:16:
4d:32:17:38:e9:2a:10:72:3c:c9:69:36:10:9f:ef:
33:bc:e3:7f:2b:c4:22:63:16:02:c9:9d:a9:db:07:
53:f9:10:0f:95:34:0b:a8:f9:3f:d4:87:ed:12:88:
ca:bc:42:1e:24:ee:36:db:64:e1:5a:b4:91:eb:f3:
23:57:20:4d:33:c3:d3:5c:64:5d:0a:be:30:4a:66:
db:cd:c6:cd:f8:38:ab:fd:0a:fa:87:71:d5:3c:48:
23:bc:23:46:f0:55:61:9a:19:91:b2:d6:bb:35:29:
eb:98:e1:a9:ec:9a:0d:48:31:b2:70:f8:45:18:b3:
71:ae:a9:95:84:77:2c:eb:18:66:b2:27:ae:f2:56:
f8:5c:67:4f:fd:2c:8a:b1:29:2a:6c:db:4d:70:22:
db:99:23:65:97:6d:b9:ba:07:1f:3d:2e:a3:7b:32:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9B:BE:F8:BA:22:58:2D:97:25:70:46:7D:21:6E:0E:02:11:16:01
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Epu--LoiWC2XJXBGfSFuDgIRFgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.159.0/24
163.5.168.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0e:a9:b4:b9:37:9a:57:a8:9f:93:d6:90:1d:e9:54:a4:fd:
ce:a6:71:0c:bc:fd:2f:5e:dc:96:01:5f:67:51:cd:38:69:0e:
f3:9f:8c:c0:77:fd:20:2c:74:34:53:46:6a:1a:ca:37:cd:4d:
5c:55:6e:ac:59:50:45:ce:e1:ba:bb:66:ed:07:2a:59:10:62:
2d:01:23:3a:7e:9c:02:0e:4a:0e:46:76:89:1b:5c:94:d8:36:
34:df:a9:92:a7:5d:bf:47:b8:71:48:3f:6d:df:c2:22:a7:35:
d7:fa:c9:b0:25:f4:1e:1c:c6:a6:2d:b0:35:67:5f:2a:fe:00:
4f:d1:0d:08:87:84:d5:97:7b:6a:d7:8e:e4:22:fd:cc:fc:72:
fe:83:15:14:c8:f9:c2:73:70:7e:dd:63:4a:61:e2:b0:6e:04:
7b:93:67:25:4b:77:95:c9:79:3a:ad:65:5b:ec:c1:03:c5:3d:
39:ad:9f:e2:19:14:d5:d9:2a:d7:c4:f0:81:82:52:67:a0:da:
9d:6a:7b:b8:ae:db:5d:f2:32:59:b4:4a:af:f7:f1:60:56:51:
6a:c5:a8:ea:76:f4:2c:1d:40:5a:1f:3c:4e:e9:56:2e:2a:55:
1e:4e:92:80:98:69:dd:29:6e:d9:56:f7:7d:66:b7:80:73:db:
59:d3:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org