Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FVwJmCxgI96bEXcTYH_xEcCOofI.roa
File: FVwJmCxgI96bEXcTYH_xEcCOofI.roa (raw, json)
Hash identifier: IFqvejOTjtf93kpANBJdIYggAfSWI9mGm6L1ybnSFOA=
Subject key identifier: 15:5C:09:98:2C:60:23:DE:9B:11:77:13:60:7F:F1:11:C0:8E:A1:F2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C2AA186E985569E9B84A0C40E784
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FVwJmCxgI96bEXcTYH_xEcCOofI.roa
Signing time: Mon 02 Jan 2023 02:15:01 +0000
ROA not before: Mon 02 Jan 2023 02:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 163.5.79.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c2:aa:18:6e:98:55:69:e9:b8:4a:0c:40:e7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155c09982c6023de9b117713607ff111c08ea1f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c8:8b:89:d2:44:03:93:fd:71:d8:d4:ae:a9:
3b:a5:9a:55:0f:e7:a9:19:08:f4:e9:4e:8d:f8:71:
a9:5c:fd:53:85:32:05:9a:20:2b:33:2c:6f:5b:09:
21:8f:f0:3b:e0:0d:06:8b:fb:be:f3:8e:ae:9b:5b:
d8:5a:42:52:f6:42:ca:36:c3:23:cb:36:58:ea:05:
12:a0:89:24:32:33:ac:17:23:ab:6f:da:15:33:e1:
ee:ae:c9:3c:11:ee:3b:2b:97:89:bb:f8:77:84:1e:
61:99:bf:48:f6:5e:4a:20:e1:78:9c:47:ce:11:b0:
68:d0:13:64:64:61:b5:75:2b:6d:72:4c:15:af:78:
1a:fe:f2:bc:17:74:c8:60:e8:42:0b:4c:76:8f:01:
db:4b:d2:72:26:b9:9e:a7:a1:c3:fc:00:03:a3:d9:
fa:f1:dc:26:af:4e:32:ac:f9:c7:38:81:77:54:cf:
a1:b6:77:1c:35:5d:98:23:23:90:87:72:2d:f4:c7:
c0:5e:ac:95:40:7b:93:a2:9b:ed:08:f6:29:fc:3e:
dd:9c:0d:d3:f9:53:be:c5:21:97:d9:64:ac:a4:f2:
05:39:96:ca:00:6d:64:57:7c:34:94:69:01:76:fa:
f5:b3:59:42:4d:f0:63:c4:3d:1d:6b:64:12:08:87:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:09:98:2C:60:23:DE:9B:11:77:13:60:7F:F1:11:C0:8E:A1:F2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FVwJmCxgI96bEXcTYH_xEcCOofI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.79.0/24
163.5.134.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
97:44:bd:c2:25:78:b8:bf:96:f8:4a:cb:f4:61:16:d5:a9:bd:
a6:21:f2:40:20:26:43:b3:25:2a:e9:fa:4c:2b:71:9a:9b:bb:
c8:a5:d7:35:66:fb:fb:09:4b:31:70:b1:90:03:18:d3:31:55:
cc:26:6b:7b:a2:87:3f:d0:38:01:e3:ef:54:4e:cb:3c:b9:3a:
32:3f:80:72:74:7a:24:aa:94:32:01:b1:ec:9d:d6:d2:7e:e9:
e1:ef:02:23:15:a4:49:b4:db:87:35:f2:07:12:ed:c5:00:7a:
c5:93:85:e7:c6:1e:b7:c0:a5:92:08:d0:f0:66:dc:18:46:9b:
88:7d:ce:ac:b8:c6:04:b9:f3:54:c6:a9:50:92:4c:17:78:06:
de:3b:60:c0:ee:ff:e4:0e:e2:a6:94:47:cd:90:18:af:94:85:
50:98:ca:23:5c:4c:f7:58:7b:00:f2:b4:39:1c:cd:1e:9e:f6:
31:1b:88:12:41:a7:0e:90:2b:d9:4b:20:03:d5:fd:01:03:11:
e8:27:49:f9:1a:36:9e:1b:42:70:9e:58:24:59:eb:23:2b:84:
bc:67:ba:b0:f2:44:5d:a5:05:9a:7d:d8:d7:06:6f:c2:ca:6d:
e1:82:ce:25:42:67:ea:44:7b:73:ea:b4:9e:eb:1a:8f:6c:ed:
d8:d8:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org