Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GRbpf6hyMO09gI6tkMy7M7uf8Nk.roa
File: GRbpf6hyMO09gI6tkMy7M7uf8Nk.roa (raw, json)
Hash identifier: Z26vxoTUUc1JxXwYmCxoWK91RWCzR/Au7olxxU5rrb0=
Subject key identifier: 19:16:E9:7F:A8:72:30:ED:3D:80:8E:AD:90:CC:BB:33:BB:9F:F0:D9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C2F705CF3C848352179231C44908
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GRbpf6hyMO09gI6tkMy7M7uf8Nk.roa
Signing time: Mon 02 Jan 2023 02:15:01 +0000
ROA not before: Mon 02 Jan 2023 02:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.124.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c2:f7:05:cf:3c:84:83:52:17:92:31:c4:49:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1916e97fa87230ed3d808ead90ccbb33bb9ff0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:4d:04:56:5f:66:25:33:3c:39:40:dd:c8:
96:d9:3e:05:48:15:f6:23:e4:4b:c0:07:65:08:97:
a2:32:34:70:a2:a0:7c:5c:1c:97:c5:53:07:4b:14:
f4:53:61:6e:ee:91:9b:6f:8b:fa:f6:60:5c:e7:3c:
3f:84:45:62:9e:8b:c7:be:d3:8c:71:51:c9:18:a3:
45:10:23:94:c4:e6:8e:fd:39:17:f3:37:b4:eb:2d:
61:2a:45:60:fa:62:d4:13:1d:48:5b:41:15:45:85:
58:c4:33:9c:b2:36:2f:83:0a:2b:6a:52:a9:0d:30:
a4:bf:7a:5d:c6:78:4e:1e:4d:2f:25:8f:8a:8b:75:
19:b7:5a:06:0e:56:96:c6:36:59:1c:98:25:ff:a2:
e2:fb:42:11:aa:d0:60:ff:a1:d0:2d:8d:7e:fc:c5:
5e:f9:44:cd:5d:10:92:8c:d9:38:0d:9c:61:54:c8:
0f:59:c9:60:08:9f:8a:32:88:b3:bb:ab:2c:aa:41:
9f:94:de:e2:1b:ba:48:e1:32:4f:26:35:c3:a6:49:
2a:d2:18:e8:8f:e8:cc:cb:b0:8d:d5:19:fe:c9:d0:
d1:3d:ee:50:60:a9:49:c3:7f:f6:1a:4a:28:68:e8:
02:8c:d8:4b:50:2e:10:3a:cb:ef:e0:1d:8c:e2:fc:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:E9:7F:A8:72:30:ED:3D:80:8E:AD:90:CC:BB:33:BB:9F:F0:D9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GRbpf6hyMO09gI6tkMy7M7uf8Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
163.5.129.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:da:94:be:0a:f0:b5:99:dd:c2:ae:1d:38:bb:d3:3c:80:b7:
fe:bd:d5:5d:3b:0c:10:18:fc:d0:d1:ae:a8:6a:4a:64:b4:82:
8c:6f:51:fb:14:51:5e:3c:cf:9e:4b:91:04:03:1c:14:62:f2:
c6:a3:0d:b0:34:37:0f:4f:5d:b9:74:2c:43:3a:21:fb:21:83:
c2:68:7e:50:ad:a5:60:14:a5:48:96:05:78:d5:24:a8:6e:c3:
58:0d:55:fb:4f:7a:c7:f3:30:db:82:ad:14:f5:35:fb:62:e9:
a8:31:5e:f4:b9:a9:23:b8:62:8c:c1:d7:03:7b:7e:fa:d7:ea:
11:58:82:a8:fe:b6:8e:cc:f6:11:36:74:ff:4a:95:bc:9d:8c:
ee:a5:27:2b:c8:04:f6:4b:cb:14:d0:36:4b:08:d2:45:b0:f1:
85:53:4d:af:64:83:fa:23:55:72:0c:28:04:6b:9e:b9:7b:be:
a9:78:3b:bb:05:7e:a4:af:cb:12:0d:20:90:45:78:34:69:52:
54:a0:29:14:3d:35:03:0c:91:2d:27:fe:cd:d8:5b:9e:09:45:
0d:dc:5e:42:fd:52:5e:53:26:9b:3e:27:d8:8d:8d:bf:ab:2a:
1d:17:76:e4:b9:77:17:cf:12:0a:05:1c:09:f0:31:9a:ab:3d:
b5:87:f7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org