Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gdp0dSryDhaPtGMAe5AuRNzBeSU.roa
File: Gdp0dSryDhaPtGMAe5AuRNzBeSU.roa (raw, json)
Hash identifier: uLzreMvBp9kUVM2c3XkIDEXZb3mH2wqY5CMqgvXIRnA=
Subject key identifier: 19:DA:74:75:2A:F2:0E:16:8F:B4:63:00:7B:90:2E:44:DC:C1:79:25
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018664AFA459C3BC3C25B755D87A90791CDC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gdp0dSryDhaPtGMAe5AuRNzBeSU.roa
Signing time: Sat 18 Feb 2023 13:21:17 +0000
ROA not before: Sat 18 Feb 2023 13:21:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.183.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:64:af:a4:59:c3:bc:3c:25:b7:55:d8:7a:90:79:1c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 18 13:21:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19da74752af20e168fb463007b902e44dcc17925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:47:92:a4:2e:17:4a:81:8b:df:cd:8f:99:bd:
e3:2f:5f:e7:cf:52:f1:b4:8f:d0:34:52:e6:67:33:
4e:0c:71:56:78:16:5f:53:dc:52:6c:6d:38:4a:ea:
6e:55:97:80:fe:f9:83:ac:5f:8b:af:d7:c8:1d:41:
ef:b8:6c:d8:62:23:e1:58:ab:49:00:e1:22:75:55:
c0:23:b9:e0:6f:03:83:98:fc:f2:6b:ae:1c:a4:71:
39:cf:6a:bf:72:17:76:66:f2:bd:fe:2a:7f:62:62:
bd:6d:a7:0b:5e:6c:2a:c4:8e:c1:97:9f:b7:e8:c6:
10:53:33:fb:44:16:18:15:67:a6:82:f6:d7:0f:85:
7d:22:0e:79:b5:01:79:8f:47:92:83:d5:fa:d9:dc:
86:b3:8a:48:c1:7f:8c:bf:75:4c:2c:18:4b:44:59:
04:20:40:2e:b8:b3:99:1b:55:b9:80:30:e2:92:54:
b6:a0:10:88:25:2a:98:00:21:63:47:c1:f3:21:55:
52:d5:e1:1a:e5:25:4d:c4:c7:25:ef:6b:bc:df:65:
62:b0:f3:4e:01:0f:28:5c:0c:37:08:1b:81:33:88:
a3:f1:49:4a:9b:57:58:5f:dd:f5:b3:7f:b8:b2:ad:
5e:b5:7a:57:c2:bc:80:dd:33:a9:b7:a5:91:3e:ba:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:74:75:2A:F2:0E:16:8F:B4:63:00:7B:90:2E:44:DC:C1:79:25
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Gdp0dSryDhaPtGMAe5AuRNzBeSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.183.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:c0:a7:d9:41:04:4f:64:b8:c5:e7:16:37:4c:f4:a4:25:b6:
68:c0:4a:50:79:87:28:57:ca:c6:17:81:ea:f4:20:63:6d:ea:
25:75:af:9e:d6:2f:5e:48:5e:83:7c:7f:49:fb:81:37:8f:f8:
75:18:05:b9:c5:f9:30:b8:7b:03:66:47:a0:29:72:5c:83:7a:
da:a7:0f:8a:56:7d:a3:b1:b5:82:14:5a:b2:ec:1c:15:6a:ed:
56:28:7b:fd:07:21:86:9f:e1:ef:27:26:03:94:0c:eb:b9:d2:
6e:b9:ff:db:b2:a1:fc:02:9e:0c:93:81:c7:e7:5d:30:30:50:
2c:76:58:11:fc:f2:fa:e1:9f:b9:f0:2d:fe:17:50:a8:f3:e4:
37:19:02:46:43:68:a2:14:01:ff:88:bd:38:02:81:60:18:0e:
99:e0:72:24:6a:3c:07:84:45:23:af:9b:d9:6c:bb:b6:6f:7c:
ec:45:b9:f5:5e:7e:81:40:a6:7a:f4:4d:0a:9a:28:c8:cd:88:
f3:da:d0:b8:f9:97:43:51:a6:cf:4c:04:ae:e9:0c:cd:7c:7f:
8d:b5:f7:27:51:52:0c:5e:39:34:1e:d3:67:a3:a9:21:52:d7:
5e:21:06:72:3b:1f:71:25:de:7e:f8:8f:34:fa:31:21:0a:f2:
27:f5:35:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org