Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GdppMrILhdXEg2jGd7fQbZ9Amao.roa
File: GdppMrILhdXEg2jGd7fQbZ9Amao.roa (raw, json)
Hash identifier: nDbmAdbWs7quH01egxGPUEuB3Uq6M3glDylS+W4ElNo=
Subject key identifier: 19:DA:69:32:B2:0B:85:D5:C4:83:68:C6:77:B7:D0:6D:9F:40:99:AA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01876FAF40A9D1BCC1FF4967AEC6DB122EE5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GdppMrILhdXEg2jGd7fQbZ9Amao.roa
Signing time: Tue 11 Apr 2023 09:39:28 +0000
ROA not before: Tue 11 Apr 2023 09:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 163.5.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6f:af:40:a9:d1:bc:c1:ff:49:67:ae:c6:db:12:2e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 11 09:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19da6932b20b85d5c48368c677b7d06d9f4099aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:a9:6e:c5:7e:fd:fc:ab:bb:19:cb:a2:a1:
28:f4:5a:97:21:43:d6:ed:09:2e:cc:50:c3:c0:85:
9f:c7:24:39:71:a6:20:30:da:82:50:15:7a:02:5d:
21:25:15:25:6c:ee:03:de:79:45:97:fd:58:51:6b:
21:86:6e:a6:3d:15:4f:b3:ec:e0:4a:f9:ea:af:1d:
aa:eb:bb:e6:42:21:47:a7:51:6f:bb:15:54:2d:7d:
17:a5:a6:f7:75:0c:ee:9b:6c:e2:57:2b:6e:65:cd:
f8:73:3d:f7:da:a6:d6:85:51:17:ed:69:0c:15:52:
34:be:4e:68:e9:f6:f9:87:74:6a:9a:b2:e0:b9:79:
d1:96:38:a7:de:a1:27:23:3f:c2:f4:91:74:0f:f2:
9c:dc:70:08:f2:15:fe:ac:9f:dc:b0:b7:ad:9d:3c:
94:38:eb:f4:c5:e9:e3:f8:06:b0:5f:c6:c8:a6:6b:
db:ce:a3:a3:26:f4:f3:29:33:1b:fa:69:d7:2b:11:
0a:74:3e:b4:c0:49:fc:ae:6f:82:75:82:87:93:e7:
9d:87:18:c2:3b:e9:ac:3f:09:29:40:77:5b:6f:f8:
7c:ae:0f:2d:ce:c9:27:5e:b0:5c:fd:78:ca:07:ef:
1f:3f:cc:0c:98:33:b1:ba:b7:da:27:4b:38:08:7f:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DA:69:32:B2:0B:85:D5:C4:83:68:C6:77:B7:D0:6D:9F:40:99:AA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GdppMrILhdXEg2jGd7fQbZ9Amao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.66.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8e:b9:86:32:37:e5:09:15:49:7b:0c:e5:d1:94:ba:fa:ae:
cc:b4:27:c7:cb:3b:bf:dc:b9:92:cb:2c:c2:04:bf:58:05:10:
e8:00:1b:51:8f:a2:4a:23:4a:17:b5:04:28:9e:f4:61:bf:b4:
b3:24:aa:5e:f2:c7:81:35:cd:66:2d:f2:a3:5d:0f:29:d6:cd:
a4:0c:ee:cc:da:36:1f:6c:59:28:1d:3c:32:6d:99:9f:57:ff:
0e:16:d5:01:ac:b7:c6:d7:5e:da:c6:e4:d4:55:27:54:66:b4:
ab:9b:a5:ab:2c:56:4d:1d:2f:f6:a3:f6:0a:14:07:7f:35:4d:
e9:d2:ca:34:41:e3:2d:c7:f8:b0:d8:47:8b:5c:70:23:11:2a:
3d:34:8d:46:87:a5:2c:d9:63:cd:db:2d:9c:a8:54:39:f9:5b:
f5:98:03:52:4d:66:30:d8:85:58:23:5c:ce:47:93:6f:3e:57:
1b:b8:93:45:da:33:7b:dd:a7:a1:f8:c2:82:a6:53:7a:e4:ac:
1b:0d:c9:be:b7:3f:06:48:7f:35:89:27:ca:8a:98:ac:d6:66:
53:7e:06:50:14:4e:89:bf:61:69:7c:65:cd:39:ca:fd:39:71:
6c:a0:83:1b:c3:43:d0:8f:38:86:6b:02:0a:b3:36:26:34:af:
7c:d4:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org