Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GkVBXH48tSNUoJ0NYUtkqAqskrw.roa
File: GkVBXH48tSNUoJ0NYUtkqAqskrw.roa (raw, json)
Hash identifier: mmOZ5uT9FSPkaz7KZxBAt/RsOwL111Qtc6hZQwp5BiM=
Subject key identifier: 1A:45:41:5C:7E:3C:B5:23:54:A0:9D:0D:61:4B:64:A8:0A:AC:92:BC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01859B0DA1D4E5117F0F5E74F0713C98849A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GkVBXH48tSNUoJ0NYUtkqAqskrw.roa
Signing time: Tue 10 Jan 2023 09:40:39 +0000
ROA not before: Tue 10 Jan 2023 09:40:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 163.5.189.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:0d:a1:d4:e5:11:7f:0f:5e:74:f0:71:3c:98:84:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 10 09:40:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a45415c7e3cb52354a09d0d614b64a80aac92bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b8:41:99:47:bd:8c:67:22:83:11:9a:82:aa:
de:94:64:b0:f0:ad:59:d1:7b:c9:86:d6:9c:74:f9:
9a:ee:92:ea:9d:d6:3d:69:d7:e8:44:44:37:0e:e4:
6e:6e:c2:d6:e1:6d:8b:f4:ac:eb:a2:7e:44:c5:f9:
c2:51:57:89:53:00:84:2b:91:b2:19:e7:4c:f4:f7:
33:54:98:51:6a:15:3f:28:6b:c7:61:3e:20:71:1a:
c5:2e:44:d7:c1:50:27:04:0f:0a:59:50:f4:aa:5c:
60:a8:3c:03:b0:7e:82:b5:9c:fd:b0:84:50:6a:80:
87:28:4a:a5:88:ea:90:2d:ac:0b:f4:5c:1d:d6:ec:
b1:43:f9:08:4f:d9:fa:0c:63:e9:39:01:6b:eb:df:
88:2a:14:b0:e1:38:81:ad:e2:3a:83:0c:2c:6f:bb:
5d:38:86:14:b2:77:f7:ce:ca:02:01:9a:6b:42:b3:
55:a2:dd:8f:55:f7:11:79:b3:cb:e3:5e:1a:77:f0:
ac:92:15:bd:9e:aa:ff:32:72:73:4c:1d:d8:fd:7f:
3d:7f:8f:2d:19:77:80:7a:09:0e:fe:3d:93:2b:46:
d5:91:05:a6:be:5d:58:e8:e7:c5:fa:9e:b0:db:74:
01:9f:f0:75:0a:cf:cf:30:f8:6c:4a:8f:af:46:9e:
8d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:41:5C:7E:3C:B5:23:54:A0:9D:0D:61:4B:64:A8:0A:AC:92:BC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GkVBXH48tSNUoJ0NYUtkqAqskrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.189.0/24
163.5.234.0/24
163.5.236.0/24
Signature Algorithm: sha256WithRSAEncryption
51:31:50:fe:5a:47:6b:95:7b:25:c1:f1:43:bc:65:c1:d6:36:
b9:34:94:c0:f7:33:37:4e:be:ad:e7:63:89:c9:76:b9:14:02:
32:c0:20:47:cb:77:8a:ec:95:d4:d9:aa:2f:57:e7:3e:d6:5c:
a5:89:59:d5:b6:ff:e9:f8:b9:bf:62:75:fe:b9:00:73:39:3a:
f5:28:b3:c5:36:14:68:fc:72:52:a3:62:22:f4:43:3c:ef:2f:
e2:c7:50:f9:55:cc:94:72:22:8f:61:30:6d:aa:e2:64:3a:da:
79:f8:86:c2:29:01:78:71:3f:fe:19:0d:b6:23:32:27:da:c2:
a3:50:05:71:99:6c:ca:0c:02:ac:ce:c4:46:78:f3:8c:53:72:
38:06:10:6b:00:ef:00:c1:10:84:66:7d:29:6a:eb:c7:f8:56:
b4:9b:f1:18:15:d0:47:b2:85:cf:51:c5:96:2f:da:b3:d8:91:
a6:22:d4:b0:07:e3:9c:12:b0:c2:2c:47:49:af:17:66:d8:cd:
9b:0f:bc:4f:50:27:c4:e3:83:81:f9:47:53:bb:f6:1d:79:45:
b4:44:7c:23:59:39:ae:68:97:14:64:ef:0f:ca:fa:3f:19:45:
7c:45:2c:98:6a:fd:8a:21:f6:7b:ae:dc:67:fa:fd:4d:af:aa:
46:ef:3b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org