Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HBGHHJeJASogr8OyRS80v9faJR8.roa
File: HBGHHJeJASogr8OyRS80v9faJR8.roa (raw, json)
Hash identifier: 3gOj0xr07+nR8cJWoNOhzEo8MR1gV3YWuQMx4Gh+tOM=
Subject key identifier: 1C:11:87:1C:97:89:01:2A:20:AF:C3:B2:45:2F:34:BF:D7:DA:25:1F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189C729E445F70FAE6E5FF601B3E5E980E4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HBGHHJeJASogr8OyRS80v9faJR8.roa
Signing time: Sat 05 Aug 2023 19:25:58 +0000
ROA not before: Sat 05 Aug 2023 19:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 163.5.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:29:e4:45:f7:0f:ae:6e:5f:f6:01:b3:e5:e9:80:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 19:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c11871c9789012a20afc3b2452f34bfd7da251f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:71:78:a9:76:5a:33:4e:68:30:8d:c7:59:ea:
6b:c2:00:00:ba:5a:7f:2a:fa:c1:01:c5:ce:41:2c:
b9:17:93:8b:d3:68:1a:6e:ce:9e:bf:31:04:67:7b:
02:0a:8d:46:f7:13:97:fe:97:fb:10:0b:90:05:f1:
d6:98:95:2c:a0:82:1d:57:cd:a0:84:61:70:cd:76:
96:13:e4:e0:20:99:7b:d4:77:db:54:90:0f:32:62:
55:a5:6f:af:2f:8a:ea:82:c3:b8:37:a6:68:b5:53:
7a:c6:e1:af:9c:6b:47:87:d1:55:e7:5e:e7:d0:92:
40:97:f3:ec:2e:a0:f9:48:24:81:5c:67:17:15:77:
e9:9c:13:f5:3a:bb:b3:5e:57:81:cb:22:69:dc:6e:
a5:07:6e:ad:c4:29:0e:27:76:a5:8d:d8:88:02:84:
25:15:97:ba:81:1a:84:bc:a7:62:ad:a6:1b:98:89:
1e:19:32:a6:0e:ce:6b:d5:53:3d:9f:cf:c6:a8:fd:
59:b0:f3:1f:a6:32:5c:b5:dd:17:9c:9f:8a:6f:b7:
83:f9:20:03:ac:4b:97:26:df:69:ad:90:85:6e:b7:
02:92:ec:6a:b0:2b:cb:14:c1:d6:6e:0b:04:d4:0f:
03:3c:09:a6:22:37:68:c0:2a:c1:2c:27:44:7b:54:
1b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:11:87:1C:97:89:01:2A:20:AF:C3:B2:45:2F:34:BF:D7:DA:25:1F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HBGHHJeJASogr8OyRS80v9faJR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5a:48:ad:4a:06:98:7c:0d:27:a5:c8:d7:d6:7e:b3:35:e8:
cf:7c:b1:6a:3a:c6:7a:3a:ef:95:73:6b:55:77:23:15:8f:37:
43:cc:2f:56:f5:53:a4:b7:c6:74:01:6b:c3:26:17:a8:9e:6e:
cb:46:7f:f9:17:66:dc:f7:0f:12:31:3c:5e:47:5f:c7:1f:54:
ac:5b:43:c3:48:5e:72:b3:e3:3a:26:a5:45:4b:e0:76:64:96:
d0:aa:e8:ee:c6:8c:6e:bd:d0:ca:31:23:5c:c7:98:8c:20:ea:
dc:e1:fc:8e:9c:25:8b:49:ea:6b:e2:1c:4c:e6:d7:9c:12:a1:
6c:3b:9b:13:b2:95:36:98:e5:75:69:7f:55:64:c0:7a:43:12:
57:99:49:c5:82:95:db:e0:b1:8b:4c:b6:84:9e:db:22:3d:ff:
f0:2a:0c:68:11:8a:b2:68:ca:2d:12:99:5e:22:6e:f2:ab:13:
98:a0:82:bd:e1:ac:8b:5b:b6:e9:16:65:fe:f1:f3:25:65:19:
0e:e4:e6:55:f8:b3:4e:17:b9:8f:0e:f3:d7:cc:61:f3:b3:1b:
42:85:6e:54:67:f1:7f:33:0f:85:21:25:2c:2a:78:03:5b:61:
23:78:8b:9f:cc:83:16:42:5c:63:71:4b:31:9b:29:05:e6:95:
69:c4:01:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:00:43 2023 by rpki-client on console-fra.rpki-client.org