Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I1m5HHQvbzj6qRWfY6eNT23A6vM.roa
File: I1m5HHQvbzj6qRWfY6eNT23A6vM.roa (raw, json)
Hash identifier: a7fFzXrCFfIDS2KD+zeKR8hvoUVVG0It+T1rewLI5LA=
Subject key identifier: 23:59:B9:1C:74:2F:6F:38:FA:A9:15:9F:63:A7:8D:4F:6D:C0:EA:F3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B6FB553165605F9E7BD595A5FED140721
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I1m5HHQvbzj6qRWfY6eNT23A6vM.roa
Signing time: Fri 27 Oct 2023 05:57:16 +0000
ROA not before: Fri 27 Oct 2023 05:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 395517
IP address blocks: 163.5.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:b5:53:16:56:05:f9:e7:bd:59:5a:5f:ed:14:07:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 05:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2359b91c742f6f38faa9159f63a78d4f6dc0eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:46:e2:72:67:dd:aa:57:ce:8d:67:ab:87:
b0:67:19:b3:cc:65:f4:03:b2:67:22:9b:6b:3c:4c:
72:88:53:e0:34:f3:c1:45:b5:be:3c:88:da:8e:53:
38:bd:ef:18:bb:17:78:80:fd:84:15:2e:e3:83:4f:
50:af:ec:4b:1a:15:b4:62:5e:87:a1:ab:da:07:f5:
ff:60:f4:72:b3:79:6b:b8:50:c6:79:6d:c9:c7:ef:
eb:82:70:ff:32:9f:88:d9:ee:00:2c:35:be:3a:75:
12:29:eb:5d:2a:75:f3:7d:5e:25:62:6f:7a:f5:17:
5c:24:58:95:ee:3b:40:79:3c:96:84:6a:08:ce:18:
42:7e:fb:af:b7:5d:c7:ff:33:dd:c1:53:39:62:e5:
90:4e:82:18:9f:11:05:63:97:3d:bd:12:22:f8:43:
fd:71:47:ec:24:05:bc:b8:eb:a1:9d:67:d5:ca:02:
e8:b5:9d:de:f6:fb:4b:24:5e:b7:ab:78:2c:4e:44:
4f:e4:35:ef:a3:32:82:6f:c7:08:45:3f:9d:f0:76:
8f:57:54:cc:1b:8d:72:34:2e:8f:7b:03:35:ed:fd:
6b:04:f2:b0:ca:cd:59:de:0b:f7:74:9f:70:16:c0:
84:be:5e:c8:ef:fd:72:59:e9:3b:84:15:1f:d0:60:
51:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:59:B9:1C:74:2F:6F:38:FA:A9:15:9F:63:A7:8D:4F:6D:C0:EA:F3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/I1m5HHQvbzj6qRWfY6eNT23A6vM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.198.0/24
Signature Algorithm: sha256WithRSAEncryption
78:55:81:0e:7f:7b:b5:68:5e:31:ca:41:a1:5d:ab:84:39:fc:
89:8b:f2:58:a6:06:6f:e9:f2:fc:64:ff:4d:bf:18:65:0f:a8:
9e:e8:91:65:0b:40:aa:13:ff:42:d2:40:5c:a1:d9:ed:d7:be:
e8:d2:66:3e:93:8d:05:07:45:a1:51:a5:a6:4d:3b:cb:46:4d:
e7:30:9c:58:02:96:68:3f:7e:1b:98:0f:88:ba:a6:c1:d7:14:
4c:b1:b0:26:30:09:f7:23:a7:8f:cc:d0:2e:51:56:f5:f2:99:
30:b9:58:12:bb:bb:2d:17:a4:cd:5c:70:eb:6b:ab:34:f4:59:
45:f3:11:69:97:07:fb:ab:e6:bf:39:c1:96:6d:19:11:c7:aa:
a6:88:df:c7:e1:35:33:3c:61:35:74:9f:ae:8e:20:bc:a9:c2:
8b:b3:58:4f:90:66:23:c7:40:40:98:28:b5:98:a9:49:ea:be:
82:39:6b:e1:37:7b:10:b4:75:ea:85:99:7a:79:c4:2d:e2:0f:
aa:2a:f4:99:39:fe:01:57:cf:38:b4:19:6f:35:1b:f4:b8:3a:
92:e7:88:fd:b2:70:5b:77:f8:2d:4e:ed:e8:d3:c8:51:68:3f:
a4:7b:fb:ca:e5:8c:78:5c:63:ed:c7:12:e2:c4:a3:72:d3:a1:
cd:9a:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org