Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa
File: JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa (raw, json)
Hash identifier: OtKgOXk1/kRSpt3Z+0HVOgOs7lb8jcslovt9wr4d1gI=
Subject key identifier: 24:62:C4:67:55:86:58:8D:B2:50:E1:FF:F4:DE:90:73:76:5A:CD:1A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B78785EFA454855C36D95B8FE68CFF29D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa
Signing time: Sat 28 Oct 2023 22:47:16 +0000
ROA not before: Sat 28 Oct 2023 22:47:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14315
IP address blocks: 163.5.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:78:5e:fa:45:48:55:c3:6d:95:b8:fe:68:cf:f2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 28 22:47:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2462c4675586588db250e1fff4de9073765acd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a9:b3:b5:f3:4e:34:88:00:69:49:42:52:f3:
88:7a:17:00:e2:48:ed:5a:ef:f0:95:5c:ea:77:71:
94:27:c9:2c:a7:67:0b:69:99:ec:57:fb:27:68:2d:
1f:55:4a:38:12:b2:35:1e:01:c1:d8:d5:b3:cf:db:
92:ae:14:19:3f:90:c8:f2:f0:b7:89:9e:61:59:44:
ba:64:01:94:3e:13:b4:8f:52:f2:b0:6b:71:26:c1:
17:2c:07:f6:bc:aa:30:70:f0:dd:d1:d9:7b:43:e3:
86:2c:cc:d4:e5:2c:8b:c7:58:83:68:1e:28:a6:8a:
27:03:17:fa:24:f0:a2:1f:3a:1a:db:6d:a2:90:3d:
f3:29:42:4d:13:26:0d:8d:4f:14:b2:e0:27:7a:ba:
8a:3d:e6:14:ea:6d:e9:fa:0b:e8:61:ad:a0:5b:57:
d8:17:4d:6b:11:4b:97:d6:4c:f2:3b:d1:5a:ac:cd:
05:a8:84:7f:0a:59:4e:57:31:ee:e4:4a:04:ad:2a:
e2:d5:44:ec:29:85:75:37:aa:6d:6b:d3:80:40:e4:
b0:a7:db:da:c0:72:da:53:5b:c9:62:a2:05:4b:df:
eb:d7:07:b5:dd:b4:df:ad:db:db:55:6b:32:7d:ef:
93:e6:e3:cf:2b:69:48:c4:b8:ab:65:0a:a1:0e:b1:
51:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:62:C4:67:55:86:58:8D:B2:50:E1:FF:F4:DE:90:73:76:5A:CD:1A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JGLEZ1WGWI2yUOH_9N6Qc3ZazRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.162.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:5e:90:8d:57:a6:4b:1e:56:d5:fe:97:1e:9a:b4:8d:30:20:
5c:5e:2a:d9:0f:cf:f2:44:7a:bb:3f:c6:d1:80:3c:48:c0:3a:
e4:10:ba:3f:9b:64:81:df:49:9c:11:01:bc:26:10:0a:7f:65:
00:b5:ce:1c:8e:e4:03:24:a8:17:ab:e6:34:67:c4:f5:26:5d:
89:8d:3c:28:56:2e:90:30:39:6e:c1:8d:83:25:15:26:a7:0e:
ef:a0:b2:78:c8:3d:7c:d6:a3:1c:9e:1f:cb:7b:e5:79:ba:d3:
69:2f:81:95:44:c1:14:3d:2d:9f:26:94:bf:f4:e5:1b:e7:c2:
63:54:8b:56:ae:08:fe:a1:d3:a2:44:23:04:8b:f1:ce:fa:d0:
6c:8c:17:ea:55:5d:dd:38:12:18:d3:d9:f2:a8:66:75:f5:6a:
77:87:e1:e5:33:81:4c:22:c6:85:d0:8e:c6:9e:d1:c9:51:1d:
82:04:e4:69:85:8d:56:fb:da:14:49:4d:ad:ff:c0:e2:26:03:
ed:56:f0:44:1d:21:99:10:8a:f1:a8:30:f3:b9:51:95:71:2c:
11:f9:bf:e7:1b:b9:4c:a7:17:80:bb:39:63:ce:26:7d:1f:27:
aa:1e:dc:0b:4d:94:14:92:fa:9a:17:01:3c:ea:eb:58:8a:32:
a5:cc:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org