Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/M3pUQL9WqrmtCI1k88zWAWtoWGE.roa
File: M3pUQL9WqrmtCI1k88zWAWtoWGE.roa (raw, json)
Hash identifier: ATDpf0UT/8TBZfugHe5OI+CsI0iS+Appjw+mZo/iuEA=
Subject key identifier: 33:7A:54:40:BF:56:AA:B9:AD:08:8D:64:F3:CC:D6:01:6B:68:58:61
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018968B0D65FB7A66344DC52CFCEAD4A0972
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/M3pUQL9WqrmtCI1k88zWAWtoWGE.roa
Signing time: Tue 18 Jul 2023 11:09:26 +0000
ROA not before: Tue 18 Jul 2023 11:09:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198607
IP address blocks: 163.5.202.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:b0:d6:5f:b7:a6:63:44:dc:52:cf:ce:ad:4a:09:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 18 11:09:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=337a5440bf56aab9ad088d64f3ccd6016b685861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:20:da:df:62:a5:e7:1a:28:aa:5c:43:92:
0d:5f:eb:93:14:9d:95:f9:e2:9b:5e:6c:85:76:ee:
e3:ac:83:fb:d2:9a:16:9d:49:26:71:e2:b9:f7:4e:
ee:b4:0f:96:be:f3:b4:7e:45:9f:98:36:f7:ab:26:
54:66:4c:73:b0:5d:94:ed:8e:ac:d5:01:84:4d:cd:
53:07:5e:9d:72:ae:56:40:76:ce:03:6b:80:80:bf:
00:39:0e:02:7d:df:68:a8:25:1e:98:dc:8e:f5:a7:
19:75:b6:7a:de:7c:d1:b7:aa:3b:ba:db:81:8a:d7:
a7:00:d6:35:65:89:c3:13:97:7c:d0:04:39:00:c4:
d0:11:f6:d4:18:e9:f1:65:42:c2:6a:cf:77:5b:30:
91:d5:ab:46:47:84:e9:a2:7a:2f:a5:1a:8c:da:2e:
7f:39:63:88:50:46:a7:63:eb:d5:c1:79:ec:34:6e:
c4:25:d6:7a:c1:3d:63:97:67:f5:a2:bc:5f:e0:0a:
65:78:a6:c1:36:58:e4:20:4c:21:84:3e:23:80:92:
20:ce:cf:4d:80:d7:1e:ba:d8:f4:3f:57:53:7c:85:
f3:1a:1d:41:41:85:b5:2c:27:47:ee:c5:e2:e8:38:
82:48:11:07:2d:24:ce:ca:a4:7c:77:58:5f:97:ad:
9b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:54:40:BF:56:AA:B9:AD:08:8D:64:F3:CC:D6:01:6B:68:58:61
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/M3pUQL9WqrmtCI1k88zWAWtoWGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.127.0/24
163.5.202.0/24
163.5.239.0/24
Signature Algorithm: sha256WithRSAEncryption
92:74:61:9e:2d:22:48:1c:bb:a3:06:c6:9f:35:72:b2:bc:57:
42:65:b3:e0:6f:be:8f:74:79:a2:1d:09:6a:ff:01:cc:89:5c:
52:15:2a:0e:0d:9f:c5:a1:c5:b6:18:cc:6e:77:82:75:79:5a:
8f:c5:11:ae:dc:97:13:b9:44:c9:76:9a:75:8b:b8:ed:f7:ac:
ca:a5:cd:06:ea:6f:57:68:4f:6e:23:32:9c:41:cf:88:db:46:
a9:83:dd:59:3e:c4:d2:73:33:ec:16:b2:91:43:ae:fb:99:b5:
dc:88:fc:c5:c4:d6:57:3e:6a:5d:db:83:9f:ee:ad:d7:9d:ac:
2e:b4:d8:a9:d0:be:85:69:a0:ca:fb:eb:c9:7f:70:a8:bd:11:
79:6e:64:20:7e:ca:5f:9d:75:3a:0f:85:04:22:56:cb:6a:c1:
86:0c:38:e8:f4:d8:ad:7f:a9:e8:d6:b8:28:e9:1d:d2:d8:a6:
e3:ae:dd:91:b2:9b:a6:77:67:ff:0d:df:53:b5:da:d8:e5:1a:
d8:0a:88:fb:b7:be:f9:cf:d5:d3:48:3a:d7:5d:9f:f8:d8:d5:
af:62:63:a5:12:25:0b:c5:9a:f9:4c:24:dd:df:d6:7d:66:9b:
34:7c:ae:c6:03:44:be:48:8c:39:69:ff:de:45:84:86:16:48:
d6:2d:30:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 17:33:39 2023 by rpki-client on console-ams.rpki-client.org