Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MSDDbRwsyYtAnafy4Qer7aduwuA.roa
File: MSDDbRwsyYtAnafy4Qer7aduwuA.roa (raw, json)
Hash identifier: B4X6xiTayKljGcCVNDBPYKVitE/SUR7YyGbVcTx1/l8=
Subject key identifier: 31:20:C3:6D:1C:2C:C9:8B:40:9D:A7:F2:E1:07:AB:ED:A7:6E:C2:E0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018BABF9D322A3FD511DC39D8E9404C612B9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MSDDbRwsyYtAnafy4Qer7aduwuA.roa
Signing time: Tue 07 Nov 2023 22:49:18 +0000
ROA not before: Tue 07 Nov 2023 22:49:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.141.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:f9:d3:22:a3:fd:51:1d:c3:9d:8e:94:04:c6:12:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 7 22:49:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3120c36d1c2cc98b409da7f2e107abeda76ec2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b8:73:9d:2e:a0:d6:62:17:0e:3d:65:c8:c7:
ce:e5:0d:1f:1d:8f:fb:6a:67:1e:6c:a5:64:59:32:
9b:79:6a:aa:e0:22:77:c1:ee:ba:28:62:54:9b:ce:
d5:e4:19:80:74:ea:15:ae:87:a5:99:81:60:cc:1d:
df:d0:8f:2d:e4:16:e6:a9:e1:17:32:08:23:ae:7b:
4f:97:65:6e:61:f8:8e:ee:9b:14:1e:78:f0:21:63:
59:e7:0d:88:c5:1c:f0:6b:90:f0:b9:11:ae:62:d9:
28:87:a1:2c:6b:98:0e:ba:d9:f9:af:2a:99:4d:bc:
e3:ae:00:44:7a:a4:bf:96:e9:10:43:7a:3f:25:21:
b7:9a:0e:95:a8:e4:2e:01:51:68:fc:bd:63:78:40:
d7:d5:ee:df:4a:c2:a8:10:00:d3:63:d0:6b:8a:1b:
1c:2d:00:36:0e:15:2f:ee:98:ea:e5:3e:74:f1:88:
a5:96:ce:a6:75:00:05:65:98:4d:6b:04:54:0e:12:
c0:dc:ec:7d:21:5f:3b:fb:d0:dd:13:f9:7b:ea:5d:
98:bb:48:80:c3:b7:75:f0:33:74:57:2f:3d:93:f8:
8c:8b:e2:de:86:a6:e5:6c:a4:9c:da:f9:42:7f:59:
27:d8:78:56:80:46:2e:cd:ec:3e:08:65:59:16:85:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:20:C3:6D:1C:2C:C9:8B:40:9D:A7:F2:E1:07:AB:ED:A7:6E:C2:E0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MSDDbRwsyYtAnafy4Qer7aduwuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.61.0/24
163.5.141.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f1:f5:b3:da:37:c9:0a:17:0b:e6:a5:5e:df:29:10:5f:74:
d1:8c:6b:46:52:ea:3b:a1:48:fc:8c:18:ba:ca:5b:63:f0:40:
10:e5:4a:1d:de:05:9d:00:46:b9:c3:b2:b7:8a:4e:ba:6c:a9:
2f:10:11:21:92:45:33:5a:6f:3d:de:7b:a3:c3:c0:0f:71:28:
20:01:f9:6b:24:a4:aa:42:55:6a:ad:69:81:fe:49:6f:c9:8c:
71:ef:97:1a:9f:f6:2a:63:4e:5d:b5:52:ef:27:f3:27:5d:84:
61:58:ea:e5:30:88:87:71:6d:e9:8d:76:dc:c6:2d:34:da:45:
33:55:5c:2c:71:73:7e:04:5c:47:99:c8:90:df:91:c5:1c:73:
88:6d:89:af:e2:21:4e:67:48:52:1e:5f:a2:4c:10:7f:74:fc:
65:37:5a:dd:b1:42:a9:38:74:f1:dd:33:cf:f7:11:50:13:2d:
7a:b9:a8:1f:79:f9:cc:84:ae:e3:f5:ba:40:67:b5:45:dd:58:
25:7f:c2:a2:84:46:08:de:aa:f5:a8:93:18:d7:e2:e3:63:a4:
5c:e0:a6:49:82:40:9e:30:37:d5:d5:96:95:dd:fe:76:45:18:
46:40:63:08:4f:d3:66:f7:a7:fe:f0:d2:32:4c:84:d9:85:d5:
61:50:81:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 10 18:15:06 2023 by rpki-client on console-ams.rpki-client.org