Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MaK764gtuSjlmJIK7v4xqyHeI-Q.roa
File: MaK764gtuSjlmJIK7v4xqyHeI-Q.roa (raw, json)
Hash identifier: vZCNCTN8DlGa4kIdsB7mEiXv8P1lT+FYxc91J3uelxk=
Subject key identifier: 31:A2:BB:EB:88:2D:B9:28:E5:98:92:0A:EE:FE:31:AB:21:DE:23:E4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A672E15F9DF95E5349E0ACD3873670A49
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MaK764gtuSjlmJIK7v4xqyHeI-Q.roa
Signing time: Tue 05 Sep 2023 21:09:48 +0000
ROA not before: Tue 05 Sep 2023 21:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59538
IP address blocks: 163.5.92.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:67:2e:15:f9:df:95:e5:34:9e:0a:cd:38:73:67:0a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 21:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31a2bbeb882db928e598920aeefe31ab21de23e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:de:31:37:48:fa:f0:63:7b:c8:c2:fb:a7:
c2:5a:09:b5:76:43:d5:0a:94:3e:74:5c:c2:3a:11:
86:9a:db:54:44:c7:f0:82:c0:ad:3f:50:82:07:9d:
bf:8e:42:51:68:1a:c3:ff:b3:59:32:fc:0f:ea:9f:
0d:55:46:be:ca:5a:af:84:c9:cf:d0:6d:57:d5:f3:
a9:f2:a4:82:fa:f6:b7:6a:64:21:f5:2c:e6:7a:7e:
4b:61:ac:0d:c5:f6:3c:d2:10:6e:26:e2:d0:4a:e8:
70:cb:83:29:39:7b:95:7d:be:e6:77:da:d1:38:48:
a9:e2:d8:8a:fd:c4:04:ff:db:05:a6:e1:7b:74:6f:
f4:5a:42:b0:5b:ce:9e:7e:6f:23:6e:e3:71:a4:fb:
9c:cf:38:74:e1:ea:89:ff:01:fa:af:af:e5:4d:47:
e4:2c:ca:83:9e:70:23:71:08:6d:c3:11:38:a1:21:
92:89:9d:bd:ae:04:8d:a0:26:01:45:33:bf:5c:12:
e8:fb:d0:a0:57:2b:81:af:23:c4:c6:31:4d:67:b8:
3b:aa:e7:27:ab:05:a8:6f:d5:f3:a2:7f:0b:51:f1:
d9:5c:72:c8:5c:1a:84:e3:40:a5:c1:84:bc:73:59:
ce:4d:65:46:68:81:18:9d:b2:fb:8e:f2:e3:f2:f4:
e8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A2:BB:EB:88:2D:B9:28:E5:98:92:0A:EE:FE:31:AB:21:DE:23:E4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MaK764gtuSjlmJIK7v4xqyHeI-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1f:29:62:67:dd:fd:84:40:db:75:65:26:28:b6:cc:80:13:
89:99:f4:c3:e5:53:ca:ce:7b:e4:a6:20:10:d2:71:3b:5d:ce:
15:d7:90:03:3f:aa:98:34:8e:16:bd:fc:a9:bd:e7:0c:5c:63:
e9:b0:21:b0:af:ae:04:c5:de:90:cf:d0:a2:22:89:f0:5d:8c:
cf:58:ea:4f:55:1f:89:f8:ca:e0:19:b4:f9:41:5b:b3:c5:ed:
9c:b7:fb:56:27:75:32:f4:0b:7f:32:c9:5b:3f:b4:c6:ee:da:
54:c8:d3:ec:a6:89:9b:8a:f7:06:93:49:34:bf:2f:a2:29:d1:
91:24:22:69:40:28:84:85:43:00:7c:2c:8d:90:72:1d:a8:5a:
25:93:9f:60:08:d3:68:0a:5d:32:b4:a0:e4:09:32:ae:84:66:
cb:0f:00:81:1c:6c:28:79:3e:45:15:7d:b6:da:65:e5:ce:08:
31:fa:26:04:9f:c6:d9:04:60:8e:21:ab:9f:da:e3:6c:0f:31:
db:7b:92:52:f6:c5:3c:e6:17:19:15:13:14:80:a6:eb:16:5d:
04:6d:3a:1b:0b:73:6c:1d:e8:0f:65:02:50:ea:7f:e9:12:93:
33:7b:69:ff:d4:e7:f5:87:20:a9:2d:6d:3e:9e:09:88:c6:15:
73:26:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org