Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PnBs0GwEs2-UgyUasFDIClFCHZg.roa
File: PnBs0GwEs2-UgyUasFDIClFCHZg.roa (raw, json)
Hash identifier: whY67o3ymZZPx9rjFAOrZZtuFLOHtxACZCWyiBvSsKI=
Subject key identifier: 3E:70:6C:D0:6C:04:B3:6F:94:83:25:1A:B0:50:C8:0A:51:42:1D:98
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B96CB200C45414E9B6D8C31CDA2C689D7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PnBs0GwEs2-UgyUasFDIClFCHZg.roa
Signing time: Fri 03 Nov 2023 20:06:16 +0000
ROA not before: Fri 03 Nov 2023 20:06:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 996
IP address blocks: 163.5.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:cb:20:0c:45:41:4e:9b:6d:8c:31:cd:a2:c6:89:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 3 20:06:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e706cd06c04b36f9483251ab050c80a51421d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:20:2c:eb:a3:96:bc:f4:98:dd:63:bc:8b:
f8:9b:98:50:cb:8e:86:78:66:e1:bb:67:18:9c:a6:
02:94:fd:e8:dc:c4:d9:ca:aa:80:c4:ae:12:ae:f0:
48:93:60:ed:d1:b3:d6:dd:46:60:02:82:96:df:b4:
2e:1b:f0:24:b8:38:b6:3d:62:e9:01:ae:8c:61:11:
dd:cc:64:d9:4b:a3:3b:21:5f:77:bc:44:95:e1:c4:
a4:28:85:94:b7:cc:4c:64:51:53:b1:01:39:5b:fc:
82:71:84:63:6c:a3:8b:60:1a:61:89:72:0d:7e:56:
86:3b:2a:1f:51:f2:93:43:5d:ff:bb:61:59:e0:e9:
53:1e:9f:1a:c6:11:53:a3:38:c0:00:dc:01:82:fd:
c9:4b:e0:ef:b2:db:58:ec:c7:57:9b:e6:3b:81:ee:
42:3d:b1:1a:89:d4:a2:29:ad:ca:45:cd:f0:62:01:
56:0a:a9:1d:09:f9:8c:5b:30:34:2f:7a:98:06:7a:
cb:a7:a8:a9:22:cd:07:a0:6d:3d:cf:57:0e:53:67:
6c:1d:af:59:3f:4f:8f:23:98:ec:98:9a:67:6f:33:
c7:e3:2a:8f:de:9f:9e:de:fb:21:55:10:5c:b6:84:
1b:e3:21:18:3e:0e:68:ea:c0:5e:52:17:56:c5:76:
78:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:70:6C:D0:6C:04:B3:6F:94:83:25:1A:B0:50:C8:0A:51:42:1D:98
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PnBs0GwEs2-UgyUasFDIClFCHZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.165.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b4:79:01:90:ed:14:b7:7d:ef:9e:8b:9d:4a:a1:e4:1d:8f:
f6:33:6d:4c:ab:1b:7e:e8:58:ad:af:58:a7:2c:29:0a:84:5f:
46:3c:e0:48:36:89:6d:76:ad:e3:b0:c0:9d:99:49:e3:a7:3c:
5c:a1:78:0f:74:4e:fa:ac:74:3e:08:3d:0c:5f:c2:13:37:d3:
d2:93:1d:af:23:b2:86:0d:6c:49:c2:d8:00:22:b0:f6:6d:1d:
b7:bc:c7:03:16:fc:97:fa:29:04:1f:d4:0a:32:a8:92:1a:39:
27:ef:b3:10:26:36:76:11:5f:cf:1c:54:0e:71:d2:68:59:4b:
f3:14:f2:08:b2:85:88:fc:53:d0:ed:48:c4:25:18:cf:7c:31:
8a:a1:f8:0c:66:c2:d0:aa:ed:37:ee:71:ab:55:12:30:21:b0:
81:ce:9e:84:bf:6c:88:4d:52:94:03:a3:77:3f:fb:41:04:ff:
a6:28:8f:b8:ce:78:9e:e9:97:b0:ea:bb:04:a3:f0:dd:9a:29:
1c:7a:0e:98:f5:16:b9:83:fd:b1:3a:de:b5:57:24:a9:63:eb:
ce:36:26:4c:d5:71:47:8a:0a:fb:50:5a:96:bf:44:4c:4e:f6:
0f:d9:87:04:0d:1b:fc:f7:8b:f5:c6:2a:51:8b:fd:42:5f:f4:
4f:a6:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org