Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RQe90mQgc4Ee915p5kKBnr6kss0.roa
File: RQe90mQgc4Ee915p5kKBnr6kss0.roa (raw, json)
Hash identifier: vT4P2Y3ARmbpFDpFN7zemIxdKX/N1yVAmWD2aSLKvhk=
Subject key identifier: 45:07:BD:D2:64:20:73:81:1E:F7:5E:69:E6:42:81:9E:BE:A4:B2:CD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01891757C8E30ED590FCAAF0B86FF860E0AD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RQe90mQgc4Ee915p5kKBnr6kss0.roa
Signing time: Sun 02 Jul 2023 16:02:56 +0000
ROA not before: Sun 02 Jul 2023 16:02:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:57:c8:e3:0e:d5:90:fc:aa:f0:b8:6f:f8:60:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 2 16:02:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4507bdd2642073811ef75e69e642819ebea4b2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:76:d7:78:50:28:2e:bb:aa:00:d5:2c:5c:c2:
a0:ba:ba:3e:f6:d2:36:89:7d:a9:94:9f:34:41:50:
d0:69:c1:9a:3d:ab:83:21:3e:10:8b:7d:c1:e6:97:
5f:eb:42:3c:df:d4:a5:69:dd:9b:f7:1a:e0:fc:56:
00:56:2e:76:7f:c9:4f:fb:29:0e:d6:28:40:c5:83:
8a:c7:1c:a8:d8:95:5f:e4:f4:14:fc:2b:de:86:29:
07:a0:cd:53:ad:cb:1b:cf:54:fe:d8:56:42:56:93:
a4:29:42:7a:aa:df:1f:cd:38:f0:23:fe:00:81:8f:
21:c3:d8:29:88:c7:1c:ae:fa:83:72:02:25:26:6a:
87:f2:41:a9:14:bf:cc:36:0d:20:87:96:f8:3e:38:
fd:3d:82:08:69:99:c2:aa:e8:a8:2e:f0:e8:a2:56:
de:f3:df:b6:96:f6:a3:58:cd:35:aa:1b:00:a2:4a:
31:90:70:a4:cd:94:2e:28:08:13:32:66:1e:e5:2a:
d6:4a:5b:5c:f9:34:0d:f8:16:7e:c8:87:2b:da:fa:
fd:98:77:d0:f3:51:99:93:34:1e:ff:75:bb:09:80:
ed:6f:fe:19:31:49:79:75:23:f1:3b:57:3a:9e:86:
22:30:d5:89:59:5a:f1:bd:d8:ab:e7:b4:54:96:b3:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:07:BD:D2:64:20:73:81:1E:F7:5E:69:E6:42:81:9E:BE:A4:B2:CD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RQe90mQgc4Ee915p5kKBnr6kss0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:40:01:bb:fc:1e:b3:a6:16:49:a0:11:9d:07:8b:35:3e:72:
2c:f1:a6:dd:59:e8:ed:93:21:ff:ad:de:2d:8e:0b:13:7d:34:
05:59:be:23:8b:fd:7e:15:80:70:74:da:fa:db:80:73:db:9e:
1d:48:92:84:fa:3a:d0:07:59:a4:ba:16:6e:84:a5:5e:a3:3f:
64:aa:4c:e6:42:01:a9:e8:d2:bc:d7:7e:c4:58:2c:68:d6:d1:
fe:95:8a:06:27:4f:0d:5f:06:0c:4a:4d:24:56:7f:1e:33:58:
4b:8a:ea:ae:d8:ae:57:f7:63:fd:4a:50:5e:1b:53:52:a3:1a:
3a:8e:14:24:1f:5c:c2:55:23:3e:9b:80:d6:8f:7c:98:51:95:
e0:c8:88:da:fe:4c:31:67:d7:66:6a:7e:34:a4:4a:13:59:80:
51:18:9e:c2:bb:c7:28:b0:88:6e:1f:75:60:f1:25:a1:ae:1f:
42:cf:b5:d4:a0:53:fe:9d:be:ef:6d:73:e8:8a:79:fb:bc:9b:
7c:93:b0:57:f3:b3:d9:da:f8:08:bf:c1:10:f6:93:eb:45:02:
fd:76:54:c0:1f:6f:ba:4c:1a:2b:82:95:04:9e:e6:77:1b:f6:
98:24:fb:79:60:62:5e:d9:0f:7d:de:ad:8c:c6:71:d5:49:ec:
f3:cf:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 10:22:00 2023 by rpki-client on console-ams.rpki-client.org