Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SS649vBvIQJKi8BoYW3y-r8SGPI.roa
File: SS649vBvIQJKi8BoYW3y-r8SGPI.roa (raw, json)
Hash identifier: mrX2X3zfYSp+rZ7I7Z8EidmHtd7cwEuDBeVLn6rlwoA=
Subject key identifier: 49:2E:B8:F6:F0:6F:21:02:4A:8B:C0:68:61:6D:F2:FA:BF:12:18:F2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042BD5E1EFA529DD9A84172B7A73017
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SS649vBvIQJKi8BoYW3y-r8SGPI.roa
Signing time: Mon 02 Jan 2023 02:15:00 +0000
ROA not before: Mon 02 Jan 2023 02:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.175.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 28 Jan 2023 11:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:bd:5e:1e:fa:52:9d:d9:a8:41:72:b7:a7:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492eb8f6f06f21024a8bc068616df2fabf1218f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:08:87:a4:e0:ce:01:d5:99:8e:91:ce:20:03:
89:48:ef:74:e4:d7:00:2a:09:27:27:5c:ea:0a:3b:
00:75:4b:a9:cd:71:aa:05:ec:5f:00:47:c5:1d:bb:
00:f5:f8:be:96:c4:a4:d7:89:b8:f7:7b:6e:dc:72:
43:db:4e:26:6e:ed:23:a5:5b:21:b2:5d:62:9e:14:
15:50:22:7d:ec:72:82:32:ec:0e:27:80:a9:9c:bd:
72:ba:a5:2a:50:13:eb:89:3c:a2:89:36:fd:6c:2d:
68:36:de:5a:e1:c7:ca:8c:c3:28:fb:42:4f:fc:3e:
4a:cb:63:72:f0:21:6f:df:6a:be:82:ae:28:1c:0c:
f6:fc:d8:f6:4f:94:1c:c6:2b:ad:4a:56:7c:96:27:
d2:0e:6e:e5:a1:3b:40:9f:2c:11:94:93:db:d8:ce:
2a:b7:a4:3a:87:a6:b9:b3:db:e4:d1:03:5f:46:6d:
a9:b8:c3:62:35:f7:cd:ea:12:81:a0:9d:8c:9a:de:
8a:fc:40:22:0b:d6:63:bd:e2:86:54:90:5a:f2:3e:
72:74:a1:a9:3c:9f:2e:a3:f1:fe:66:8e:9a:2b:22:
1e:ce:1d:5a:71:52:0b:2e:ad:77:4f:75:95:25:6f:
99:dd:fe:7a:c5:aa:76:dc:0e:fa:18:09:10:fc:c8:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:B8:F6:F0:6F:21:02:4A:8B:C0:68:61:6D:F2:FA:BF:12:18:F2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SS649vBvIQJKi8BoYW3y-r8SGPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.175.0/24
163.5.195.0-163.5.196.255
Signature Algorithm: sha256WithRSAEncryption
28:a6:11:8d:f8:62:e7:86:f2:c1:cd:26:60:20:18:86:32:10:
f8:1b:b7:69:20:6c:bf:2a:f8:2b:0c:c0:83:d0:37:70:51:6c:
91:b0:6a:1a:a6:25:2d:d4:de:c7:67:cb:fb:61:3b:4a:5a:73:
4f:2c:92:fd:88:01:e9:22:17:b7:76:cf:aa:48:43:dd:d9:9d:
db:b6:c3:8d:5d:75:7c:36:4e:7d:42:eb:2d:19:23:0c:d6:31:
a6:82:cf:ea:09:8b:2a:bd:87:ed:46:4c:89:69:01:d8:8b:70:
f3:cc:99:37:36:38:93:fb:7a:7a:42:bc:b6:a3:45:c0:57:b7:
08:94:07:b4:f6:14:8f:e3:25:2f:70:df:75:83:2b:9a:7c:a5:
2a:10:0b:cd:4c:cf:81:00:ef:c2:f7:c5:29:f7:ba:f4:86:cb:
41:57:4a:80:04:c3:e6:c7:1b:1c:38:bb:e3:db:a1:1a:b3:e9:
b0:ed:72:76:ef:cb:c5:6b:bc:ef:8b:7a:a5:8a:a6:ea:3c:02:
76:00:e6:8d:81:64:5f:ee:61:37:c0:b5:32:b7:65:df:1f:76:
68:97:ac:4d:a9:4b:4d:5d:f2:b9:86:6f:a7:6f:45:5c:3f:14:
58:38:0c:64:d6:0d:e0:b8:55:05:0e:6f:31:43:9e:b7:c7:9d:
5b:67:e0:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:32 2024 by rpki-client on console-ams.rpki-client.org