Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SU4vqusrWflOT9rk88YWXDLbhuY.roa
File: SU4vqusrWflOT9rk88YWXDLbhuY.roa (raw, json)
Hash identifier: Oh9DWMK/n2TIV+cCpv/EPMspy67UPcfYhYTBvTisOf4=
Subject key identifier: 49:4E:2F:AA:EB:2B:59:F9:4E:4F:DA:E4:F3:C6:16:5C:32:DB:86:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01898E7C236BDB17E07739046F38F264388B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SU4vqusrWflOT9rk88YWXDLbhuY.roa
Signing time: Tue 25 Jul 2023 19:17:27 +0000
ROA not before: Tue 25 Jul 2023 19:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:7c:23:6b:db:17:e0:77:39:04:6f:38:f2:64:38:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 25 19:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=494e2faaeb2b59f94e4fdae4f3c6165c32db86e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:81:c6:ee:0f:b0:0e:d8:bd:30:01:85:42:b8:
cd:da:d1:4b:20:b4:48:11:1b:0f:e8:f3:51:5e:58:
f6:92:f1:39:46:58:4b:c7:c1:da:71:09:76:f2:d1:
d6:d3:61:74:d8:1c:da:3e:56:4d:29:e6:96:19:1d:
93:a5:84:6c:a1:96:fa:57:ca:d6:3c:b1:42:7a:20:
b1:15:7c:ad:4e:50:d3:3e:8c:24:45:5f:ff:cf:b8:
d6:13:99:16:de:e6:63:d7:8a:89:f1:15:82:11:61:
5b:90:c3:96:aa:98:62:06:53:45:e3:ec:f9:43:da:
b7:bc:9d:02:1d:3e:5e:4d:f3:a7:92:8e:47:73:62:
6f:14:09:5a:b5:a1:dc:a9:0c:14:fb:96:f7:aa:df:
64:94:45:10:72:a3:e9:45:fe:a4:7f:50:99:6c:96:
b4:b8:53:8c:0e:65:f3:12:44:df:84:a4:78:3d:3b:
da:fc:1d:66:42:84:ae:cf:d4:52:13:51:38:82:8e:
ad:37:f3:4c:7d:b8:d7:ee:3e:64:dc:7f:0e:a3:dd:
06:63:06:72:dc:9b:66:11:38:1e:f7:70:0b:9c:6c:
64:62:98:dc:30:73:26:dd:15:c3:71:b5:ea:a4:0d:
5b:21:8b:3a:93:42:72:c8:49:a1:a4:26:fb:bf:7a:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4E:2F:AA:EB:2B:59:F9:4E:4F:DA:E4:F3:C6:16:5C:32:DB:86:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SU4vqusrWflOT9rk88YWXDLbhuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/23
163.5.95.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c9:4b:c3:88:09:d6:2b:9d:dd:69:a7:14:ad:b6:32:b0:aa:
34:c4:10:f8:01:6b:27:ce:13:0a:50:7c:9d:27:85:d8:4b:e0:
78:b9:d6:5d:57:a9:23:7c:f3:8f:0a:5d:cf:f7:a5:a5:d0:18:
06:25:60:28:55:0b:89:f3:b6:05:47:7a:7e:2c:0e:40:6b:2b:
40:4e:1b:bb:5b:e2:47:d2:41:5a:17:4d:2a:b9:45:18:03:1e:
50:eb:23:37:b3:84:ca:16:bf:39:01:fd:93:ba:59:54:7d:9f:
ae:6f:83:66:9a:b4:26:e2:7a:09:35:39:f7:b5:0b:40:53:f2:
71:b5:47:a3:c0:d8:78:c7:60:5e:06:d7:d4:c2:66:b9:80:2a:
29:19:41:91:2b:c8:e1:2f:ef:43:7d:1a:91:d0:d5:51:02:13:
69:5b:87:a6:5c:f6:af:d2:7a:f7:43:91:bb:71:d8:45:db:1c:
e8:4b:50:0f:09:36:f4:74:98:6e:85:c2:a9:7d:5e:b8:cf:f2:
be:0a:e3:37:4e:38:98:e0:2c:23:3b:4d:b5:74:98:95:1d:0e:
0f:e6:4e:09:5b:4e:a9:09:83:88:40:01:08:91:46:44:a9:f3:
e1:02:2d:4d:e3:a7:44:80:c9:79:73:5f:8c:ff:2c:66:26:51:
03:c9:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 18:25:33 2023 by rpki-client on console-ams.rpki-client.org