Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T_cM6QHVBOaPxVtgzWMh01HbXTo.roa
File: T_cM6QHVBOaPxVtgzWMh01HbXTo.roa (raw, json)
Hash identifier: IokNavz0pQ118NFgfAda8D0QoOMhl1ZPrILJE3dEaeE=
Subject key identifier: 4F:F7:0C:E9:01:D5:04:E6:8F:C5:5B:60:CD:63:21:D3:51:DB:5D:3A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B5F74196DF9E8D0E91D335FE60AC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T_cM6QHVBOaPxVtgzWMh01HbXTo.roa
Signing time: Mon 02 Jan 2023 02:14:58 +0000
ROA not before: Mon 02 Jan 2023 02:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 163.5.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b5:f7:41:96:df:9e:8d:0e:91:d3:35:fe:60:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff70ce901d504e68fc55b60cd6321d351db5d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:1b:b3:5a:38:f0:75:73:b6:bb:87:b7:52:
5a:82:38:d7:dd:da:4c:8e:44:46:08:26:b6:52:82:
d5:a4:be:3e:3a:23:a8:d4:91:7b:f7:e9:f6:37:f4:
91:72:93:56:c1:68:d2:0c:d5:0b:42:9e:af:57:26:
59:c5:46:a6:4e:20:fb:5c:f4:56:b1:18:41:3f:6b:
a1:81:62:df:13:25:ae:f0:5d:9d:36:7a:15:70:75:
66:1d:d7:44:c2:98:8e:e0:e7:cb:7a:99:68:ed:aa:
f7:4e:4c:9e:53:3d:1b:47:82:3d:97:6c:95:fd:58:
08:09:ab:9f:91:db:c5:1b:59:0f:47:e2:95:5d:0b:
4d:3d:1f:b5:20:5b:b6:c2:eb:68:05:0b:1e:28:4e:
b2:09:22:e1:ba:dc:a0:e3:02:62:23:7c:8d:90:30:
17:cc:ef:6e:e7:d4:eb:32:dc:14:82:97:41:99:54:
12:bf:4c:dd:24:cd:b6:19:c5:cc:07:dc:06:80:7c:
fc:15:7d:79:cc:14:0f:a0:b8:50:ab:5e:35:56:8f:
f3:04:bb:3c:5b:7e:b0:9c:c5:53:29:21:25:0c:7f:
a2:7c:94:fd:c7:e3:74:b4:5c:62:14:ae:e5:a0:01:
e2:e2:c2:94:30:d0:11:08:b1:be:c0:41:37:06:30:
ff:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:0C:E9:01:D5:04:E6:8F:C5:5B:60:CD:63:21:D3:51:DB:5D:3A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T_cM6QHVBOaPxVtgzWMh01HbXTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.151.0/24
Signature Algorithm: sha256WithRSAEncryption
68:84:50:57:b9:86:cf:54:b7:43:7c:60:28:31:c1:37:9d:d8:
11:d8:42:91:47:f4:c5:1c:04:f0:0e:f7:04:e3:2d:de:c0:ae:
3e:fc:92:a7:7c:8f:38:4f:30:32:83:71:b8:88:d9:f1:0e:78:
d3:67:c9:1b:60:8b:d4:46:11:4a:1b:ec:e6:5c:98:2b:80:0d:
4c:89:5c:75:5e:07:b9:8b:f7:ca:3e:dc:df:33:80:62:35:65:
bb:84:41:57:ad:8f:19:d4:57:37:1e:b5:5f:77:b6:fe:9b:94:
ea:d3:50:d2:75:7a:8b:cc:2f:3e:cd:7f:08:e5:fe:3c:a5:2a:
52:74:7f:73:19:da:d5:49:cc:c1:56:93:5b:2e:fb:1d:e0:35:
88:79:84:35:fa:7b:6a:2e:fe:15:e6:d6:9e:44:bf:31:e8:4d:
ef:80:b6:48:c0:5d:be:1f:79:c5:51:86:98:05:17:65:63:cc:
a6:3d:f1:de:cc:db:b9:b4:cc:a5:d2:02:18:c9:94:92:af:4a:
5e:64:20:e4:96:fe:6a:91:45:82:b6:eb:f7:37:0c:91:90:b0:
7d:6d:e4:d3:4e:61:ab:84:06:90:ba:8f:ed:f4:ae:4b:c5:32:
77:1b:c4:73:1e:8d:11:ab:4e:1e:bd:12:e0:2b:61:15:2f:ee:
48:ba:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 24 15:48:48 2023 by rpki-client on console-fra.rpki-client.org