Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TuqNmQXUNTL_-MUwaZnMj4BsIUs.roa
File: TuqNmQXUNTL_-MUwaZnMj4BsIUs.roa (raw, json)
Hash identifier: LayGA3tJhPjCcUnUJwYBpGript1ySNTQ6mbwYkvjlvE=
Subject key identifier: 4E:EA:8D:99:05:D4:35:32:FF:F8:C5:30:69:99:CC:8F:80:6C:21:4B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186D081CE6E4FF3DE4BD24867B6D3ACE920
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TuqNmQXUNTL_-MUwaZnMj4BsIUs.roa
Signing time: Sat 11 Mar 2023 11:50:13 +0000
ROA not before: Sat 11 Mar 2023 11:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 163.5.171.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:81:ce:6e:4f:f3:de:4b:d2:48:67:b6:d3:ac:e9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 11 11:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4eea8d9905d43532fff8c5306999cc8f806c214b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:05:27:ef:13:8f:fe:29:89:03:3b:97:c9:e5:
37:69:f7:76:4b:99:09:43:c8:ad:2a:03:41:ee:28:
5e:64:58:40:9b:a1:36:ce:3a:ba:7d:af:22:de:eb:
35:be:e5:29:20:02:6e:c0:74:c6:86:56:bd:3b:bd:
b6:06:74:83:bd:ea:0a:bb:2f:fa:0c:43:e2:b7:cd:
6e:76:06:e0:c1:89:03:34:10:c3:c6:24:aa:84:31:
d4:8f:4a:5c:9f:33:56:67:fa:e7:b7:b9:36:87:22:
0b:5e:a5:a3:33:a1:89:51:c4:a5:40:3c:70:dd:fd:
72:c1:d9:f0:43:43:84:fa:fb:5f:f2:d0:3c:f9:b2:
62:2c:fe:1f:92:56:2e:c5:04:7f:93:30:be:d4:4b:
d4:15:7d:9a:dd:22:fe:9f:aa:c5:1a:44:f1:6b:5e:
d2:42:7d:93:18:f9:11:d2:cd:aa:55:67:c3:18:00:
89:f8:00:72:60:2e:74:8b:cb:20:06:4d:84:36:40:
83:04:b3:02:5d:05:40:50:2d:46:26:fd:33:64:4b:
07:7f:62:0c:13:38:64:bf:9e:46:ae:a4:c2:63:42:
94:13:5a:75:81:19:5c:25:14:43:df:33:f5:fb:f4:
e2:9b:b3:e3:bf:80:a8:f7:58:34:8b:ce:42:85:01:
ac:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EA:8D:99:05:D4:35:32:FF:F8:C5:30:69:99:CC:8F:80:6C:21:4B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TuqNmQXUNTL_-MUwaZnMj4BsIUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.171.0-163.5.172.255
Signature Algorithm: sha256WithRSAEncryption
59:8d:38:9b:78:65:d1:e0:b3:88:99:2f:20:1b:db:52:2c:94:
72:54:fc:77:58:e9:26:02:19:e0:43:55:cf:72:da:8e:cd:65:
25:bb:ac:51:a6:e4:33:c0:0a:f2:e2:da:be:5b:8a:07:4d:f3:
f0:1e:04:6a:33:41:9f:1b:cc:14:32:50:38:97:15:50:29:3e:
6e:6f:2e:00:18:09:5b:72:5a:c7:e6:55:e6:4f:3d:c8:ca:3e:
07:72:d2:00:e2:8c:56:3f:d8:e0:4a:d9:f2:c9:1c:4e:18:8b:
af:36:02:4c:50:0c:c5:49:f5:65:9e:59:46:31:b7:d7:5f:bb:
68:5f:00:5c:29:27:54:b0:d4:04:56:dd:14:17:39:8e:e0:18:
fd:56:08:8a:3d:1d:d3:8a:ce:75:1d:fc:d6:28:f0:91:77:18:
61:7e:55:2c:c8:db:ee:57:cf:ad:d9:7d:5a:5a:73:85:3b:3a:
b7:47:1a:fc:00:07:ce:a3:78:ed:76:c7:ec:c3:fd:f5:7a:83:
d1:ce:d2:47:4a:8f:70:51:9d:ca:aa:71:e6:39:7d:38:b2:82:
4b:d4:24:ba:7a:52:59:5c:be:8a:c9:5f:61:c5:29:73:ea:92:
eb:7b:7b:cf:df:75:0e:f6:03:03:be:49:26:db:91:46:3c:28:
a1:7e:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org