Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U5K0AyrhathWei7C06m0fUSZr08.roa
File: U5K0AyrhathWei7C06m0fUSZr08.roa (raw, json)
Hash identifier: T0jFL7mQYxAsm6gzLKNxfEtL9CTLXvSslqmzXmd67hM=
Subject key identifier: 53:92:B4:03:2A:E1:6A:D8:56:7A:2E:C2:D3:A9:B4:7D:44:99:AF:4F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188147A74A1FB62DFB8B3BD1DB7A7759D02
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U5K0AyrhathWei7C06m0fUSZr08.roa
Signing time: Sat 13 May 2023 09:39:09 +0000
ROA not before: Sat 13 May 2023 09:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 163.5.206.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:7a:74:a1:fb:62:df:b8:b3:bd:1d:b7:a7:75:9d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 13 09:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5392b4032ae16ad8567a2ec2d3a9b47d4499af4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:7a:b5:2f:10:e3:b1:88:57:a7:ab:59:7f:
89:95:21:c8:65:b9:eb:be:97:82:68:3f:7c:32:7c:
0c:78:1b:e0:e5:89:68:fb:89:d1:3c:14:8b:fd:e6:
70:45:eb:0a:92:3e:4a:1e:2e:eb:3d:04:0a:0a:c4:
e1:c0:f2:59:38:07:e9:9c:9a:ec:06:3e:ff:59:b0:
8c:bc:bf:e7:72:2d:7f:75:28:a1:8d:3d:81:47:b1:
a3:82:6f:ef:90:dc:f5:69:d3:31:52:e7:e4:46:19:
cb:92:66:1c:69:c7:3b:4e:63:8a:b4:b2:3c:78:73:
dd:77:b8:1b:9a:e5:ea:7d:a0:ae:fc:15:d0:fa:f5:
80:34:17:5e:60:fd:bd:18:e3:65:20:c1:e2:5e:2f:
70:29:7a:f6:c7:8b:82:dd:0f:c9:a3:df:c7:c1:e2:
fd:42:45:eb:6a:a6:9d:87:08:4b:28:41:a5:52:4d:
32:aa:22:5f:d5:f4:e9:d5:47:95:59:07:97:d2:38:
dc:c4:63:43:12:3d:f2:1b:37:0c:2f:2b:61:1a:e8:
da:0c:bc:35:83:b4:68:a4:e4:40:19:d5:9d:a0:4b:
1a:4c:db:73:0c:21:d1:5b:4b:44:d6:97:ca:ea:73:
e5:2c:41:f1:e1:24:19:67:bb:d5:23:c4:49:9f:89:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:B4:03:2A:E1:6A:D8:56:7A:2E:C2:D3:A9:B4:7D:44:99:AF:4F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/U5K0AyrhathWei7C06m0fUSZr08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0-163.5.156.255
163.5.206.0/24
Signature Algorithm: sha256WithRSAEncryption
96:73:e4:b6:31:4d:e0:55:e5:6f:b6:af:27:33:05:b3:b1:6e:
25:44:31:a8:af:da:f2:2a:0b:b8:ab:da:f1:b1:87:e1:60:d8:
0f:56:66:e0:21:4a:3f:bc:e3:40:8e:48:7e:c2:1b:62:97:80:
80:0a:a5:09:4f:1b:6b:50:f5:73:d7:34:67:7b:32:ff:b0:71:
59:22:8e:d9:5e:89:7a:2f:ba:44:a7:a7:8e:5b:d8:6e:16:50:
d2:77:1a:d1:40:f0:90:94:19:0f:92:68:6d:06:b0:b2:ba:01:
20:45:ed:74:2b:42:cb:e3:ca:66:2c:de:4c:e6:c0:52:9e:32:
a5:2b:36:b8:98:ef:52:fa:67:75:e2:b1:40:8b:dd:0d:d0:34:
66:80:e9:f3:69:ee:a6:a3:0f:27:94:40:f5:96:ad:9a:e0:17:
b7:85:ab:c1:7b:00:94:bf:02:fb:8e:ce:df:75:93:da:fa:ef:
2f:06:27:e3:12:b8:03:0b:83:8e:3c:e1:02:e7:f3:a0:b2:49:
2e:e0:15:da:17:cb:66:38:76:b1:da:06:ca:e9:91:22:67:7c:
e2:ac:0a:25:d5:c7:68:3c:6c:cd:98:6d:a9:10:81:44:2c:35:
85:54:37:ac:08:22:43:09:fd:6f:90:4c:ad:a4:af:71:21:02:
e5:d1:ca:a5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org