Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/URRDeC69uXj_a5Ogfrpdo7P9zzY.roa
File: URRDeC69uXj_a5Ogfrpdo7P9zzY.roa (raw, json)
Hash identifier: rk+fTw3eZXHiT9nBpvM7MKcCYF++DL7xCJSEeNJBkHM=
Subject key identifier: 51:14:43:78:2E:BD:B9:78:FF:6B:93:A0:7E:BA:5D:A3:B3:FD:CF:36
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185868EC628A66FF6EE54D4F1BA1976C3D6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/URRDeC69uXj_a5Ogfrpdo7P9zzY.roa
Signing time: Fri 06 Jan 2023 10:09:41 +0000
ROA not before: Fri 06 Jan 2023 10:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 163.5.105.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:8e:c6:28:a6:6f:f6:ee:54:d4:f1:ba:19:76:c3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 6 10:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=511443782ebdb978ff6b93a07eba5da3b3fdcf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:dd:7f:25:4f:dc:bc:fc:c4:db:27:76:44:34:
10:46:ef:d2:1f:32:6a:cf:49:7b:46:76:28:e8:d4:
fb:c1:41:e1:b6:44:88:31:ff:ed:00:ec:a1:24:27:
f4:89:b0:29:b2:ed:18:7d:1e:be:23:c6:79:65:27:
3b:8b:96:72:c2:05:e7:5a:7d:f6:cc:52:0e:58:35:
05:dc:f5:f6:b1:2a:e6:fa:d3:20:f0:6e:bb:77:42:
08:08:e4:f8:2f:ac:6d:7b:66:59:b2:a0:a1:c4:f4:
53:72:1f:ae:bb:5e:b0:ea:ae:7a:6f:d8:7a:16:88:
23:30:90:16:42:96:0a:ca:3a:80:8e:d5:5e:da:57:
6f:ab:00:9c:ba:ad:d8:a0:43:8c:8f:33:b7:f3:64:
60:cf:ea:72:73:15:3f:cd:4e:77:89:e8:2f:8c:49:
d4:41:bb:e0:cc:fc:7f:e9:e2:4b:03:e4:40:d6:8e:
16:af:73:11:f8:af:f9:1b:7f:4d:32:2f:2a:65:dc:
49:36:09:de:0e:98:36:b6:cc:39:1b:be:5e:8d:08:
cb:79:64:1c:da:74:31:20:a9:77:4c:9f:3e:e8:ae:
7e:ac:8e:0f:38:b1:b0:03:76:e9:ad:1d:a7:24:9f:
de:78:bb:4c:bb:9d:c5:73:06:c2:9b:cb:2a:c3:76:
6a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:43:78:2E:BD:B9:78:FF:6B:93:A0:7E:BA:5D:A3:B3:FD:CF:36
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/URRDeC69uXj_a5Ogfrpdo7P9zzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.102.0/24
163.5.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:00:fa:f4:31:35:34:ca:aa:35:a0:8e:9b:19:cd:9c:b6:34:
99:ff:93:b0:5d:45:c4:68:12:3b:03:a1:a9:5a:83:f7:f8:e2:
07:41:78:ab:0e:50:07:65:7d:2c:03:e7:5b:7a:47:74:83:bb:
68:2f:a8:83:aa:f3:b8:0b:6b:01:cb:ce:ee:83:1c:03:2c:40:
ed:9d:a4:73:f7:ae:2b:b6:e8:04:64:76:88:bc:6f:e7:d5:51:
99:26:87:af:f5:53:6d:7b:a0:79:9f:d2:83:1b:cd:56:00:ab:
c4:6d:70:4a:07:a6:ff:bf:d5:5c:5a:10:2e:df:88:34:b0:b9:
34:ad:9f:83:e4:32:57:d3:d4:6c:26:e7:24:88:cd:ec:dd:92:
f7:03:54:83:8b:8d:58:a5:a0:88:22:5a:40:cd:20:70:3f:dc:
71:00:83:6f:9d:83:05:4a:37:df:1b:d1:10:a8:3e:cd:a5:8f:
f4:36:89:50:99:6c:10:ae:92:70:e8:fe:9f:ad:b3:c1:42:7b:
21:40:44:28:de:60:85:1c:e8:64:eb:b6:a1:7f:00:1e:f9:21:
4a:d4:19:de:84:91:94:44:44:e5:8c:d9:20:05:21:42:18:0e:
a9:0c:af:55:a2:18:7e:09:f2:84:02:be:04:b1:4d:5c:0d:1c:
2c:12:77:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org