Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VcP2VR65u09jM26Cgq9j0FPwDGA.roa
File: VcP2VR65u09jM26Cgq9j0FPwDGA.roa (raw, json)
Hash identifier: e57S3PlvvwjLj/oPAEPZfp2LJizTUXrYWTm49jH3Gmc=
Subject key identifier: 55:C3:F6:55:1E:B9:BB:4F:63:33:6E:82:82:AF:63:D0:53:F0:0C:60
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C5FA03DF2ACD1F2A8B8A190B609323D2D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VcP2VR65u09jM26Cgq9j0FPwDGA.roa
Signing time: Tue 12 Dec 2023 20:03:06 +0000
ROA not before: Tue 12 Dec 2023 20:03:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205663
IP address blocks: 163.5.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5f:a0:3d:f2:ac:d1:f2:a8:b8:a1:90:b6:09:32:3d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 12 20:03:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55c3f6551eb9bb4f63336e8282af63d053f00c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:31:c0:16:d4:f9:72:ee:04:9d:4e:c5:71:e7:
4c:c7:41:3c:00:cf:1a:11:c6:65:d4:ee:9b:ce:9a:
38:58:4a:c5:db:6d:e6:1d:30:08:bf:9e:d6:2d:e3:
6e:61:5a:e2:3d:15:22:56:aa:fb:56:4f:48:6a:74:
55:2c:b0:27:29:95:44:0b:44:01:13:a8:04:08:0f:
f2:40:27:1a:fe:7d:b5:b4:92:d9:0f:b7:2c:8b:b2:
f2:0c:48:48:78:5e:7a:b1:4a:d3:2b:39:da:20:6b:
1a:dd:6d:a3:de:8d:64:ae:cf:e1:25:6b:b2:96:0f:
e3:fd:83:10:ed:14:5c:e6:62:da:5f:fd:2c:c1:c3:
e8:fb:4b:51:9b:f1:b0:a8:f5:27:d2:99:a2:19:7c:
6c:63:76:c2:cd:4d:9b:86:cc:0b:ea:b3:b9:de:c9:
8d:cc:26:dc:dd:c0:09:a9:cc:d2:f1:5b:63:d0:8f:
aa:49:d6:56:7e:86:f4:31:3e:66:76:f8:07:9c:16:
69:e9:33:8b:0f:34:d8:12:53:7e:e7:86:85:b9:68:
4c:a6:bf:de:57:57:c3:8a:90:e6:dd:c4:4d:ec:99:
67:25:55:89:4b:40:5c:93:d4:b9:97:5d:0c:68:01:
f0:45:2d:8b:b7:7f:b0:7b:98:29:e0:2b:a2:a6:69:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C3:F6:55:1E:B9:BB:4F:63:33:6E:82:82:AF:63:D0:53:F0:0C:60
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/VcP2VR65u09jM26Cgq9j0FPwDGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.176.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:ae:9c:68:11:43:8a:f9:9c:b2:54:e3:66:6a:3f:74:34:b1:
22:6c:cc:2a:1b:35:c1:92:14:9f:ca:e0:47:14:00:78:6d:26:
49:bf:df:84:ba:93:b0:ea:4b:8d:22:ce:89:f7:57:6e:18:44:
ed:2a:87:78:d8:9e:25:94:a7:8e:84:36:d6:38:85:87:67:d1:
c8:b2:63:21:73:7f:fd:e6:f6:be:ff:d9:0b:34:99:ed:93:c6:
a6:18:06:7d:e6:cc:20:a2:13:03:4a:20:17:54:52:83:a0:d8:
ad:a3:ea:17:15:f4:56:8f:d8:3c:ef:d5:02:74:7c:ea:1e:7c:
16:f7:9c:6f:f9:7f:71:e4:fd:5a:57:f8:44:a7:6f:c4:b4:55:
ba:02:a7:ef:ad:2b:64:0c:9d:31:41:10:1c:f1:71:2b:85:9a:
3e:d9:82:3f:46:58:29:8b:1c:db:e1:4e:b2:35:0e:d0:5e:e6:
e8:cc:c1:a3:66:b4:af:36:47:b2:b8:3f:23:5f:4f:d3:0b:8f:
6e:d6:09:bf:61:09:52:aa:99:17:f0:ae:f8:c9:21:01:76:45:
98:42:58:d8:6e:5b:0b:ac:c5:64:58:83:fb:9a:55:b0:50:04:
1c:eb:1a:af:53:a1:06:fc:8b:ca:3d:0d:e1:72:2f:d1:3d:31:
35:2a:6c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org