Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WnReyvLJQ0t16j6c6FBdesXmDpU.roa
File: WnReyvLJQ0t16j6c6FBdesXmDpU.roa (raw, json)
Hash identifier: yA9YV9l9biquzaXqbagOuOnKcs84VbF6ZDp81+sDtzo=
Subject key identifier: 5A:74:5E:CA:F2:C9:43:4B:75:EA:3E:9C:E8:50:5D:7A:C5:E6:0E:95
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01881482BE47526B9DC07B903BC46CE9443B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WnReyvLJQ0t16j6c6FBdesXmDpU.roa
Signing time: Sat 13 May 2023 09:48:12 +0000
ROA not before: Sat 13 May 2023 09:48:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 163.5.213.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:14:82:be:47:52:6b:9d:c0:7b:90:3b:c4:6c:e9:44:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 13 09:48:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a745ecaf2c9434b75ea3e9ce8505d7ac5e60e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:75:91:83:4a:21:d1:2e:57:6f:13:ff:52:e2:
b4:c1:78:04:c9:4f:46:0f:c7:06:50:c8:22:41:2b:
17:1b:39:7f:65:15:65:dc:f1:85:93:72:2e:b5:d3:
da:94:7a:66:b9:ba:40:9e:cb:82:2d:44:ae:f5:33:
0b:37:35:0b:aa:07:93:35:b5:c3:ff:78:04:6d:af:
fe:65:3b:30:33:0f:84:60:70:81:23:73:b8:95:0a:
b6:75:43:f4:18:47:e5:f7:03:8d:b4:aa:72:1e:e3:
b5:7f:f1:d7:34:cd:61:64:c7:35:bd:f2:4e:de:8a:
d2:ca:81:bd:61:78:da:6a:5b:5d:f3:4d:3d:df:35:
42:33:75:13:c1:95:23:46:44:1f:18:ff:e2:cc:ad:
76:96:b8:76:c0:9b:31:32:b4:e0:51:15:02:2a:1f:
fc:fd:ab:f2:9f:7f:3d:39:57:f1:f3:68:5c:d4:bd:
e0:8f:53:d0:ba:34:7e:28:46:67:7a:1e:2a:0e:b1:
23:e2:63:14:2c:c9:77:73:9d:c6:34:04:99:3c:ff:
e2:2c:1e:fe:bd:34:e0:f9:e0:28:e9:76:1f:6b:85:
ff:98:96:38:65:25:46:53:5d:a9:6f:1c:54:e8:76:
0e:9c:3a:8a:48:ea:1b:11:f4:16:45:f6:94:d7:62:
57:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:74:5E:CA:F2:C9:43:4B:75:EA:3E:9C:E8:50:5D:7A:C5:E6:0E:95
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WnReyvLJQ0t16j6c6FBdesXmDpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.147.0/24
163.5.213.0/24
Signature Algorithm: sha256WithRSAEncryption
27:da:e6:3d:7f:62:fd:f9:5e:d9:66:02:82:63:19:bf:2b:ad:
96:9a:c2:cc:e2:40:c5:ef:b9:d2:47:3a:12:76:8b:5c:a0:58:
8d:02:a7:48:c8:c7:60:ff:5e:86:0f:fa:28:36:28:ad:40:96:
8f:c6:23:0d:de:32:df:14:d2:e9:72:c3:56:98:c1:36:cc:dc:
3e:3f:01:b7:3e:47:57:af:12:aa:37:72:f7:a6:93:e1:a1:28:
85:bc:ce:68:5e:55:b6:ef:b7:a6:1b:c6:ee:46:b6:a1:b6:9d:
4b:29:a6:c1:55:05:6d:95:55:04:54:9a:70:b4:d1:62:c0:b4:
37:d3:2a:df:f0:35:e9:f3:0b:4b:ef:f3:a2:f1:1e:08:ce:70:
80:86:6e:5f:60:d5:fc:25:e3:2a:d1:ba:41:96:27:aa:8c:71:
9b:73:72:45:25:ca:87:a2:ec:f8:85:22:c3:c4:fb:b5:bb:08:
a3:c9:64:a2:2e:ee:b4:61:71:17:d3:d5:b9:5c:4e:83:91:bf:
b2:ed:27:e7:52:e0:1e:ca:f8:71:8d:61:a0:b9:74:dc:24:76:
d4:93:eb:61:d6:c3:78:85:1e:90:39:92:6b:35:3e:a8:9a:78:
6a:0d:23:85:31:4c:40:58:ba:87:05:ed:9b:3d:39:44:1e:a7:
1e:87:3d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org