Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XIb-76KAAMJCcsrzTbwNNp9Rur8.roa
File: XIb-76KAAMJCcsrzTbwNNp9Rur8.roa (raw, json)
Hash identifier: 8wiJoZLjPH5NZ4YyW63izC7dGIjTaHy0QhAqgaa0ux4=
Subject key identifier: 5C:86:FE:EF:A2:80:00:C2:42:72:CA:F3:4D:BC:0D:36:9F:51:BA:BF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B022ED002F049828A61B6B66EB770F3AE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XIb-76KAAMJCcsrzTbwNNp9Rur8.roa
Signing time: Thu 05 Oct 2023 23:31:44 +0000
ROA not before: Thu 05 Oct 2023 23:31:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49434
IP address blocks: 163.5.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:2e:d0:02:f0:49:82:8a:61:b6:b6:6e:b7:70:f3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 5 23:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c86feefa28000c24272caf34dbc0d369f51babf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:b9:53:87:22:07:b3:fb:fb:95:e0:b3:66:
8b:3b:70:61:a8:25:88:2c:bc:2d:e5:9c:a6:7f:e4:
94:cc:1f:df:25:64:1a:2c:e3:05:f4:b2:05:45:58:
08:74:b6:8f:cb:08:49:ae:5d:ca:31:b5:a2:1b:b6:
5b:b9:f3:79:b1:f0:c0:3c:08:0b:66:8e:50:24:c6:
b0:71:9e:e4:3d:da:55:af:b3:99:5c:d9:35:95:6d:
5a:94:96:81:8b:f2:04:84:62:a8:63:6f:51:10:e2:
ae:69:03:df:1d:e4:4a:dd:12:ce:35:72:77:dd:bc:
82:f3:c1:79:ac:e4:74:3a:62:ac:be:ed:a2:ee:4a:
0a:5a:d9:59:e3:6a:2d:30:1e:98:52:40:e6:ef:fa:
8d:83:ac:85:13:ad:73:42:9a:c8:e3:ed:59:9e:81:
e2:22:ce:44:5b:64:6e:4f:20:a4:6c:e3:4e:f4:7b:
b4:a3:e4:af:e0:34:1f:f1:45:fb:2d:34:98:8f:f8:
1b:c4:a1:b8:99:02:27:1f:0f:0d:ec:70:b1:77:37:
f5:31:e5:29:56:78:5e:9d:54:8a:9f:cc:1d:30:d9:
96:4b:71:eb:c1:b3:d3:52:0a:d4:06:cf:4f:5a:b3:
37:9f:33:0d:4e:35:9f:d8:c5:ac:ca:4a:77:c8:64:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:86:FE:EF:A2:80:00:C2:42:72:CA:F3:4D:BC:0D:36:9F:51:BA:BF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XIb-76KAAMJCcsrzTbwNNp9Rur8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
26:fe:57:56:a2:24:54:78:df:b3:69:1b:6b:c4:90:61:10:3a:
14:10:d1:3a:aa:4b:57:8d:17:c7:6b:97:10:6b:78:17:f4:12:
ce:e4:a9:50:15:b2:f2:86:40:b3:4f:cd:43:c9:1e:dd:81:d8:
36:cd:0f:7e:3a:2c:b4:98:30:e0:dd:a2:35:ca:b0:66:4c:99:
4f:3a:2e:86:19:03:8d:20:cd:9d:19:2c:98:06:14:f1:29:a4:
f9:ab:86:15:08:ff:61:10:5c:bf:89:52:f5:1c:af:10:9b:e4:
dd:a3:6f:fe:8f:7d:c0:ce:fc:d6:f6:47:d2:d2:ac:6f:e2:68:
02:cd:59:2e:fc:33:fd:69:f6:85:5b:38:0c:90:ee:8f:b1:e6:
d4:df:de:29:4e:53:b1:ab:61:ce:6e:d3:22:65:5c:9a:39:82:
4b:d5:31:15:9a:b1:2d:8b:88:64:03:d1:52:97:fb:07:de:38:
e9:16:e4:5d:a7:83:1c:99:1f:19:27:db:45:c1:74:1f:e8:83:
e0:18:99:1e:41:cc:47:e1:31:59:26:8d:f1:ab:c7:79:4a:54:
b7:02:6a:ac:76:3c:33:e1:04:18:37:7f:40:aa:e0:f3:f8:0a:
5d:b5:c1:13:61:27:d4:7f:1f:7e:3b:9d:f9:34:61:c7:07:9a:
80:ed:39:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org