Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZFFVRp9qLOf_5hPeiRjur4Z8D1U.roa
File: ZFFVRp9qLOf_5hPeiRjur4Z8D1U.roa (raw, json)
Hash identifier: YnRv4m7I3YNTdE6XSXtB6CTFvvmUQ/27LBnywPlV9H0=
Subject key identifier: 64:51:55:46:9F:6A:2C:E7:FF:E6:13:DE:89:18:EE:AF:86:7C:0F:55
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01898E7EE3DEBC88C9AFAEB751F9874FDC4E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZFFVRp9qLOf_5hPeiRjur4Z8D1U.roa
Signing time: Tue 25 Jul 2023 19:20:27 +0000
ROA not before: Tue 25 Jul 2023 19:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 163.5.177.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:7e:e3:de:bc:88:c9:af:ae:b7:51:f9:87:4f:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 25 19:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645155469f6a2ce7ffe613de8918eeaf867c0f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:fc:67:29:b7:0f:17:77:b3:d7:5d:36:fa:
5f:a4:ab:57:c1:86:af:dc:43:29:62:c8:10:4a:cb:
e3:53:0f:3e:9e:9b:62:77:85:0a:6d:55:c0:1e:ce:
20:51:fc:3e:af:6a:ed:f6:3e:95:e1:8f:14:3d:ac:
4b:7a:5f:41:a9:d2:b4:12:02:32:38:79:45:2b:dd:
57:77:d6:57:15:64:e4:a0:01:4c:44:14:16:12:ad:
b4:b9:3a:6d:56:4a:87:99:2a:e7:af:bc:f9:47:bc:
7c:dc:c2:b7:3e:8d:34:5c:8b:35:bd:f3:2c:86:3f:
42:5c:eb:29:7e:d9:c0:d5:d7:e1:a4:56:30:23:dd:
00:d7:d7:70:65:f2:8f:5f:a6:54:dc:4e:e9:e9:45:
f7:f5:a0:1b:b0:7b:36:75:b0:d7:c9:45:3e:0a:01:
ca:da:c9:74:56:ea:65:4d:e9:6c:05:1e:8f:4e:38:
ca:cb:b5:8c:e2:51:6c:e2:8b:b9:69:12:dd:a6:d6:
23:bb:3b:20:25:f3:43:6e:c0:e5:c9:20:c0:34:f6:
f8:48:a7:83:75:1c:1b:86:3c:ee:3f:49:0b:49:6b:
2c:9c:17:ef:9a:d3:4a:1e:6a:70:93:a4:b6:17:9f:
2b:57:3e:d5:ef:17:8e:c0:ed:82:f7:ba:e6:7b:2d:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:51:55:46:9F:6A:2C:E7:FF:E6:13:DE:89:18:EE:AF:86:7C:0F:55
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZFFVRp9qLOf_5hPeiRjur4Z8D1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.159.0/24
163.5.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c9:ad:eb:79:30:0f:b0:55:12:57:6b:53:3d:6c:24:54:cd:
58:41:33:9c:bc:ed:d2:04:3c:60:d0:60:d3:b3:db:61:ee:14:
19:ff:95:8d:82:69:20:aa:72:3b:05:88:20:55:48:a0:dd:6c:
89:8a:fb:12:e1:06:0a:52:9c:3b:d1:16:a8:28:c1:ac:fb:81:
d7:f0:3a:80:e3:7c:26:d1:7e:17:33:1b:a3:97:80:71:3b:95:
a3:e3:32:dd:5b:9b:63:6b:1f:91:44:67:02:e1:de:ef:31:b3:
0f:9f:a7:37:b2:8e:49:38:c1:89:19:30:3f:49:2d:c2:94:3d:
16:10:c8:19:3d:9b:3d:cf:e0:d0:3b:57:d7:bd:b6:2b:fb:0b:
73:ee:6b:a9:cc:89:c7:83:53:7e:30:18:1d:e4:72:bb:8a:e1:
2b:b4:55:d2:a3:6d:2e:bb:0c:01:2c:02:8f:70:9e:c3:e9:e7:
a8:45:20:4d:07:69:1c:1b:a0:ae:b7:69:26:b6:2c:51:f9:a3:
9d:cb:f4:e7:7c:e6:bc:1f:47:af:31:0c:77:bd:a2:70:88:3e:
b7:f4:4b:18:ee:b5:5d:bf:91:32:f3:d3:e7:56:0b:c2:cb:f2:
56:67:1b:31:39:90:8e:1d:91:75:78:18:fa:12:76:2d:a9:7d:
52:2b:bf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 28 10:18:30 2023 by rpki-client on console-fra.rpki-client.org