Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZJhAYZd3pK23EPVOz3WFSgxGllo.roa
File: ZJhAYZd3pK23EPVOz3WFSgxGllo.roa (raw, json)
Hash identifier: 1Leagv3Ij6v0W1SS0S66ZSMpjxvXduUlPUgLB7Oyuoo=
Subject key identifier: 64:98:40:61:97:77:A4:AD:B7:10:F5:4E:CF:75:85:4A:0C:46:96:5A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01883D34B6327600F4F00F60CD41B19E4A45
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZJhAYZd3pK23EPVOz3WFSgxGllo.roa
Signing time: Sun 21 May 2023 07:27:24 +0000
ROA not before: Sun 21 May 2023 07:27:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198607
IP address blocks: 163.5.239.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:34:b6:32:76:00:f4:f0:0f:60:cd:41:b1:9e:4a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 21 07:27:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649840619777a4adb710f54ecf75854a0c46965a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:a8:ad:45:55:a0:6a:d0:b5:08:2f:cc:37:
63:4d:d9:7a:4b:90:33:f9:5a:d5:aa:50:ec:17:29:
cb:db:3a:52:b7:76:5e:8e:39:7c:02:fe:f1:2a:c0:
ac:0d:16:92:1f:e2:dd:45:71:d6:46:dd:55:5e:05:
95:a3:d5:7f:e3:01:f6:3c:a3:69:b5:b3:21:66:c4:
c4:18:89:9c:fe:ba:d9:16:45:73:33:91:03:67:13:
65:79:65:83:e4:5f:c3:93:e9:7f:c0:5c:d5:03:8e:
d2:cb:26:e1:5f:0c:ce:2d:6d:0d:12:4e:2b:21:ef:
19:62:85:be:00:3c:a9:71:58:a3:2d:70:43:27:fc:
a5:7a:ee:9c:08:44:3e:20:c0:72:10:93:cc:f1:9c:
80:dd:d5:5f:56:66:d3:f6:11:7b:3d:a3:01:15:9e:
f4:3e:6c:b5:56:eb:f1:a8:ee:2c:6d:da:11:1e:58:
cb:7a:f9:db:9b:88:3a:23:5b:61:73:ce:75:59:bc:
d4:80:c7:39:84:df:88:59:99:88:70:51:15:ce:e0:
dc:b0:19:da:78:42:60:f1:61:fc:c0:89:a2:68:af:
58:a5:a6:1e:a5:72:6e:0a:db:b7:96:8f:06:17:8f:
19:03:81:b0:50:29:58:a9:7d:c5:1e:04:b2:82:e2:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:98:40:61:97:77:A4:AD:B7:10:F5:4E:CF:75:85:4A:0C:46:96:5A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZJhAYZd3pK23EPVOz3WFSgxGllo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.158.0/24
163.5.239.0/24
Signature Algorithm: sha256WithRSAEncryption
94:a5:fc:1b:34:32:e8:da:be:17:cb:be:96:17:c6:ad:7d:aa:
32:5d:a1:56:d4:48:51:e8:dd:e7:b0:97:f6:25:7d:c9:20:11:
f3:87:48:21:02:b6:b0:8d:52:08:d1:ba:bc:a7:3d:72:9b:e2:
1d:e4:86:b7:ba:6a:52:1a:75:03:0f:ef:dc:11:96:5d:49:84:
a3:a3:5f:07:5d:5d:6e:fd:5e:fc:6c:ea:a1:0d:78:61:e6:d2:
39:c0:62:a8:1b:a7:99:e1:f3:05:66:95:80:90:0b:d8:99:de:
7c:ce:f6:4a:93:4f:f5:37:fe:33:80:6f:0e:04:d1:d6:d2:11:
14:96:5e:15:b7:7b:cb:84:d0:3f:f6:2f:83:f5:4f:f5:1e:a6:
63:b8:38:f0:e1:2c:31:a3:fb:b7:14:5a:31:ec:14:ac:42:5a:
b2:7a:a1:7a:33:1d:01:0d:b0:8f:72:f2:98:24:df:77:ae:4d:
e5:24:e2:b1:b6:81:8c:3f:f0:d7:99:f5:bf:fb:76:bc:78:97:
13:a6:6a:00:fc:b6:91:bc:f4:8c:ed:fc:d3:7b:fe:2c:04:92:
f9:ac:81:45:96:2d:cc:1b:d8:8f:38:17:4a:e4:31:35:f3:a0:
15:8a:fc:74:4a:63:01:45:a4:e4:b8:1c:77:7d:ed:78:f5:7e:
25:71:84:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org