Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZdPRh9ShU8IV2R3W0w1mw50dHlk.roa
File: ZdPRh9ShU8IV2R3W0w1mw50dHlk.roa (raw, json)
Hash identifier: bfokvuhmsdAclLA8OA3JVHWlHu+g9ttSwDcAr94y2/w=
Subject key identifier: 65:D3:D1:87:D4:A1:53:C2:15:D9:1D:D6:D3:0D:66:C3:9D:1D:1E:59
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042BAC9D83A5AEA0B27489DA828FE25
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZdPRh9ShU8IV2R3W0w1mw50dHlk.roa
Signing time: Mon 02 Jan 2023 02:14:59 +0000
ROA not before: Mon 02 Jan 2023 02:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 163.5.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:ba:c9:d8:3a:5a:ea:0b:27:48:9d:a8:28:fe:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d3d187d4a153c215d91dd6d30d66c39d1d1e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b9:d3:d4:c2:d8:76:2c:0e:83:67:c8:68:90:
ab:f7:10:2e:03:58:51:5f:27:9d:bf:67:f8:de:4d:
6d:5a:b4:b9:09:dc:80:92:56:85:0b:6e:4d:11:57:
48:89:82:3c:d1:50:8a:31:1e:89:a9:90:d5:50:68:
2e:a3:61:0f:1a:a3:22:d1:26:a0:f2:5c:1a:4a:05:
90:70:5c:fc:63:ab:5f:6e:52:ca:9b:8d:45:e6:3d:
b7:cf:43:2f:96:7a:94:70:a2:1f:60:77:19:1b:e8:
46:9d:ef:8d:ad:23:f6:9e:dc:df:91:c3:b7:31:ff:
6b:1d:cd:14:04:d8:15:fd:42:3e:c7:64:37:28:d7:
eb:74:10:8c:41:82:f0:f9:0b:0a:2e:5d:ac:c0:d8:
ba:f5:0d:30:de:83:2a:36:2e:1c:d4:de:5a:57:92:
4f:dc:fa:77:40:c3:87:ab:db:68:50:31:12:39:c8:
f5:4b:27:31:d3:e2:75:34:47:8f:30:5e:8b:14:f2:
0c:7b:f8:21:04:1c:21:58:bb:3a:4b:6e:97:5d:10:
8e:df:0d:ba:d4:7c:16:f5:0a:1a:6b:4d:aa:88:15:
9d:bd:24:27:ad:d9:ed:a1:d7:ec:f2:02:ae:1e:9f:
02:92:73:b6:1d:c1:96:8b:33:ec:ed:16:35:97:8c:
73:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:D1:87:D4:A1:53:C2:15:D9:1D:D6:D3:0D:66:C3:9D:1D:1E:59
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZdPRh9ShU8IV2R3W0w1mw50dHlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4a:da:27:08:b1:8c:8b:4c:fd:88:52:cf:8b:64:b3:b1:88:
63:c8:ca:3c:37:26:78:9a:8a:f1:44:f2:09:66:46:79:3f:41:
bd:10:a5:dd:1c:53:73:a2:eb:c0:4c:e1:8c:91:c1:c0:16:2f:
2f:af:36:a1:91:d7:17:9a:42:b8:21:8b:0e:26:06:a4:d1:09:
65:c1:95:30:82:36:3f:6c:b4:18:0a:59:a2:93:ad:89:21:4f:
49:91:4e:57:b9:0b:c6:35:69:65:3b:f2:21:b6:a4:6c:0e:14:
f6:da:97:ed:63:27:22:8b:d3:70:53:a3:e9:04:17:c5:34:d9:
b8:ca:ad:bc:21:b3:91:58:3c:db:f4:b8:f1:0d:3e:ea:7f:9f:
fa:92:e2:b8:04:72:d0:6d:29:d5:c0:53:bf:35:52:2f:bc:5d:
7e:4e:9e:8f:6c:f1:64:5a:2e:12:f2:de:54:cd:78:c7:96:9d:
1a:4b:5c:af:56:5b:a9:5d:12:8c:01:61:0f:33:b9:4e:4d:a9:
66:1e:2d:0f:f6:e5:88:4b:4d:f9:f0:d3:78:5d:9a:fe:b2:d3:
6b:56:39:7e:5d:6c:ec:5c:3e:5e:b2:9b:72:48:af:07:24:b4:
32:68:ee:86:de:42:91:d9:e2:b1:10:e7:33:b3:ed:c2:d2:e7:
bb:69:d9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org