Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_HPfli82BX_kaZ7eaURJTi8IuKs.roa
File: _HPfli82BX_kaZ7eaURJTi8IuKs.roa (raw, json)
Hash identifier: 2Kg3mAU8KOC2msJpdrwFSKzbPixkmANbNzltVC5h6gU=
Subject key identifier: FC:73:DF:96:2F:36:05:7F:E4:69:9E:DE:69:44:49:4E:2F:08:B8:AB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187643DC5EF170D85118FB53E84060BCB5C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_HPfli82BX_kaZ7eaURJTi8IuKs.roa
Signing time: Sun 09 Apr 2023 04:19:42 +0000
ROA not before: Sun 09 Apr 2023 04:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 163.5.131.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:64:3d:c5:ef:17:0d:85:11:8f:b5:3e:84:06:0b:cb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 9 04:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc73df962f36057fe4699ede6944494e2f08b8ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3f:1b:59:c2:32:5b:a2:9c:3f:ee:19:02:bd:
ec:46:4d:07:23:35:80:45:63:8d:52:22:dd:9c:df:
cd:a9:64:38:32:ca:74:b4:13:c1:8a:20:47:27:11:
9a:e2:36:52:2c:ae:b3:99:ad:cd:58:f4:cc:65:eb:
3e:b2:e1:50:56:d6:26:d7:45:0d:4a:24:41:30:76:
18:03:2c:20:5d:e8:86:02:44:6d:31:25:f0:8f:be:
9e:64:38:06:0c:af:9b:bf:38:81:ed:74:a3:1b:68:
45:e0:66:62:0c:06:f8:f7:b7:ea:18:d9:a1:0e:14:
3f:5b:5d:3f:30:09:27:e8:c3:57:f5:8b:6e:7d:46:
9d:da:06:a2:02:09:22:35:6f:76:8f:df:1a:eb:dd:
84:3f:8e:9b:a2:cc:c6:5a:27:12:a0:3c:54:cb:1a:
08:9e:03:79:0d:c5:0d:62:59:7b:c8:f6:09:93:6d:
8b:a1:f0:c8:93:58:c9:b4:0d:1f:11:37:43:0f:81:
bc:72:fd:3e:57:3e:6e:51:bf:09:30:71:21:90:c0:
25:19:d8:0c:25:34:62:09:21:f5:79:99:b7:91:3d:
a1:18:08:85:ff:4b:0a:3a:a0:bc:8b:55:a8:0a:cd:
aa:fc:a4:b8:41:07:d7:c7:8c:8c:1e:f0:3c:ae:86:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:73:DF:96:2F:36:05:7F:E4:69:9E:DE:69:44:49:4E:2F:08:B8:AB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/_HPfli82BX_kaZ7eaURJTi8IuKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.131.0/24
Signature Algorithm: sha256WithRSAEncryption
14:19:7c:9a:91:ab:04:c2:2c:17:ca:6e:e5:62:26:fa:35:0e:
a5:33:2d:f9:1e:a5:74:75:83:22:f6:0d:3f:de:a7:21:92:7f:
df:f9:e3:2b:53:1f:6d:b7:29:11:8a:4c:65:12:8b:84:d8:36:
2b:02:84:0d:86:44:84:6d:bc:9c:58:19:0f:77:3d:3a:81:2c:
64:95:1e:7b:4a:ad:ee:36:c2:33:b2:6a:5b:b7:78:bc:d7:d2:
d5:36:d5:12:ef:26:57:1a:d5:89:cb:10:b8:9d:82:74:f4:ac:
ae:f4:98:38:78:dd:69:65:e3:33:f3:91:26:44:ca:cf:5a:a5:
cd:51:3b:99:0a:bc:55:2c:0a:62:06:d0:d7:d5:67:ba:65:91:
0b:58:e3:d7:3f:40:cc:93:e2:63:53:69:63:fb:83:86:f1:62:
05:3b:e6:7f:c4:7e:38:be:c6:b1:c0:e3:a3:88:e8:5d:f2:47:
ce:f9:bd:94:d9:3b:cd:60:5e:b1:a5:13:dd:6f:b3:c5:2a:8d:
11:9f:5c:44:d7:ad:d1:e4:8e:06:6c:06:3e:ac:e0:e0:e0:01:
43:e6:0e:4d:ad:bc:d3:0f:b1:94:6e:09:3d:26:d0:8e:9a:e4:
33:66:35:9d:96:86:02:ec:47:10:f0:2b:e8:79:27:58:3f:33:
ad:26:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org