Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/anzpCZivRz6rTRZ1QRUIVnOFeo0.roa
File: anzpCZivRz6rTRZ1QRUIVnOFeo0.roa (raw, json)
Hash identifier: 3rbcIgq1zb956Y23iNDxQqGo/d5fIRmN9sV3Q4dOhf8=
Subject key identifier: 6A:7C:E9:09:98:AF:47:3E:AB:4D:16:75:41:15:08:56:73:85:7A:8D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018714ED456DD7DF15A411D38216B235A277
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/anzpCZivRz6rTRZ1QRUIVnOFeo0.roa
Signing time: Fri 24 Mar 2023 18:41:46 +0000
ROA not before: Fri 24 Mar 2023 18:41:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 163.5.178.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:14:ed:45:6d:d7:df:15:a4:11:d3:82:16:b2:35:a2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 24 18:41:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a7ce90998af473eab4d16754115085673857a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cd:65:ac:d3:9e:97:f7:89:f6:9f:a5:03:30:
54:2c:d6:fd:0a:af:62:1f:b7:c2:f8:5b:71:ed:d2:
73:b2:27:69:8d:1b:d6:ba:21:d0:9a:95:77:e3:f4:
a5:5f:9e:69:a7:1b:e5:af:1e:02:46:4f:79:23:7d:
f4:e1:99:bd:2c:f9:68:8d:22:65:b2:ad:33:76:6f:
06:8b:b3:86:36:d4:8b:4b:2d:81:0d:57:8b:6c:c0:
41:ba:ba:de:e7:c0:8e:00:06:59:6d:54:54:a1:3e:
9a:c9:5e:24:33:20:98:f5:f5:0e:04:a6:be:0f:c8:
2d:cb:02:3d:cb:c6:f6:6d:ee:92:07:8a:5f:5f:75:
ce:de:f5:2d:e5:8d:0f:c6:cd:d9:07:5b:4d:c7:07:
78:49:63:3f:d2:59:67:86:93:52:33:e1:b3:c1:8e:
97:15:3e:48:41:56:0d:8a:94:be:34:31:82:61:62:
d4:2b:1b:d8:49:53:87:f6:44:d9:c1:34:28:22:e9:
c9:0b:35:51:75:25:18:03:bb:f7:51:05:ea:2f:75:
1e:aa:18:e6:58:04:92:63:bf:17:c7:01:30:91:37:
76:fc:6f:7e:42:17:07:fb:04:2f:65:08:30:3a:36:
78:44:c1:59:3b:1e:04:8a:73:d5:63:b0:48:35:c1:
ef:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7C:E9:09:98:AF:47:3E:AB:4D:16:75:41:15:08:56:73:85:7A:8D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/anzpCZivRz6rTRZ1QRUIVnOFeo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.178.0/24
163.5.188.0/24
Signature Algorithm: sha256WithRSAEncryption
38:6d:52:c6:e1:4d:15:ad:ab:12:38:74:40:33:2f:9f:b5:c6:
d2:10:be:f3:06:68:a9:16:eb:4f:d6:d8:12:18:52:72:19:3f:
df:a3:ee:f0:e1:f5:84:14:3b:ae:37:f3:62:c5:1b:42:56:36:
85:41:69:b6:25:70:c2:fa:97:c5:99:81:03:8c:7a:9a:9c:97:
b7:31:db:d3:9a:6d:5b:a9:60:ef:b2:73:bf:c5:0c:94:ec:a0:
ca:49:0e:07:67:d0:6c:64:96:7b:1d:bb:b1:18:4e:d3:64:24:
93:df:da:37:a4:76:44:9b:f1:58:4b:96:33:3d:2b:8f:e0:4f:
16:66:1d:c8:5b:31:9d:d4:2e:64:c4:03:77:11:39:f5:7e:d8:
7c:e5:e1:ed:92:ad:03:e7:33:40:d0:d2:0e:84:1e:95:9b:07:
a0:0f:5c:10:ba:4d:04:19:61:1f:0a:7c:1b:98:5a:cf:17:eb:
1f:61:23:3e:1f:07:cf:4a:8d:c1:8a:aa:ea:c9:50:a0:c4:23:
e1:f0:74:7a:76:c4:17:e2:e8:22:31:21:09:22:58:07:99:6b:
5e:1d:9a:a8:d1:3d:98:8f:bc:4d:96:fc:f7:81:64:4f:8a:1b:
7c:b1:5e:9a:70:63:06:f2:d0:ed:77:40:48:9c:2b:7d:72:18:
83:da:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 20:05:55 2023 by rpki-client on console-fra.rpki-client.org