Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cyMd0NMN-4MXfEubG64I9GxT6Ew.roa
File: cyMd0NMN-4MXfEubG64I9GxT6Ew.roa (raw, json)
Hash identifier: nPHCS+cw8jor8lpZN8vFnlvn3kAD46dYdei8Umn+Lds=
Subject key identifier: 73:23:1D:D0:D3:0D:FB:83:17:7C:4B:9B:1B:AE:08:F4:6C:53:E8:4C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01894AF2C7E0A8CE2698D6DA6B268F4F2CAC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cyMd0NMN-4MXfEubG64I9GxT6Ew.roa
Signing time: Wed 12 Jul 2023 16:32:52 +0000
ROA not before: Wed 12 Jul 2023 16:32:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198607
IP address blocks: 163.5.202.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:f2:c7:e0:a8:ce:26:98:d6:da:6b:26:8f:4f:2c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 12 16:32:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73231dd0d30dfb83177c4b9b1bae08f46c53e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9d:3b:99:d0:10:fb:e0:e9:fe:93:05:84:af:
6e:e8:be:ac:e4:0e:69:cf:b1:49:40:75:89:24:ec:
9a:43:4d:0d:2e:2d:7b:d7:a5:c1:43:cb:ac:4e:86:
a3:f8:09:f0:55:f7:08:05:46:82:08:0e:ca:3d:44:
55:80:85:fb:2a:31:9c:a0:10:8b:4a:63:db:77:c7:
3e:10:48:ed:6e:40:05:6c:38:41:20:04:5b:1b:5a:
08:20:0d:9f:68:e3:61:cd:34:e6:19:4a:6f:ef:c0:
9b:c0:22:7b:bd:bc:74:25:4b:95:a5:c1:45:d4:41:
da:92:76:36:fa:fe:09:32:4e:92:85:2a:11:7e:91:
26:5f:46:8a:03:9b:1a:78:bf:69:59:c1:35:40:51:
34:b5:5b:7f:9a:a4:87:47:11:60:f2:11:c1:86:43:
ed:33:cf:c3:95:91:4c:cf:94:bd:9b:b0:15:e7:96:
2c:9c:38:63:ad:ce:57:e9:15:46:b1:0a:d1:dc:19:
f2:96:cc:26:d4:7b:d5:6b:e0:9c:45:4f:a1:3c:51:
3e:0c:78:d2:49:12:32:1c:7c:2f:29:28:ed:0f:b6:
91:7c:2d:3f:eb:cf:b3:7d:6b:36:1d:f0:6e:dc:2d:
6c:01:c1:c8:a0:42:c1:d3:9f:b3:e1:32:68:42:20:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:23:1D:D0:D3:0D:FB:83:17:7C:4B:9B:1B:AE:08:F4:6C:53:E8:4C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cyMd0NMN-4MXfEubG64I9GxT6Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.127.0/24
163.5.158.0/24
163.5.202.0/24
163.5.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:63:9c:ae:44:c1:68:f9:bd:90:a3:7c:11:7f:5a:bc:c1:a4:
f1:80:81:17:d5:69:17:06:74:94:f5:d1:e2:70:3f:0a:cb:cf:
99:a4:73:54:25:9e:2c:64:88:dd:95:e7:b1:ea:bd:5f:98:2b:
00:7f:36:99:49:66:95:f9:84:86:c8:df:11:83:be:ad:12:d7:
50:24:dd:d7:ca:5a:06:31:6a:ae:7a:92:64:c3:36:a8:4f:c6:
66:19:be:88:5a:f8:80:71:7c:7a:f6:0e:19:2f:8e:d3:26:99:
c6:22:9e:97:b7:07:a0:64:61:ce:f1:ab:fd:69:4f:e3:3a:f5:
d8:4f:54:37:0a:26:1c:56:0d:81:c9:9f:ea:7a:b8:8e:31:2b:
10:32:69:74:98:16:7d:c1:21:6f:6c:af:5f:01:e3:66:80:dc:
22:99:68:37:41:e4:84:30:5d:fe:07:00:57:c5:c7:59:bc:e3:
00:3e:e7:f2:97:c8:0d:13:29:e3:99:76:0d:e7:44:de:8a:a0:
f0:30:d5:3f:2f:0f:0f:c1:57:18:98:1d:4e:39:1f:33:1c:68:
81:43:39:26:06:67:04:1d:16:89:a4:b6:29:65:c2:5f:20:c7:
af:e8:1d:a7:22:32:0a:21:89:84:a1:74:e8:e9:1b:88:32:07:
fa:e4:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org