Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fGolYi1F71qiAuzxT_0pUwOgKiw.roa
File: fGolYi1F71qiAuzxT_0pUwOgKiw.roa (raw, json)
Hash identifier: OpfU8kfpEvn4XxO5W3YvZQHP7rYrSpjcE+SQXz8szCY=
Subject key identifier: 7C:6A:25:62:2D:45:EF:5A:A2:02:EC:F1:4F:FD:29:53:03:A0:2A:2C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C915334668EFE0649C983A011E76019AF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fGolYi1F71qiAuzxT_0pUwOgKiw.roa
Signing time: Fri 22 Dec 2023 11:39:58 +0000
ROA not before: Fri 22 Dec 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 163.5.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:53:34:66:8e:fe:06:49:c9:83:a0:11:e7:60:19:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 22 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c6a25622d45ef5aa202ecf14ffd295303a02a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:49:89:1a:a0:1f:ed:30:f4:66:9e:a2:17:
44:22:1e:cb:3a:e8:36:18:76:5c:83:e2:1e:f3:43:
0b:7d:bc:96:5f:40:e3:4f:bf:6e:99:03:c0:b3:54:
5d:53:1a:b9:e8:c8:23:75:62:02:b9:a5:60:a1:2a:
d1:14:fd:2a:13:2d:da:e1:ff:c0:73:b4:ad:df:2f:
cb:84:01:23:e4:e1:1b:d9:f6:64:20:a8:4f:9e:5f:
68:76:bc:83:db:97:e1:72:ea:94:9b:d0:e7:0a:e1:
eb:5f:16:b9:74:a7:2f:a0:23:17:c6:b3:8e:64:1d:
b4:8d:4e:e2:c0:82:dd:ab:74:b4:6e:36:6b:d1:a6:
62:a0:e8:fb:eb:26:59:41:af:94:b3:98:90:bc:0f:
85:ea:0a:5c:67:14:cb:54:c4:9b:30:70:21:11:96:
a6:45:67:c1:1c:92:8a:9b:9a:eb:98:e2:f1:6c:17:
6e:7c:0b:fa:dd:16:17:1a:a0:76:86:0e:62:2e:01:
33:60:e1:73:7f:bb:d9:e3:2f:10:77:2f:72:28:c9:
31:00:40:a0:62:7d:88:f2:27:43:42:8e:1f:2b:af:
3c:5a:15:92:a0:f7:d6:71:3c:c0:bc:e5:21:93:6f:
02:63:d5:37:46:ae:99:1a:3c:72:36:b2:55:d1:23:
82:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:6A:25:62:2D:45:EF:5A:A2:02:EC:F1:4F:FD:29:53:03:A0:2A:2C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fGolYi1F71qiAuzxT_0pUwOgKiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
56:35:2c:89:c6:44:cf:85:95:09:a4:a8:28:f1:e5:8f:52:8c:
28:8c:62:c4:60:d5:52:c1:41:01:29:e8:07:5f:bf:d7:c8:0e:
16:37:4e:7c:c2:08:bb:be:7e:a1:83:a8:e7:28:05:7e:fc:e8:
f0:c2:98:da:da:77:32:44:db:0b:9f:7e:ba:02:5e:40:3e:8c:
96:6a:a3:52:7e:c8:c6:b0:0d:37:86:78:c1:4d:ae:30:cf:87:
81:57:23:cd:78:f6:1f:ab:9a:a5:72:f8:65:2d:64:03:76:cc:
98:53:58:51:85:d4:8c:30:23:a3:3c:2f:2a:52:3b:7b:dc:46:
76:06:56:e3:19:69:b1:20:f1:a1:4d:7e:49:8d:67:e4:7e:f0:
a0:53:21:c2:b0:99:b8:08:15:66:9c:af:3a:cc:df:d7:97:3a:
69:c7:34:5a:5f:d3:98:b6:72:43:92:a8:2f:69:50:ba:2c:9f:
b6:5d:dc:55:36:72:f2:64:cd:5e:4e:ec:30:01:ce:1f:ca:f9:
8e:c6:a7:84:da:49:5d:54:b7:5b:b8:a6:3f:b2:dc:d7:27:84:
70:69:af:27:cc:a5:c8:ec:e4:11:b2:cd:a8:2a:18:c4:25:5f:
85:30:13:b7:49:9b:9c:28:14:cc:0e:0c:59:96:cf:a8:17:ea:
22:e5:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 24 04:33:17 2023 by rpki-client on console-ams.rpki-client.org