Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fMdoJBmMNOwGiU-QW7O4IOHvLkg.roa
File: fMdoJBmMNOwGiU-QW7O4IOHvLkg.roa (raw, json)
Hash identifier: xie6wOO88/J5AwHEd/esPMboMkpCZmd/+M3zjfvyD6k=
Subject key identifier: 7C:C7:68:24:19:8C:34:EC:06:89:4F:90:5B:B3:B8:20:E1:EF:2E:48
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186DAB89A88DB0990C3CD82F41E3707C1C2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fMdoJBmMNOwGiU-QW7O4IOHvLkg.roa
Signing time: Mon 13 Mar 2023 11:26:16 +0000
ROA not before: Mon 13 Mar 2023 11:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200136
IP address blocks: 163.5.143.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:b8:9a:88:db:09:90:c3:cd:82:f4:1e:37:07:c1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 11:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cc76824198c34ec06894f905bb3b820e1ef2e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:d3:d4:1c:90:92:9c:fd:6f:ac:52:34:2e:
b8:2e:ea:09:2d:51:17:47:23:1e:92:c8:f7:13:6e:
b7:fd:e3:72:cc:d5:9e:88:41:cd:3e:20:30:46:b6:
bd:3f:80:b6:12:18:17:85:8f:19:a3:91:33:d5:93:
15:0b:dd:14:73:1a:23:76:19:58:4d:62:2d:87:17:
d4:d1:70:f9:f8:67:1b:09:4d:f5:f6:bc:93:e4:6c:
88:7f:e8:83:84:e9:19:8b:6e:8e:68:42:9d:a3:75:
d9:4d:aa:03:99:dc:32:54:a6:d3:fb:1d:ab:b1:09:
dc:90:6d:71:31:91:37:3e:d8:43:c0:43:8c:32:b9:
dd:e1:b0:ee:4e:00:e9:57:b3:7d:fc:eb:08:93:2d:
ab:88:7a:f0:8d:cf:28:53:04:5d:40:5a:77:50:e8:
2a:d8:14:31:71:9a:8c:5f:d7:8f:5a:34:a6:b1:7d:
b0:72:a7:d5:56:a0:0e:78:68:6d:6a:1d:1b:89:42:
3e:14:6e:6d:7d:ff:9a:cd:c7:0d:9f:a8:46:c8:b2:
a8:af:42:b4:89:6a:86:6b:b0:c1:ad:55:35:3a:d2:
7c:c1:d9:d6:4a:3b:1a:a2:f9:8c:1f:8d:8b:fa:64:
8f:86:9d:7b:96:68:80:85:a9:ff:db:40:20:0c:16:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C7:68:24:19:8C:34:EC:06:89:4F:90:5B:B3:B8:20:E1:EF:2E:48
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fMdoJBmMNOwGiU-QW7O4IOHvLkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.143.0/24
Signature Algorithm: sha256WithRSAEncryption
81:06:d7:09:35:b7:b3:ed:e9:62:e1:f0:8a:6c:23:76:02:ee:
12:67:a4:86:94:f2:3c:26:de:58:72:56:e4:25:af:2e:a6:79:
d0:43:14:b0:8e:9e:72:a3:e1:da:a4:5d:4b:5c:3a:de:28:b9:
74:16:62:d9:b4:cb:21:bc:0f:1e:16:be:c2:30:97:aa:51:76:
c3:42:b3:41:0c:63:a5:1b:bf:d0:86:d3:19:a3:9d:53:2b:80:
a1:03:5a:ad:7f:2c:ac:20:a0:25:54:22:7d:22:67:45:ef:53:
c5:00:da:fd:43:30:29:90:75:8a:10:d0:77:6d:16:7f:e0:3e:
67:6e:a2:a6:93:1f:e8:58:e3:61:60:8c:6e:ea:01:31:56:16:
0a:4d:9a:ab:d3:ab:85:3c:55:3d:f7:da:1f:34:7e:a8:43:d7:
80:b3:8a:1e:c0:a8:d5:85:e3:b6:64:7d:32:16:01:3e:12:60:
b5:aa:34:38:f8:53:3f:b5:04:e1:95:32:0e:af:d8:2d:7d:4f:
e1:f7:05:96:fb:28:0e:19:ef:26:3d:b6:e7:1d:d0:4e:02:5a:
ad:f1:43:f4:61:d8:2e:9a:c8:54:1b:e8:1a:95:5e:4b:bd:e6:
9d:56:6c:6c:11:1c:d2:e3:85:f4:50:07:55:a5:90:68:6d:0c:
68:01:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org