Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fS4ubuVFRxJF_q-NZPkZZ88Ttcs.roa
File: fS4ubuVFRxJF_q-NZPkZZ88Ttcs.roa (raw, json)
Hash identifier: 8CDofmNYCG68CTHmLJvSrlwIdV3w2/4cwkH4QsKD/P4=
Subject key identifier: 7D:2E:2E:6E:E5:45:47:12:45:FE:AF:8D:64:F9:19:67:CF:13:B5:CB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185F8205B16DF61F1655FF0EAB7BD287C17
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fS4ubuVFRxJF_q-NZPkZZ88Ttcs.roa
Signing time: Sat 28 Jan 2023 11:25:48 +0000
ROA not before: Sat 28 Jan 2023 11:25:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 163.5.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f8:20:5b:16:df:61:f1:65:5f:f0:ea:b7:bd:28:7c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 28 11:25:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d2e2e6ee545471245feaf8d64f91967cf13b5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:17:41:a0:ee:e2:17:fe:c5:ec:a8:6e:33:
9a:16:24:86:cc:c8:59:87:f5:0b:ff:40:67:8b:ff:
93:09:ec:57:ed:1a:f4:38:9f:fb:90:e1:4d:9f:2e:
5d:c4:c6:96:12:54:3c:9e:3d:50:b2:d4:40:31:76:
c1:18:d5:4b:dd:65:a6:48:81:10:de:73:22:20:cf:
b3:f8:8c:d0:63:41:ab:37:4e:3f:41:53:3a:7a:d0:
de:50:43:9b:ca:96:03:bf:46:99:15:9b:99:bd:f6:
07:e7:cf:2a:20:e8:ce:0c:95:b8:28:50:2a:6c:2e:
4b:88:76:6e:a6:b6:4a:ce:b4:17:94:02:da:c9:8c:
af:88:b5:25:9e:05:b7:ad:7c:be:3d:c5:3e:35:ec:
2a:31:00:70:9d:94:3e:00:2b:4c:4c:59:e7:2b:34:
a1:6a:bb:7d:92:80:26:c4:22:08:5f:23:dc:dc:20:
08:ec:7a:70:5f:5a:44:ee:fe:8c:a4:88:77:6a:fc:
93:26:b0:e5:c8:b4:c4:f9:ce:f5:ff:23:a4:d6:b0:
5a:64:58:32:bd:67:e2:28:05:d6:9b:54:ec:57:b6:
3d:9c:e4:70:7c:f5:ce:90:97:c0:78:a5:5a:17:e8:
1f:ab:c1:da:db:64:83:fb:eb:f3:f4:9a:47:38:4e:
6b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2E:2E:6E:E5:45:47:12:45:FE:AF:8D:64:F9:19:67:CF:13:B5:CB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fS4ubuVFRxJF_q-NZPkZZ88Ttcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.175.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d5:5a:b4:68:67:ad:0a:39:bb:d2:e9:83:cd:fe:38:5d:d3:
f5:83:30:11:a0:33:c0:fa:43:72:cf:8d:ef:7a:88:20:e7:20:
dc:a2:ff:42:05:c5:55:cd:2f:be:ae:73:e4:f1:4e:28:84:71:
29:66:a9:35:dc:34:4f:86:19:3b:83:c1:c1:98:cb:4f:20:d0:
3f:1e:8b:86:3d:32:1b:b0:64:99:07:20:48:5e:06:16:b0:5d:
0d:ce:b1:6e:44:cf:97:2c:e3:de:45:e8:ca:2a:c5:9a:26:88:
58:2c:36:ba:b1:82:4d:4d:cc:b4:22:31:d5:03:96:68:cd:03:
53:f3:18:61:ed:b4:7b:d0:31:28:97:51:e5:43:be:5e:13:84:
a4:58:f3:eb:39:6e:a8:ca:63:6e:b7:6e:30:06:f4:7b:56:91:
f1:9c:03:ff:b1:77:63:04:e5:8e:7e:02:c6:32:f5:50:2d:ce:
fd:4f:5c:9d:06:5a:f8:b7:75:de:14:0d:e9:82:59:7e:fa:9d:
44:c4:a1:4b:56:f9:9f:3b:62:18:e4:65:59:82:cf:3c:d0:c0:
53:2e:43:e4:c4:db:20:64:8e:18:84:88:ad:aa:85:23:bb:34:
52:6d:d2:8a:55:bc:bd:24:d3:33:8b:68:e5:60:47:25:78:aa:
3a:2f:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org