Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fUtY4gX9UpBiPHPql0Ggqg4i280.roa
File: fUtY4gX9UpBiPHPql0Ggqg4i280.roa (raw, json)
Hash identifier: CsI9P3ABFTsGxC3pPmuMv0yTKBfcTXTvTP/lVuTlY2M=
Subject key identifier: 7D:4B:58:E2:05:FD:52:90:62:3C:73:EA:97:41:A0:AA:0E:22:DB:CD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01870F832ADA8471538DB1D237888CCF0EAA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fUtY4gX9UpBiPHPql0Ggqg4i280.roa
Signing time: Thu 23 Mar 2023 17:27:47 +0000
ROA not before: Thu 23 Mar 2023 17:27:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 163.5.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:83:2a:da:84:71:53:8d:b1:d2:37:88:8c:cf:0e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 23 17:27:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d4b58e205fd5290623c73ea9741a0aa0e22dbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:80:7b:72:30:4c:63:5c:b4:bf:73:97:4c:
4f:a5:0b:a7:48:e9:bd:dd:03:6b:df:0a:69:be:25:
41:ce:45:a4:b6:65:f6:92:f9:44:8f:71:14:3c:5f:
e7:7e:8f:90:55:ed:7d:bb:a1:6f:3b:01:0f:d2:92:
7d:30:33:31:72:5a:81:1f:b8:fd:67:7b:e7:9d:67:
9f:8e:65:33:8c:19:22:b1:d0:0d:44:8b:4c:3b:4a:
e6:53:91:29:74:ba:6f:12:ed:f1:d1:52:b2:75:00:
e3:a1:39:a6:8c:9b:1f:76:23:63:af:81:d4:fe:7b:
bc:ae:cd:58:38:29:90:46:c5:75:68:43:7d:31:7c:
31:90:51:6e:44:d2:f1:76:20:45:76:4f:05:4f:0c:
13:b6:6e:5a:e0:eb:34:29:bb:f0:2f:f6:12:a8:5d:
bf:e1:ef:c6:22:ba:9d:21:06:df:5d:fd:51:00:d3:
fb:6a:1a:c5:c2:24:40:6e:33:b7:a6:93:da:87:ef:
09:ca:b6:cc:54:58:98:28:74:fa:24:90:8c:0e:1d:
d6:b1:17:d0:b8:f9:2f:41:fd:54:61:42:06:2c:25:
16:5f:45:36:ac:fe:a5:84:16:d4:20:fa:5c:38:b9:
39:be:6e:03:15:f3:8e:7c:6e:02:f2:66:f5:7e:a7:
18:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:58:E2:05:FD:52:90:62:3C:73:EA:97:41:A0:AA:0E:22:DB:CD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fUtY4gX9UpBiPHPql0Ggqg4i280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.178.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ad:80:15:33:b5:36:60:06:ae:41:b9:a5:55:bd:1c:01:78:
6e:15:14:c0:74:d1:b0:e8:db:7f:3d:e4:53:32:fd:4a:3f:e1:
2a:77:f6:7e:a0:b6:51:38:41:4a:13:6b:72:e7:fe:3f:a1:d0:
84:c5:59:84:26:ac:3d:49:c3:6c:a4:14:66:49:5c:b6:2c:d1:
08:d6:8f:25:eb:fd:ec:50:4c:cd:81:22:e2:e8:c5:19:89:4e:
91:4d:dc:55:91:eb:1e:77:81:be:3d:0c:f6:98:22:0b:1b:d8:
28:49:f1:24:50:2d:ec:ce:11:8a:b8:40:cd:1f:45:90:b3:a3:
30:f3:31:92:4d:7b:cb:c1:48:68:9a:8b:f8:b1:98:e5:4f:5c:
57:fa:31:0d:65:c2:04:35:72:e3:12:f7:d6:08:bb:bc:69:92:
bd:d8:32:81:7a:df:7b:09:27:fe:e0:18:2a:f0:66:ee:45:7e:
a9:34:02:f8:21:f1:a6:7c:8a:52:50:e6:f0:18:a1:16:0c:43:
f8:78:f3:56:5e:a2:10:2f:d8:c8:cc:61:de:c2:c2:dd:cf:d0:
e8:45:d8:9b:df:00:47:02:d6:87:53:2c:94:91:0f:c0:f5:39:
18:22:35:90:fa:27:c4:01:a3:cf:5b:cd:13:91:ad:a3:81:1b:
4e:3e:0f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org