Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gtxv0tFj-oz-ZLnwyTkFOWrqMwI.roa
File: gtxv0tFj-oz-ZLnwyTkFOWrqMwI.roa (raw, json)
Hash identifier: fXrp/p/D2ZHM/hudqtJYnOs6wBHepqY1M5WV/KKkGy4=
Subject key identifier: 82:DC:6F:D2:D1:63:FA:8C:FE:64:B9:F0:C9:39:05:39:6A:EA:33:02
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01882E3CC3E364FE9D0AD9E3961845FA18E6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gtxv0tFj-oz-ZLnwyTkFOWrqMwI.roa
Signing time: Thu 18 May 2023 09:41:54 +0000
ROA not before: Thu 18 May 2023 09:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 163.5.183.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:3c:c3:e3:64:fe:9d:0a:d9:e3:96:18:45:fa:18:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 18 09:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=82dc6fd2d163fa8cfe64b9f0c93905396aea3302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:6f:ca:ab:e6:d0:dc:b2:3c:1d:7d:41:9a:
6d:dd:e7:57:b7:63:0c:48:81:85:53:6b:5f:5b:7e:
93:05:8f:33:4e:a4:6d:ec:93:f2:d6:87:5a:ff:15:
68:4e:9e:f0:72:8c:f7:50:33:be:26:2e:b1:16:e0:
c8:75:33:d5:78:2f:39:7f:b8:8e:1f:fa:e7:ad:53:
5a:33:e2:c9:7d:20:ce:7c:fb:4c:02:fa:30:56:33:
c6:69:2d:e4:bc:18:58:80:e8:a3:53:72:93:41:20:
67:c1:e1:48:a5:1b:56:fa:ab:6d:cd:f4:28:9d:4f:
c0:ea:72:9c:bd:e1:e6:db:1d:81:13:59:b3:44:4c:
0b:73:f0:a7:b9:17:b8:ae:85:f3:53:bf:16:a1:99:
ec:e7:db:3e:9e:d1:8c:f6:38:9c:75:32:fa:0c:f7:
b7:24:42:de:7d:32:28:4b:a3:33:35:33:93:ea:5b:
b5:4e:03:dd:94:2e:88:49:83:30:95:84:09:2d:74:
46:01:43:e3:c7:58:11:f7:ec:0c:af:7e:7a:20:45:
99:0c:bb:86:84:1f:75:11:fd:52:22:fb:2e:8a:81:
1b:7a:14:b9:72:5d:d2:7c:fa:e6:98:05:02:48:2a:
83:41:60:4e:ce:2b:d7:b2:25:3d:5f:36:11:dc:06:
4f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DC:6F:D2:D1:63:FA:8C:FE:64:B9:F0:C9:39:05:39:6A:EA:33:02
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gtxv0tFj-oz-ZLnwyTkFOWrqMwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.180.0/24
163.5.183.0/24
Signature Algorithm: sha256WithRSAEncryption
64:b0:84:9c:0d:57:62:d6:cf:c4:7a:57:a7:e8:9c:7a:90:8e:
da:7f:8f:8b:c9:00:ed:2e:d5:af:a6:09:2e:0e:98:b7:04:e4:
bc:44:6a:61:11:c8:df:ec:38:fd:f2:99:15:1e:1b:5e:40:3a:
a7:b9:76:ec:1d:e4:c1:91:74:52:dd:53:6a:95:85:d6:44:76:
e2:ae:52:c3:b9:05:74:29:f1:a1:2f:8a:bd:10:2c:09:bc:41:
84:65:0d:94:f1:54:56:fe:5d:f0:aa:e0:60:15:a4:5d:70:49:
aa:36:b0:0f:80:b3:a1:45:7f:c5:ce:0b:ae:67:59:b1:24:d4:
a6:08:c7:4e:4a:9d:3c:58:94:61:40:0c:d8:c7:c9:27:b4:8e:
2a:ac:2d:e6:7b:62:cf:74:eb:75:4e:3f:39:ee:29:3d:9d:f0:
0b:e7:46:b3:61:c7:b8:e6:85:b7:d0:43:0d:db:25:06:3e:83:
7c:7b:6a:5b:54:7a:a9:4f:8b:b4:9c:82:4a:74:73:f8:b2:ed:
dc:92:00:40:bd:a6:cb:1a:d3:ca:35:2a:c2:dc:53:ba:2b:ab:
61:34:c3:2e:f3:3c:0c:1a:f9:a7:dc:cd:13:77:06:34:fd:82:
e3:5d:4b:99:6f:1a:ab:e8:f2:e6:1c:22:29:d1:84:e3:9e:f8:
0e:62:aa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org