Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/heueNqCgF-_XVLeu_WVY42q0oxM.roa
File: heueNqCgF-_XVLeu_WVY42q0oxM.roa (raw, json)
Hash identifier: NydwQAsOFUNQrwKbTIXugqA8/HcqyEEgr1oWvqN8x8c=
Subject key identifier: 85:EB:9E:36:A0:A0:17:EF:D7:54:B7:AE:FD:65:58:E3:6A:B4:A3:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018848789FA0E92683DFD9874A7A6B894B33
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/heueNqCgF-_XVLeu_WVY42q0oxM.roa
Signing time: Tue 23 May 2023 11:57:24 +0000
ROA not before: Tue 23 May 2023 11:57:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 163.5.124.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:78:9f:a0:e9:26:83:df:d9:87:4a:7a:6b:89:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 23 11:57:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85eb9e36a0a017efd754b7aefd6558e36ab4a313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:db:34:31:ed:7a:3e:3f:a4:57:85:06:af:dd:
ce:b1:97:31:f6:02:e6:49:25:a7:7e:9e:17:37:6b:
ba:6c:3a:e2:36:03:87:b0:31:b1:83:fa:92:ea:4d:
f6:2e:8d:55:1d:a4:9e:5e:52:c1:81:60:42:21:72:
de:6e:90:d6:0d:c2:12:29:23:84:4c:6a:93:de:57:
45:02:41:a1:ce:7e:9e:a1:2c:22:82:62:f5:66:c6:
22:a4:4e:6d:b0:62:08:f6:a5:09:ec:ff:9e:58:c6:
c2:3d:63:e6:26:79:a8:3c:c4:c3:37:de:3c:74:ac:
ec:f6:48:d2:f2:3b:1a:eb:b1:10:36:06:e7:41:af:
ac:18:92:42:f2:1b:07:94:a3:63:1e:99:33:00:82:
04:83:94:d0:15:a0:da:0c:4b:c4:04:e5:b0:b4:4e:
be:e0:b1:73:ec:5b:cf:ba:fa:b8:31:70:11:73:76:
24:43:3f:9f:9b:f1:c5:af:4a:91:05:a8:7d:e4:f8:
d1:dd:97:1c:54:9a:24:fb:8d:01:31:a0:f7:cd:b7:
f0:97:a6:a4:99:93:bd:24:eb:f8:24:7b:62:1c:15:
94:4e:17:07:ce:9b:11:8a:b6:c9:66:7e:34:60:4c:
1e:d6:ed:87:55:65:ea:22:84:3e:df:51:2d:94:5d:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EB:9E:36:A0:A0:17:EF:D7:54:B7:AE:FD:65:58:E3:6A:B4:A3:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/heueNqCgF-_XVLeu_WVY42q0oxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:fd:31:20:6c:fe:25:2a:78:ac:64:c8:c1:95:67:f1:36:93:
fc:62:97:1d:c1:87:d1:35:ea:73:98:ae:37:df:8d:9b:3f:01:
8b:b8:d6:e7:70:f6:44:a8:36:dd:b7:8d:3a:00:39:e7:75:5f:
81:21:2b:81:d7:72:a9:04:da:24:35:99:09:bc:34:00:10:b7:
0e:3f:ba:b2:8f:77:d1:65:85:0c:56:c7:c2:4b:08:8a:52:33:
9a:a1:b9:51:be:72:40:f0:3a:2a:0f:7d:67:3a:06:18:b0:15:
2e:f8:7b:d2:b1:1c:9f:12:14:26:91:dd:8b:8f:e2:90:05:09:
c4:7b:66:4b:58:de:fd:53:36:4c:b2:86:d5:fe:72:18:2f:fe:
33:fc:76:9a:52:81:69:be:69:9e:b2:cf:0d:2e:23:b2:e7:2b:
ee:c1:33:17:02:bb:e3:c8:0a:41:17:4b:ef:c2:a2:50:22:d2:
a4:aa:e1:a8:16:b5:f0:02:f1:4b:40:22:90:9c:4b:2c:3f:e3:
aa:dd:97:f1:7a:80:5c:dc:7c:b0:d6:86:eb:7b:46:ac:8b:60:
75:11:18:5e:56:ea:45:a4:96:13:55:ff:4d:4d:80:d3:56:ee:
38:a3:cc:ad:d5:88:6d:83:2a:6a:32:cb:ab:20:01:3c:69:10:
ca:ff:db:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org