Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hx1LTBYKggal8qh_J9gAViKMOr8.roa
File: hx1LTBYKggal8qh_J9gAViKMOr8.roa (raw, json)
Hash identifier: tYPhRtI4tQQFTbZ3Z0XKQnQnDJrtfJbT6lSt4tVn1UU=
Subject key identifier: 87:1D:4B:4C:16:0A:82:06:A5:F2:A8:7F:27:D8:00:56:22:8C:3A:BF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186BCF299115AC7C58DC460116AE0F19431
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hx1LTBYKggal8qh_J9gAViKMOr8.roa
Signing time: Tue 07 Mar 2023 16:41:00 +0000
ROA not before: Tue 07 Mar 2023 16:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bc:f2:99:11:5a:c7:c5:8d:c4:60:11:6a:e0:f1:94:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 7 16:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=871d4b4c160a8206a5f2a87f27d80056228c3abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:37:c2:b8:d6:44:e2:74:53:42:9b:5e:d3:fd:
d3:91:ac:0f:f3:46:c7:90:4f:b9:cf:20:9f:19:c3:
17:83:4d:30:a4:d6:db:8f:2c:5d:09:b2:36:de:4e:
b5:84:cb:ea:76:69:3c:fd:a2:aa:53:4e:df:b3:7d:
06:f0:6b:0a:22:e6:9e:77:a9:c3:71:60:cf:1d:02:
25:67:77:05:a3:f7:a9:4e:ac:c4:2a:24:68:ad:aa:
34:8d:cf:be:56:df:10:b2:1a:e9:80:24:dd:ac:5e:
f1:fb:6f:64:6c:af:b3:bd:14:62:3f:9f:02:b9:0d:
cc:be:30:48:c8:e7:a7:36:9c:72:40:36:9c:ff:63:
0d:87:5e:88:6b:85:78:4f:88:95:fc:1c:70:31:a1:
2d:a8:60:4b:27:91:ac:23:c0:cd:34:13:64:75:1f:
db:7c:a9:c4:70:3f:91:01:6f:c5:f7:76:ad:b6:fc:
45:7d:1d:52:f7:82:cd:69:a9:b6:fb:30:5a:95:25:
3f:ae:1c:0c:e9:85:54:6e:96:d4:a1:a7:e1:5c:2c:
5b:0a:2e:2f:59:85:69:3e:3f:ae:fe:5d:13:de:99:
76:f2:8b:5d:61:c5:b7:32:7d:08:4d:47:94:50:99:
fc:d1:17:9b:90:91:c6:6a:f3:ec:27:4e:7c:fb:bb:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1D:4B:4C:16:0A:82:06:A5:F2:A8:7F:27:D8:00:56:22:8C:3A:BF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hx1LTBYKggal8qh_J9gAViKMOr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:61:d2:ae:7c:d1:95:2c:74:cf:98:57:aa:c8:06:8b:70:f3:
20:64:c6:80:35:75:c0:82:1e:d1:59:83:a0:31:6f:cd:4c:24:
5f:b9:fd:46:e4:1c:39:cf:37:85:13:a3:d8:dc:6f:ba:00:a3:
7b:29:28:81:f1:57:3d:ea:02:97:0b:ea:34:66:ab:18:65:b2:
ff:70:e2:9c:34:f2:c1:3f:a5:f3:36:c2:de:5e:2f:2a:3a:5d:
63:0d:da:74:fb:96:c0:bc:e3:a0:97:e5:5d:c0:c7:4e:39:6c:
28:28:31:47:e9:07:c0:a6:95:a9:9c:a7:f8:aa:02:c9:17:d7:
37:65:8f:fa:92:90:2d:70:ce:f2:f8:4e:c0:83:3d:09:11:dc:
e1:78:9d:e3:8d:e5:c1:a8:5d:a4:c9:a8:c5:c6:ae:5c:d0:51:
3f:0b:da:73:64:9b:6c:11:43:5f:5f:7d:4f:8c:ae:c2:09:ea:
7c:0e:38:37:59:c5:43:10:f1:ee:57:7e:58:23:99:1c:39:73:
f6:d7:a6:69:6a:19:cb:45:5d:fd:58:dc:67:0c:b5:dc:8d:e7:
5a:ae:85:f9:84:35:4c:5b:c1:c2:de:43:75:b7:13:56:8a:bc:
46:28:c9:10:af:9e:1b:49:59:c1:5b:f1:a9:6a:7f:9b:73:4b:
db:98:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 19:51:18 2023 by rpki-client on console-ams.rpki-client.org