Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i3xEuJWZOtNI3ois8wtdEPNcUv0.roa
File: i3xEuJWZOtNI3ois8wtdEPNcUv0.roa (raw, json)
Hash identifier: xznFJEsPjuj03IitFBRNWNCi189maSuzFrdJpwY9rGM=
Subject key identifier: 8B:7C:44:B8:95:99:3A:D3:48:DE:88:AC:F3:0B:5D:10:F3:5C:52:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C01EBD5060A399145D8C7F0340F458BB7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i3xEuJWZOtNI3ois8wtdEPNcUv0.roa
Signing time: Fri 24 Nov 2023 15:21:21 +0000
ROA not before: Fri 24 Nov 2023 15:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 163.5.74.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:01:eb:d5:06:0a:39:91:45:d8:c7:f0:34:0f:45:8b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 24 15:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b7c44b895993ad348de88acf30b5d10f35c52fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:68:13:c8:4a:ae:22:12:bf:b3:b0:31:10:
db:fd:96:14:a4:ce:91:7b:ee:63:73:36:e5:f6:1c:
ee:ad:4a:19:4d:fc:8b:f2:b7:93:e3:2b:b1:2e:ed:
3d:85:93:e8:44:9b:99:72:6b:c2:6a:26:92:5d:08:
58:76:10:28:6c:a3:19:33:a2:57:da:87:1a:ca:2c:
2c:84:49:a0:22:30:88:7f:d1:10:05:e4:a7:81:8c:
48:0e:8b:60:32:c4:84:83:f9:64:08:3b:bb:cd:6f:
05:21:b9:d9:75:b2:48:ec:46:43:8e:79:5e:c9:f0:
04:25:d1:06:c0:be:a1:49:a1:05:91:65:38:73:2d:
07:de:83:1f:7d:18:16:10:86:a8:24:b8:74:97:c2:
98:3a:c9:a1:f1:b8:1f:20:71:6b:6d:61:6a:ab:a5:
bf:5e:b7:da:04:1f:e4:81:83:26:71:fa:bd:3b:d5:
ce:62:f5:96:94:02:ea:69:55:f9:ce:16:0f:b5:52:
41:d1:bf:fd:ca:11:08:49:3a:81:fe:11:b2:dc:05:
f5:08:99:0e:f1:5a:e0:f6:df:71:1b:e3:33:8f:21:
83:d5:08:ca:4d:5e:09:5c:f4:20:79:fd:b6:36:c6:
f6:ce:30:bd:00:73:49:57:ef:64:73:1e:43:ac:1c:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:44:B8:95:99:3A:D3:48:DE:88:AC:F3:0B:5D:10:F3:5C:52:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i3xEuJWZOtNI3ois8wtdEPNcUv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.74.0/24
163.5.151.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:57:87:47:93:c1:7c:5f:d9:88:68:0b:a8:2e:e4:36:a0:1b:
88:f6:b9:ae:98:2c:f8:7f:7a:c7:22:b4:18:5a:06:d2:58:68:
c5:58:2e:04:11:54:03:95:6c:5a:54:21:7e:d5:79:57:8f:22:
df:7a:ca:d7:66:9b:43:83:16:b5:91:21:c4:7a:f4:aa:cf:a7:
ca:c4:df:10:79:16:30:39:41:d8:94:ba:3b:35:1e:97:cf:a8:
aa:a6:55:0a:e7:ed:d8:4a:07:d8:82:f0:18:92:de:c5:d9:ab:
fa:c6:ce:db:b0:57:04:40:a5:03:a6:84:84:1a:32:65:c9:58:
ed:f3:af:9c:a9:f2:5a:7a:37:bb:69:c7:59:93:19:08:cd:bd:
6c:8f:f6:a4:22:84:bf:52:0f:1e:21:2e:89:55:6b:5f:6a:f3:
40:56:11:82:25:4a:8d:58:49:9c:f7:30:5e:e9:4b:0b:fa:1c:
f3:d1:c3:64:cb:1b:b3:57:76:cb:ac:6a:3d:dc:f2:2f:fb:67:
d5:8c:81:6a:b4:ac:04:a6:2d:71:fa:2f:0c:dc:e8:4d:a2:25:
6f:26:b7:6c:e4:16:19:57:08:c6:e3:a7:6a:23:34:ec:e8:59:
d3:a4:7b:ff:3e:6b:8f:3d:b7:75:72:b9:19:ed:ea:f3:0c:57:
c7:40:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org