Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jIUpUJZ_Jr20VLIW-AicE6nCny0.roa
File: jIUpUJZ_Jr20VLIW-AicE6nCny0.roa (raw, json)
Hash identifier: 5D8jq5jEzFTvmMWfbJVfW7045x4K2/BmgE5dTHVN7kE=
Subject key identifier: 8C:85:29:50:96:7F:26:BD:B4:54:B2:16:F8:08:9C:13:A9:C2:9F:2D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189B686AC77C161B977D5456DF4E4533426
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jIUpUJZ_Jr20VLIW-AicE6nCny0.roa
Signing time: Wed 02 Aug 2023 13:53:46 +0000
ROA not before: Wed 02 Aug 2023 13:53:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 163.5.132.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:86:ac:77:c1:61:b9:77:d5:45:6d:f4:e4:53:34:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 2 13:53:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c852950967f26bdb454b216f8089c13a9c29f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:cf:d3:77:81:19:f4:94:ec:23:7c:14:1f:
26:64:04:a9:3d:08:5b:39:85:fb:2b:7e:60:16:2b:
27:ac:31:c4:50:af:89:d5:bf:67:1d:d6:ba:69:96:
82:c8:48:a0:28:71:e9:f1:d0:e2:d5:ab:be:aa:c5:
c0:c0:13:30:fa:be:e0:b2:1e:51:3b:c6:b7:c3:9b:
0f:81:2f:10:f9:38:25:54:26:dd:01:13:fa:f8:c9:
b2:86:58:91:2c:93:43:28:c2:b4:f4:e9:d5:73:72:
81:cb:f3:7c:62:3e:a2:3c:8b:ce:2e:20:56:ef:c3:
6f:8d:9d:23:c6:f3:0f:7b:5e:d7:7a:eb:42:86:2d:
cf:a9:1c:8b:3e:42:27:f3:c6:63:59:d9:3e:99:8c:
e7:ed:7c:5b:6f:35:87:08:88:bf:23:65:9e:10:27:
25:13:b7:06:66:77:b5:3e:da:2a:ab:5a:46:a1:a9:
17:07:be:d1:f0:ac:fa:ae:cc:1a:a6:4e:8a:31:87:
44:d7:50:af:27:b4:aa:b2:a0:9a:ea:57:a4:a0:a5:
64:1d:49:cd:dc:52:5d:54:7c:0f:a4:6e:d5:67:cd:
aa:0c:a3:24:a5:17:54:4d:ad:3f:5f:41:59:ee:c0:
a1:48:b8:9a:5b:d7:d2:6f:f3:4c:4c:f8:ec:15:54:
20:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:29:50:96:7F:26:BD:B4:54:B2:16:F8:08:9C:13:A9:C2:9F:2D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jIUpUJZ_Jr20VLIW-AicE6nCny0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.132.0/24
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
22:10:fd:83:44:ca:e8:19:c9:0e:60:71:bd:87:2b:2c:fc:56:
b2:94:9b:40:bb:3f:29:78:a5:9e:00:62:45:99:cc:09:b0:9b:
19:5b:86:66:2a:df:cf:ed:a0:e9:5c:a7:14:8e:32:76:6e:a9:
59:af:64:9a:e7:31:37:85:22:6c:f2:57:1e:ea:50:da:ac:80:
1e:21:c3:b1:49:a3:a2:5e:67:61:e3:fa:ec:4b:5c:07:83:22:
f3:9d:8b:3b:9d:38:e5:bf:b5:b2:c1:d7:10:a2:8e:1a:63:61:
6d:cd:09:ec:ca:a5:d1:e8:82:f0:5f:bb:91:bc:14:e1:de:96:
62:a9:49:40:1b:16:23:60:ce:df:30:dc:aa:1c:ee:c7:b2:cc:
d6:ec:9f:6b:2e:02:74:6a:3d:57:50:2c:45:f1:ce:fe:9b:b4:
91:93:1b:2d:8d:68:a5:da:9b:ec:6e:43:56:38:05:cd:7b:38:
53:3b:82:80:ef:62:47:bd:18:18:9f:d6:c1:32:dc:0f:cb:8d:
cf:60:bb:2f:bb:ef:b2:9b:78:dd:6a:f4:5a:44:c9:63:90:a2:
68:79:8a:0d:ff:20:4d:e0:e1:88:1a:b5:99:f0:ca:31:a1:73:
4c:f6:89:5d:51:88:f2:35:3a:45:5c:37:89:e1:68:81:e8:be:
e3:6f:6f:0b
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 2 19:06:54 2023 by rpki-client on console-fra.rpki-client.org