Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jhwUwTavZMlHGR8aSgvc4n1uv5s.roa
File: jhwUwTavZMlHGR8aSgvc4n1uv5s.roa (raw, json)
Hash identifier: SU0auPEpetspiKsNOFFTdYm/nFi0syX6tJxF8g9i86I=
Subject key identifier: 8E:1C:14:C1:36:AF:64:C9:47:19:1F:1A:4A:0B:DC:E2:7D:6E:BF:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187E60AB04209DE47E4BCE040033B9AF750
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jhwUwTavZMlHGR8aSgvc4n1uv5s.roa
Signing time: Thu 04 May 2023 09:14:32 +0000
ROA not before: Thu 04 May 2023 09:14:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 163.5.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:0a:b0:42:09:de:47:e4:bc:e0:40:03:3b:9a:f7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 4 09:14:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e1c14c136af64c947191f1a4a0bdce27d6ebf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:75:c6:3f:08:78:e6:67:f6:43:83:4f:53:
f7:fb:d4:a0:a3:9d:29:19:95:82:17:f7:06:07:dc:
91:f5:87:80:38:0e:f9:1c:aa:d3:21:97:ba:45:5a:
67:d8:07:50:20:94:97:75:74:50:ff:0f:b4:4e:72:
32:2e:7c:99:b6:27:fc:f3:a0:0f:e5:65:4f:35:22:
e9:bf:c3:4d:c9:55:c9:28:3d:3c:0b:63:c4:03:51:
36:e0:47:c6:80:29:6b:7e:ff:9f:4d:ba:37:e6:23:
31:05:1b:87:61:f6:13:f2:3a:bc:d1:2d:84:2c:15:
14:db:19:3d:95:ba:68:d2:2d:a0:07:cc:4f:d4:a0:
2c:66:3a:54:79:bb:39:e1:e3:ce:18:af:09:56:e5:
62:e0:7a:5d:b8:38:92:e9:f5:02:00:65:77:40:fc:
77:65:0d:e5:3c:53:43:2c:25:30:e8:4b:0f:35:cb:
6e:75:bf:5f:65:40:c9:64:2e:11:a3:76:1a:79:5e:
7e:de:74:7b:26:73:b4:6e:e4:c7:25:36:9e:5a:3f:
08:8e:14:a8:b5:22:a8:65:52:61:2a:11:2b:c6:6f:
4a:e4:26:79:24:e2:24:4e:9c:bd:67:40:d3:89:31:
de:2e:5e:f5:83:35:da:98:a5:85:f2:ed:f3:37:5d:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1C:14:C1:36:AF:64:C9:47:19:1F:1A:4A:0B:DC:E2:7D:6E:BF:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jhwUwTavZMlHGR8aSgvc4n1uv5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.164.0/24
Signature Algorithm: sha256WithRSAEncryption
29:f5:42:f0:76:3b:08:c9:21:32:4c:83:1c:d2:ec:db:07:83:
d6:6e:22:4b:d3:14:18:9b:f5:d6:ac:51:63:a9:ed:08:be:61:
c1:a2:d7:a8:d3:42:5f:89:6e:36:8b:2e:c6:d9:12:1a:ec:8f:
1f:5d:43:c9:f5:92:31:0d:2d:9b:23:de:36:da:2b:a3:ae:8f:
49:8b:1b:8b:30:04:b9:43:2c:8c:64:06:42:b4:95:02:0a:8d:
48:bd:4f:49:00:06:e0:d5:c3:e4:86:68:55:48:63:71:51:14:
41:aa:0c:9c:c1:63:06:65:8f:bf:ae:c0:dd:aa:73:29:e8:41:
83:43:ee:6d:c9:18:6d:a7:53:bf:07:c8:4b:ff:1e:28:8d:c7:
85:89:7f:46:50:b8:3d:86:88:d4:3a:20:0f:64:c2:29:5e:f3:
9d:63:17:1b:86:ab:aa:01:ad:a1:6f:4e:00:3e:dd:9c:2d:8f:
a4:dd:bd:b8:a0:59:70:f6:61:bc:7f:26:8e:59:a9:d2:45:c9:
f5:35:22:d4:16:ba:cc:39:3f:1c:01:e2:3d:1b:97:0c:c8:c5:
10:ac:99:1d:bf:5d:00:7d:cf:87:d8:3b:00:73:1f:ed:3a:93:
86:1f:aa:99:2e:65:61:6f:e0:03:46:65:c6:ef:a2:31:fd:26:
c1:bb:ca:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 22:19:54 2023 by rpki-client on console-ams.rpki-client.org