Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jx6tDTzsR2CEbWdrOrhQg4SV5A4.roa
File: jx6tDTzsR2CEbWdrOrhQg4SV5A4.roa (raw, json)
Hash identifier: F2ggZyKHtWeTZgrze/lG6IB8aOvmsOEEDIwYYCNeVaQ=
Subject key identifier: 8F:1E:AD:0D:3C:EC:47:60:84:6D:67:6B:3A:B8:50:83:84:95:E4:0E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185964A2353CAB7DF1EB99C0D95D354B73B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jx6tDTzsR2CEbWdrOrhQg4SV5A4.roa
Signing time: Mon 09 Jan 2023 11:28:39 +0000
ROA not before: Mon 09 Jan 2023 11:28:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 163.5.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:4a:23:53:ca:b7:df:1e:b9:9c:0d:95:d3:54:b7:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 9 11:28:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f1ead0d3cec4760846d676b3ab850838495e40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:a4:68:cd:88:a3:08:99:50:7e:77:36:60:
55:b4:88:5b:51:f3:ea:3c:3b:af:8f:32:b0:63:5f:
78:a6:1c:93:9c:be:8c:b0:4c:d4:b5:1e:00:14:f2:
02:62:0f:cc:b7:80:a4:a7:19:d6:c5:7e:30:8b:aa:
ec:a0:f8:59:f9:a0:58:2d:04:4f:9c:db:6a:26:7b:
ba:37:b6:1d:2e:8f:d8:b0:c6:d7:4e:5d:b2:c3:a1:
30:e8:17:24:58:80:35:65:c4:a3:94:98:5c:32:7a:
3e:a7:3e:2f:9b:51:e8:7c:6d:54:0a:4b:4b:68:18:
bb:4a:08:04:7c:79:d4:c8:b3:8e:61:50:ce:9d:19:
81:90:3f:9c:86:4a:bc:d1:1a:21:b3:60:67:31:05:
1a:68:f4:32:2b:d8:c8:77:ac:0f:36:b9:3a:5f:e3:
46:7d:e2:71:a8:75:e2:f2:dc:85:b1:99:45:ed:aa:
d7:c6:c0:fa:f0:f3:24:08:b4:34:7b:31:16:5c:0c:
ff:ae:1e:89:f5:92:9d:07:7e:98:30:07:17:f3:53:
6e:17:81:16:58:77:85:17:02:78:f3:0f:45:ab:b2:
62:2f:fa:cb:ce:17:7f:5b:42:d8:af:84:38:a5:75:
3e:14:a7:d7:ad:dd:b2:09:16:17:9e:cf:58:b3:0b:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1E:AD:0D:3C:EC:47:60:84:6D:67:6B:3A:B8:50:83:84:95:E4:0E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jx6tDTzsR2CEbWdrOrhQg4SV5A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.188.0/24
Signature Algorithm: sha256WithRSAEncryption
87:71:af:c9:a1:17:d5:10:1f:5f:e7:bf:39:7a:d3:49:b7:00:
e1:79:e3:38:df:ab:e5:03:75:bf:fe:76:97:80:67:09:b6:42:
d3:03:74:e2:72:7a:23:21:83:eb:50:50:a1:8b:91:b7:dc:40:
28:c5:13:26:2b:ad:4a:f9:d8:f6:da:60:65:a9:78:e3:4e:c9:
d4:33:a2:aa:86:49:be:7f:2d:22:6a:b3:b4:73:2a:ab:43:a5:
7d:b5:4e:f9:84:d6:64:a5:13:af:dd:91:f0:d4:64:07:9c:d8:
a1:92:18:39:e3:68:24:32:bb:4c:18:c5:91:d2:c5:87:11:5f:
9f:12:1d:b7:00:db:d1:4c:94:2b:74:bb:fd:c0:bd:51:43:af:
b8:d1:ce:59:5e:32:51:91:da:e3:ec:99:37:a2:51:c0:bb:37:
1b:46:b1:6a:be:59:6c:07:64:3c:8d:9c:01:60:40:09:dc:a4:
7f:76:44:c7:29:51:56:d9:d6:55:69:2e:15:b3:fa:ae:63:e1:
2a:af:b0:33:59:61:69:86:b0:32:75:89:0b:e9:a5:a2:6c:e2:
68:0b:8b:b9:18:06:74:51:2d:75:7c:d7:f7:22:80:e9:80:bb:
c1:c5:17:0e:af:1a:61:27:5d:b2:71:ce:ec:83:d9:a0:af:db:
ce:16:81:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWWSiNTyrffHrmcDZXTVLc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTA5MTEyODM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjFlYWQwZDNjZWM0NzYwODQ2ZDY3NmIzYWI4NTA4Mzg0OTVlNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgKkaM2IowiZUH53NmBVtIhbUfPq
PDuvjzKwY194phyTnL6MsEzUtR4AFPICYg/Mt4CkpxnWxX4wi6rsoPhZ+aBYLQRP
nNtqJnu6N7YdLo/YsMbXTl2yw6Ew6BckWIA1ZcSjlJhcMno+pz4vm1HofG1UCktL
aBi7SggEfHnUyLOOYVDOnRmBkD+chkq80Rohs2BnMQUaaPQyK9jId6wPNrk6X+NG
feJxqHXi8tyFsZlF7arXxsD68PMkCLQ0ezEWXAz/rh6J9ZKdB36YMAcX81NuF4EW
WHeFFwJ48w9Fq7JiL/rLzhd/W0LYr4Q4pXU+FKfXrd2yCRYXns9YswuILQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI8erQ087EdghG1nazq4UIOEleQOMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvang2dERUenNSMkNFYldkck9yaFFnNFNWNUE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW8MA0G
CSqGSIb3DQEBCwUAA4IBAQCHca/JoRfVEB9f5785etNJtwDheeM436vlA3W//naX
gGcJtkLTA3TicnojIYPrUFChi5G33EAoxRMmK61K+dj22mBlqXjjTsnUM6Kqhkm+
fy0iarO0cyqrQ6V9tU75hNZkpROv3ZHw1GQHnNihkhg542gkMrtMGMWR0sWHEV+f
Eh23ANvRTJQrdLv9wL1RQ6+40c5ZXjJRkdrj7Jk3olHAuzcbRrFqvllsB2Q8jZwB
YEAJ3KR/dkTHKVFW2dZVaS4Vs/quY+Eqr7AzWWFphrAydYkL6aWibOJoC4u5GAZ0
US11fNf3IoDpgLvBxRcOrxphJ12ycc7sg9mgr9vOFoFC
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org