Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k7DngoBBwq8UdW_pt1LDJJxfW7U.roa
File: k7DngoBBwq8UdW_pt1LDJJxfW7U.roa (raw, json)
Hash identifier: UwZKp0ZUffoNj66TsJibqCM6EEY/EkbXyr8DdasU3iI=
Subject key identifier: 93:B0:E7:82:80:41:C2:AF:14:75:6F:E9:B7:52:C3:24:9C:5F:5B:B5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189552A6EE8F6F536DF6520B468722FB44A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k7DngoBBwq8UdW_pt1LDJJxfW7U.roa
Signing time: Fri 14 Jul 2023 16:09:51 +0000
ROA not before: Fri 14 Jul 2023 16:09:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 163.5.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:2a:6e:e8:f6:f5:36:df:65:20:b4:68:72:2f:b4:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 14 16:09:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93b0e7828041c2af14756fe9b752c3249c5f5bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:b3:fc:a7:52:2f:75:bd:0f:29:ed:0b:a9:
b7:b2:bb:66:96:8c:44:b9:43:39:62:59:0c:e9:d9:
0d:39:06:e2:f3:d7:e5:a3:5b:f8:7c:1d:36:ce:af:
c7:d7:9b:d6:ab:cd:d9:ef:e2:b7:1b:24:8c:28:c5:
56:c0:5b:07:b8:34:ae:0b:f2:c4:ac:5d:56:78:d4:
d3:8d:6b:c2:3c:a6:f6:7d:1d:b0:ac:0c:f8:6b:e7:
53:c1:6a:df:82:66:55:d7:61:65:67:e6:8f:58:82:
87:0b:e3:2c:77:73:44:ca:3c:15:1f:f3:3f:df:59:
e6:f1:3d:6a:f3:25:10:aa:ae:c4:ac:58:7e:8d:cc:
44:96:c4:71:6e:01:ab:d6:95:7e:86:ae:6d:88:5a:
88:50:68:53:93:93:91:f4:53:d5:2e:a1:21:ea:d9:
4a:43:cd:90:5f:da:82:76:0c:0b:99:18:ed:dd:f3:
6a:01:cd:26:79:75:23:13:c1:f0:ad:25:aa:06:fa:
e6:bb:b7:ff:74:97:7c:3e:71:a1:d3:a0:c6:76:5b:
5f:1c:f3:46:5d:10:47:46:33:0a:c3:18:35:6e:89:
c2:b5:82:f0:72:9a:c8:7b:4c:02:32:3b:d6:a2:ba:
bb:1b:d3:28:01:c9:94:ad:fe:f4:12:61:be:ee:9c:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:E7:82:80:41:C2:AF:14:75:6F:E9:B7:52:C3:24:9C:5F:5B:B5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k7DngoBBwq8UdW_pt1LDJJxfW7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a9:cc:5a:99:34:4d:b7:6d:9e:68:f8:97:b9:62:57:1b:5a:
a6:bf:98:63:70:0e:ac:b5:03:45:12:ea:33:40:a5:5b:cc:a6:
ca:9f:f8:32:16:82:5c:92:90:f0:19:53:85:b8:53:53:4e:f3:
31:f7:0a:21:86:99:61:82:12:af:db:af:e4:04:ba:8e:bc:6c:
26:03:20:70:ac:51:29:1f:0f:89:23:2d:cf:e4:7f:c3:fb:40:
9b:c1:b4:d0:47:dc:e2:cd:7b:a3:07:c0:ff:45:ea:4e:05:42:
43:60:aa:c1:f6:fd:3f:4a:e6:3c:05:38:38:0d:65:6a:45:aa:
f1:74:c8:34:6d:bd:b2:5f:6d:dd:8c:2a:54:e8:74:54:1e:87:
6f:91:a2:e5:1f:51:ea:dd:9e:72:50:61:11:4a:b8:07:6f:11:
0a:d4:0e:f0:e0:da:15:87:59:ca:77:5e:7f:47:ca:75:2d:24:
fb:9b:5e:af:a3:b6:e0:6f:6b:81:6a:2b:8a:24:f7:34:65:cf:
e5:37:2b:85:d7:64:fc:d0:8c:92:ef:b3:df:51:f9:d4:ae:86:
56:34:dc:24:6a:2d:f6:ff:24:71:2b:ff:66:7c:ea:27:ca:c2:
0b:79:ea:91:19:f4:60:51:67:09:31:5c:83:e7:ed:68:ca:ff:
07:30:57:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 13:54:53 2023 by rpki-client on console-fra.rpki-client.org