Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kM6qyEoqQkzuuDx0N3hwYcGdCXg.roa
File: kM6qyEoqQkzuuDx0N3hwYcGdCXg.roa (raw, json)
Hash identifier: 1DF7fsdfov8HKUMZulpeWW4oXNXZRskLKQW3lWcTsvY=
Subject key identifier: 90:CE:AA:C8:4A:2A:42:4C:EE:B8:3C:74:37:78:70:61:C1:9D:09:78
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B47C92852C3D1C3CB7A6E277E398FDD10
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kM6qyEoqQkzuuDx0N3hwYcGdCXg.roa
Signing time: Thu 19 Oct 2023 11:54:07 +0000
ROA not before: Thu 19 Oct 2023 11:54:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151604
IP address blocks: 163.5.179.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Nov 2023 12:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:c9:28:52:c3:d1:c3:cb:7a:6e:27:7e:39:8f:dd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 19 11:54:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90ceaac84a2a424ceeb83c7437787061c19d0978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:1d:e9:ec:6e:1f:dd:4f:5d:6f:e4:ea:9d:
d9:d0:24:4b:20:50:e0:e7:dd:2b:9d:7c:8f:ba:05:
e1:2f:b6:a4:e0:3d:4c:e9:49:84:67:00:e3:ea:4d:
16:2a:94:9f:28:ca:d6:b3:9b:79:d8:f7:20:65:c1:
6d:10:b7:e0:ce:b1:c9:8f:84:16:6d:db:7c:8c:91:
18:bd:68:7b:4e:92:0c:5d:c2:ef:c6:6d:79:78:9a:
db:dd:10:1d:c0:70:59:fd:21:af:20:c8:40:a4:e0:
d5:f7:fb:57:8f:6f:85:4a:f6:60:fb:20:60:c5:e7:
c2:24:5a:e8:17:86:8e:7d:53:92:39:d9:da:0a:bc:
56:fa:fb:c1:74:c3:d3:b6:db:64:e4:72:94:ee:e0:
2e:db:f0:52:59:8b:32:d5:43:b4:11:39:60:09:20:
a5:69:5f:76:1c:28:61:d1:4e:60:2f:93:b2:fd:a7:
c7:c4:1c:7d:30:c2:34:2a:bb:30:f8:b6:9e:87:86:
de:ed:37:c1:68:54:43:a3:14:40:17:88:5f:f0:dc:
27:10:61:87:17:ec:a7:8e:88:61:5d:91:a5:69:8b:
81:15:3c:f4:46:4b:6b:3f:6b:51:61:66:38:fb:72:
e3:2a:97:65:67:dd:88:65:0d:45:cf:3f:6a:d3:d2:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CE:AA:C8:4A:2A:42:4C:EE:B8:3C:74:37:78:70:61:C1:9D:09:78
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kM6qyEoqQkzuuDx0N3hwYcGdCXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.179.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d2:4d:7d:84:62:f2:d2:89:83:bd:d0:98:19:5e:3a:46:a3:
ba:d5:64:f2:df:0b:d1:88:a3:39:7f:14:fb:50:18:4d:37:4c:
7f:e0:f5:2a:6d:b1:8c:a7:c9:87:e0:fa:93:3d:dc:3f:9b:9f:
96:b6:94:f9:2f:78:f5:14:c3:e1:32:88:0d:55:11:ad:48:2d:
e0:fe:2f:d0:4c:d4:f6:e8:e5:1a:4e:f0:73:b1:82:40:59:41:
89:58:d9:6c:53:ae:bd:f3:a1:4e:a5:42:03:55:8a:28:dd:0a:
f1:ed:6e:0b:3e:b5:3b:cd:73:28:a0:3b:95:d1:f2:70:a6:4e:
3a:bd:f1:b0:50:a8:dd:cc:c0:0c:11:45:bb:d6:52:3d:ba:5a:
21:49:7d:f4:c7:16:32:21:e8:52:03:59:a6:55:a3:0d:e1:24:
8f:92:3e:ec:62:bc:41:26:cd:7b:79:ed:dd:ee:1d:c8:fe:8e:
b5:8d:36:95:00:9e:91:bd:e5:fc:dd:ec:4d:95:a8:4b:45:e2:
fa:02:58:d5:6f:93:a9:4c:6d:41:c1:2d:58:49:34:de:8b:ed:
a9:27:ac:cc:26:62:50:fa:ad:4c:55:08:fa:4c:16:55:cb:32:
46:b6:70:0d:7d:b7:e2:43:d2:6d:85:19:e5:17:8f:1a:00:c8:
45:7d:c1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:34 2024 by rpki-client on console-ams.rpki-client.org