Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kc-Om5CXk8hgf4xjmSgyMkiVG3o.roa
File: kc-Om5CXk8hgf4xjmSgyMkiVG3o.roa (raw, json)
Hash identifier: znf76enxLrr1QM2Y51hHvLH+Wqe8AtkoM1JbI8V2FzU=
Subject key identifier: 91:CF:8E:9B:90:97:93:C8:60:7F:8C:63:99:28:32:32:48:95:1B:7A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255DCD9365C0E07372E67A7DA1B3B2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kc-Om5CXk8hgf4xjmSgyMkiVG3o.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197842
IP address blocks: 163.5.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5d:cd:93:65:c0:e0:73:72:e6:7a:7d:a1:b3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91cf8e9b909793c8607f8c639928323248951b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:a5:fc:37:bf:be:bc:45:35:8c:de:58:06:
60:4b:8d:3b:bd:3a:c0:4c:81:01:72:35:7e:11:86:
aa:d6:09:fd:37:f5:01:09:4e:a1:a3:1c:b3:e0:ba:
35:72:60:42:d7:70:5c:c0:95:ea:d6:f1:01:d5:e0:
6f:41:8e:89:50:a1:6d:d5:b2:6b:8a:d3:ac:75:88:
cb:f9:60:53:75:da:f2:3f:15:2c:39:0a:a3:0a:37:
37:3f:0d:49:64:c2:53:e7:ce:cd:45:a7:66:d0:32:
1a:08:70:a2:87:d6:1f:f0:85:6a:69:77:a6:b2:90:
bc:70:b0:e2:5d:5f:64:b7:24:ec:0e:b7:4a:3a:f1:
ba:17:74:5a:53:02:69:a1:87:71:22:7a:05:db:cc:
64:99:16:1e:88:d7:ba:07:10:7c:b9:03:52:31:00:
97:af:c1:83:15:6b:7d:93:4a:20:74:43:05:3e:dd:
37:9d:f0:86:a1:a9:9d:da:f1:15:e9:b4:f7:d0:9e:
d1:5d:75:f9:1e:73:48:b1:19:c2:eb:64:2a:08:4a:
99:59:e4:e4:98:f4:b5:02:eb:ab:36:52:b4:43:80:
21:84:4f:9c:84:85:ae:ad:ec:7d:47:68:4a:c2:06:
57:4a:1e:dc:2e:c9:b2:be:f9:c5:9a:87:2c:dd:e9:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CF:8E:9B:90:97:93:C8:60:7F:8C:63:99:28:32:32:48:95:1B:7A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kc-Om5CXk8hgf4xjmSgyMkiVG3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f5:be:e7:1d:da:09:57:55:e8:4d:12:9e:74:b2:bb:80:0d:
e8:77:d1:13:d8:6e:53:9d:16:0c:60:8e:5b:59:56:22:ad:87:
d6:43:bb:5b:b1:54:a0:2f:fe:87:63:ab:17:a8:cd:66:39:3c:
8d:3a:1c:8c:ee:94:68:fe:41:59:03:67:2e:b4:6f:57:36:21:
18:bf:36:2f:df:d7:17:20:9b:5b:1f:2d:05:94:7c:cc:79:d5:
aa:db:6e:3e:2a:2d:36:7f:be:60:d8:7b:88:41:08:2a:8b:cc:
16:5c:df:6a:9f:2e:8d:87:08:bd:7b:22:02:19:23:95:d0:b8:
ba:5a:7e:4f:d7:33:9d:b6:81:f9:50:7a:84:f2:dc:f3:cf:ee:
47:62:86:97:24:a0:9b:34:f8:d3:6b:03:61:ef:f2:16:92:3b:
4d:08:81:84:00:96:85:57:7b:92:ab:10:8c:6d:08:46:bf:98:
1a:93:b8:d3:b3:fe:1f:85:35:ee:89:bc:e0:ab:f2:94:a6:8f:
fe:82:f8:48:fb:ec:e1:b3:91:4b:a5:3b:bf:6f:b7:22:e1:c7:
88:3f:be:4c:9a:8a:dd:08:0c:7d:94:09:08:26:fe:e9:37:40:
d0:a7:2f:e0:b0:11:f7:a7:ed:b0:2e:54:73:57:a3:64:ee:5d:
a8:4e:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:22 2024 by rpki-client on console-fra.rpki-client.org