Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l32SJjs5En5HrgzLHVq8VtQgaF8.roa
File: l32SJjs5En5HrgzLHVq8VtQgaF8.roa (raw, json)
Hash identifier: VLeobtvwNdPjTvQK5odryM+4U0CKfB9u2fcCMnz+oik=
Subject key identifier: 97:7D:92:26:3B:39:12:7E:47:AE:0C:CB:1D:5A:BC:56:D4:20:68:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B38133D6D0DE2BBE7315E3C496FCE0A4F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l32SJjs5En5HrgzLHVq8VtQgaF8.roa
Signing time: Mon 16 Oct 2023 10:41:06 +0000
ROA not before: Mon 16 Oct 2023 10:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 163.5.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:13:3d:6d:0d:e2:bb:e7:31:5e:3c:49:6f:ce:0a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 16 10:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=977d92263b39127e47ae0ccb1d5abc56d420685f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:78:bb:1f:f4:ad:98:bc:84:10:b8:5a:29:0d:
7f:08:cf:c1:7c:e8:d4:36:6f:6f:c4:5b:94:7f:c1:
6c:5c:47:85:e5:fd:38:9c:eb:36:c2:f7:23:b4:3b:
9e:80:40:25:18:08:e0:27:37:b0:01:87:ec:9c:9b:
93:58:db:cd:fb:35:88:5f:0b:7a:c5:92:c8:4b:55:
2f:67:e2:ea:d5:8e:5c:cb:90:7e:62:8c:a2:6e:c0:
f9:29:a4:95:b9:24:bb:53:24:0d:ac:fd:ee:e6:da:
39:98:8c:d2:d6:3b:0a:fa:3f:f2:9c:d0:3b:62:f4:
52:b2:de:1a:68:18:9a:74:e5:21:0a:7b:be:08:f5:
7b:80:01:d1:25:2d:42:d6:30:e6:46:3e:34:ea:71:
01:34:fc:91:26:52:a4:29:ff:bc:00:63:4c:58:66:
23:b8:77:98:9d:cc:1b:3f:e9:96:1a:aa:fe:a7:b1:
f0:f4:a2:8c:f6:a5:c1:29:fc:b4:d2:c1:fb:f4:49:
d1:e2:b0:b6:39:39:1f:e8:f9:a6:2c:d5:4d:a1:66:
8d:a5:b3:2b:7b:8e:1c:21:80:4c:bb:c2:b5:0f:85:
c5:12:e7:5c:03:ce:49:ac:76:83:3e:6f:83:cd:b2:
e8:eb:d9:02:28:4d:f9:99:0d:8e:8e:e3:18:b1:2b:
1d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7D:92:26:3B:39:12:7E:47:AE:0C:CB:1D:5A:BC:56:D4:20:68:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l32SJjs5En5HrgzLHVq8VtQgaF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.89.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9a:cb:cd:97:51:bb:db:ff:29:f8:f0:9a:87:fa:9e:7a:22:
82:06:8f:5c:80:76:6b:b5:17:ed:52:72:a6:03:68:2c:19:2c:
5c:d7:b0:d0:58:6c:bf:53:ba:dd:a6:ee:1a:c3:3f:1f:f4:f1:
db:5d:8a:fc:99:17:33:88:3e:02:b4:88:16:71:3e:29:1c:c2:
3d:ba:72:d9:33:3c:bd:41:59:50:64:8d:02:86:c3:9e:31:02:
8c:87:56:10:d6:bb:af:ce:08:97:38:46:7b:61:24:1a:22:20:
38:e4:dc:ab:5f:71:6f:e8:4b:bd:ac:ef:8d:eb:53:43:ec:05:
ea:91:1d:e3:43:f8:54:e6:58:14:dc:a8:d6:4d:54:62:f6:d2:
bc:64:31:5d:99:f2:d5:69:68:69:5e:55:bc:4d:ad:73:ab:82:
0d:dc:a9:dc:7e:43:b1:21:7b:f9:10:bf:57:1c:70:f4:f7:80:
73:6e:73:08:15:08:86:fd:90:12:73:76:68:44:3a:55:d0:c6:
3e:ab:f7:28:23:e3:fa:4c:11:fd:08:35:f1:ce:67:79:d8:5f:
b4:d9:31:2b:dc:06:33:73:88:ae:84:94:4a:10:53:32:30:37:
b1:de:ee:16:58:19:76:0f:c6:8a:04:0e:22:e7:35:e0:c5:96:
2b:f2:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:19 2024 by rpki-client on console-fra.rpki-client.org