Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ldGLql2qceaq3wBqbsRXB9VfZ2I.roa
File: ldGLql2qceaq3wBqbsRXB9VfZ2I.roa (raw, json)
Hash identifier: IBEeVBP6TD/KllZ78seuK5irovAzac66DU1wRWF4ygw=
Subject key identifier: 95:D1:8B:AA:5D:AA:71:E6:AA:DF:00:6A:6E:C4:57:07:D5:5F:67:62
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018AC17928E657D7B6F19FD1807180509503
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ldGLql2qceaq3wBqbsRXB9VfZ2I.roa
Signing time: Sat 23 Sep 2023 09:57:37 +0000
ROA not before: Sat 23 Sep 2023 09:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400866
IP address blocks: 163.5.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:79:28:e6:57:d7:b6:f1:9f:d1:80:71:80:50:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 09:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95d18baa5daa71e6aadf006a6ec45707d55f6762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:eb:85:61:c7:7b:09:a6:34:87:a2:ed:39:
ed:09:9d:c4:70:49:f2:39:40:22:a6:d8:ac:fe:53:
b4:5f:ca:64:53:bc:5c:63:d2:4e:c3:d0:b4:05:d6:
c4:cb:88:d6:d2:69:3b:64:18:4f:d9:70:d1:17:d2:
35:59:cf:ee:6d:b9:05:05:a6:54:96:84:ee:52:8e:
77:b0:10:6f:fd:a7:fd:d8:a1:8b:75:a1:07:a8:16:
26:8e:40:22:0c:2b:93:cf:7a:71:44:15:88:b6:9b:
e4:15:80:a2:70:03:d4:73:6c:c0:dc:23:7f:e8:a2:
31:3d:bb:6e:81:57:2d:33:93:5c:c5:4d:19:7a:bd:
d9:2b:54:64:e1:1a:21:e1:80:00:65:8c:fc:98:d4:
d4:2b:bc:29:a6:26:a3:78:b5:d8:9e:b5:d3:1c:a2:
05:5b:5d:d3:56:39:6a:ee:57:06:f1:8e:61:d3:af:
68:f5:22:fa:3e:75:e6:8d:35:1e:87:05:6e:28:89:
a9:42:c4:1b:e7:45:8a:4b:22:e6:7e:37:72:b4:f2:
90:2a:7d:36:4d:e8:27:16:5d:92:2a:4b:8d:77:8c:
2f:14:21:4b:1c:9e:9f:e7:b2:08:82:94:9b:bf:e7:
25:d9:97:5b:a6:f2:57:72:6a:83:17:12:ef:c9:a4:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:8B:AA:5D:AA:71:E6:AA:DF:00:6A:6E:C4:57:07:D5:5F:67:62
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ldGLql2qceaq3wBqbsRXB9VfZ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c0:c6:ab:db:f4:0c:b2:a1:8c:ba:09:39:51:a8:28:bd:c6:
51:29:2e:62:53:01:8c:2c:57:29:14:13:e8:0c:7a:6f:f3:c4:
68:57:73:8d:d0:44:f7:dd:02:fc:af:60:fa:37:3c:b8:8a:28:
ec:77:35:3a:52:1c:62:10:a9:c4:1a:e6:87:53:48:4e:c3:08:
e8:f2:53:9b:34:d3:3c:26:2b:46:0b:5a:74:4d:fb:28:cd:3e:
08:d3:c7:6f:9a:28:18:32:06:f2:e1:85:cf:e5:e5:54:29:47:
e1:ad:42:0d:dd:76:20:ed:9c:e0:94:65:2a:14:4d:dc:1e:5d:
4f:f4:c7:32:c6:4d:7c:4c:e9:6c:b6:ff:09:6c:6a:1e:e3:43:
80:d5:26:54:4c:95:1e:6d:8b:cc:8f:da:77:96:95:dd:02:5a:
12:65:db:c6:95:43:39:87:59:f2:5a:0f:e0:ed:b0:0d:6b:5d:
dd:f1:c8:38:b4:e6:d0:b0:35:9d:09:71:6d:19:bf:c6:b3:05:
14:f4:74:a2:68:09:ee:28:c1:46:ec:6e:87:c8:4d:c7:46:ce:
bb:9e:7f:74:56:9d:50:50:8d:d6:62:db:fb:d3:c4:c6:58:b0:
6f:66:4c:e1:57:fa:35:07:35:72:ea:ee:40:54:13:a0:cb:f7:
46:f8:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org