Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mJYuXwykTEphcjVYot44QsJbbaI.roa
File: mJYuXwykTEphcjVYot44QsJbbaI.roa (raw, json)
Hash identifier: pgfkYDB8771IFG8wyZx82MQClXrhLdiFnp0pu7hMgJ8=
Subject key identifier: 98:96:2E:5F:0C:A4:4C:4A:61:72:35:58:A2:DE:38:42:C2:5B:6D:A2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187E60AAF625C306A77EF399B03D941C133
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mJYuXwykTEphcjVYot44QsJbbaI.roa
Signing time: Thu 04 May 2023 09:14:32 +0000
ROA not before: Thu 04 May 2023 09:14:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 163.5.206.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:0a:af:62:5c:30:6a:77:ef:39:9b:03:d9:41:c1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 4 09:14:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=98962e5f0ca44c4a61723558a2de3842c25b6da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a6:4d:7d:be:55:67:70:dd:7d:c2:24:bc:ab:
79:84:99:01:dc:e5:83:b8:32:2d:36:98:1f:8d:cc:
d1:30:9b:d0:54:e4:01:1d:4a:16:56:b7:ef:75:68:
8e:5d:73:7f:ee:82:79:be:3f:13:43:80:d1:2b:8f:
ad:0a:52:68:7e:7c:08:2a:7d:e4:7c:b8:78:49:bb:
c8:ee:09:ef:fb:b0:b6:0b:be:b6:da:b3:0b:42:a0:
d8:3f:00:12:33:ac:73:13:01:46:6c:4b:00:78:d8:
0c:0d:8d:26:d2:b6:1f:9d:52:16:dc:9b:92:02:01:
4d:f5:75:f7:be:8a:7d:28:01:1e:a9:61:99:69:57:
5b:41:77:cc:ad:dc:2b:a5:e9:f1:e4:7f:fc:48:ac:
62:ba:e4:0f:e5:b0:aa:f3:e2:c1:5e:21:7b:d7:11:
91:71:ca:c8:54:e4:2b:5c:2b:89:ea:d8:68:27:69:
0e:58:96:80:0a:3b:1c:c4:ff:ef:1e:4a:1d:ed:c2:
87:09:43:9a:17:59:a9:35:fc:09:05:0a:6e:c9:9e:
aa:a6:d5:e9:5f:d8:00:af:a0:05:67:ce:2b:90:64:
5c:c8:be:73:6d:7d:fa:a7:23:06:de:1d:3b:06:db:
ea:ce:5e:30:78:7b:89:f8:30:1f:fe:06:b7:ea:41:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:2E:5F:0C:A4:4C:4A:61:72:35:58:A2:DE:38:42:C2:5B:6D:A2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mJYuXwykTEphcjVYot44QsJbbaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0-163.5.157.255
163.5.206.0-163.5.209.255
Signature Algorithm: sha256WithRSAEncryption
5b:d3:8e:5c:ce:5f:21:08:57:32:be:c9:db:67:fa:ad:a1:c4:
23:1a:68:18:ea:80:17:4f:f3:01:a9:d4:c6:1e:6c:2f:94:55:
6d:36:ea:d0:f7:a4:20:a0:4d:69:dd:14:60:ed:aa:44:34:1f:
e4:79:e1:cb:8b:e8:e0:af:bd:68:a3:c4:23:50:82:a4:15:e3:
7c:d3:5b:be:69:48:b6:40:92:35:49:1d:1d:2a:b9:43:c9:6c:
d1:40:2f:64:29:3b:b4:3c:61:7e:c9:68:c3:a9:00:a5:d0:3e:
80:9f:b8:38:45:14:cc:37:45:9f:5f:0b:a7:72:95:e4:e8:db:
e1:96:14:fb:a8:a6:e4:e6:25:d6:74:af:94:54:5c:ed:46:a1:
7c:4e:47:e4:c4:e0:8c:49:2b:ec:bd:2c:93:38:ce:86:c8:a2:
3c:8b:0e:40:67:fb:2d:c0:d5:01:e1:6c:9a:a8:24:0c:69:f6:
9b:f4:d4:c2:34:8c:4b:45:f6:cf:9e:92:8d:b6:9a:56:bb:43:
f4:70:a3:f0:c1:3f:38:e5:21:39:61:16:3f:10:37:8f:e4:49:
27:b7:d7:0e:40:ad:9d:a8:35:2a:be:9e:32:ed:8f:4b:79:a6:
89:44:36:70:d2:9d:62:86:77:f3:86:cf:2d:38:29:f9:4a:32:
c9:e6:76:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org