Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mx29FoPqchXERmObh9S7tu_UwJk.roa
File: mx29FoPqchXERmObh9S7tu_UwJk.roa (raw, json)
Hash identifier: 5AjO5BKknYbp5TL76LLWOAvS6tO5E2NqyJwahC1DF3Y=
Subject key identifier: 9B:1D:BD:16:83:EA:72:15:C4:46:63:9B:87:D4:BB:B6:EF:D4:C0:99
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B96C77688C577CE2459569CCE4E9D1554
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mx29FoPqchXERmObh9S7tu_UwJk.roa
Signing time: Fri 03 Nov 2023 20:02:16 +0000
ROA not before: Fri 03 Nov 2023 20:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205091
IP address blocks: 163.5.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:c7:76:88:c5:77:ce:24:59:56:9c:ce:4e:9d:15:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 3 20:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b1dbd1683ea7215c446639b87d4bbb6efd4c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:29:b3:4f:62:72:48:fe:dc:17:f4:7f:eb:a0:
34:a1:f1:40:07:cb:20:71:e1:a1:a7:32:5c:8d:e0:
68:2d:8e:59:df:e3:19:e6:c7:a7:4e:2f:fe:ff:e0:
5d:a3:06:f3:44:41:97:ca:b9:b2:88:32:62:a8:5a:
c6:50:92:87:94:78:af:5d:fe:48:1a:e5:19:b0:9f:
b6:16:48:45:b9:ee:e1:80:3e:8a:78:62:fc:ba:e7:
da:56:1b:d1:c1:76:f2:66:e6:5d:64:0f:1b:c6:33:
82:9c:eb:d7:13:8c:75:07:b5:78:cc:de:87:ed:05:
f6:99:8c:0a:e3:32:44:59:15:78:df:08:17:12:61:
b1:1d:fd:5d:24:52:2c:ad:27:0c:4f:61:c8:55:e7:
d0:e6:c6:36:26:aa:cd:89:59:5f:f2:16:8f:9b:86:
a6:f9:c9:7b:46:02:c8:30:5d:a3:d5:30:4b:36:d5:
67:1d:f9:90:9e:24:36:4c:bb:29:cb:11:40:c8:35:
ee:30:24:bc:7c:06:21:4e:1c:04:96:77:3c:22:e3:
3c:c8:e0:a6:84:87:c5:be:41:07:de:02:0c:8b:55:
7e:d3:1f:11:dc:32:86:83:f8:3b:5d:9c:e6:ee:fe:
3f:35:23:1d:d4:81:82:8a:d3:85:32:e2:79:75:34:
bb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1D:BD:16:83:EA:72:15:C4:46:63:9B:87:D4:BB:B6:EF:D4:C0:99
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mx29FoPqchXERmObh9S7tu_UwJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.172.0/24
Signature Algorithm: sha256WithRSAEncryption
26:dc:45:bd:97:e7:b7:c7:48:f1:ae:aa:0f:fa:ac:30:b6:67:
ad:ad:51:5c:dd:e8:1c:b7:31:e1:d1:05:9f:39:56:16:20:18:
93:90:36:18:af:b6:d2:a8:19:2c:d0:55:58:16:2d:92:81:5f:
bf:50:59:a2:9f:ba:f1:0d:fa:d6:0e:ba:e8:47:0b:90:e0:c8:
c5:0c:e3:a1:ee:a7:86:53:cc:e3:af:39:a3:d1:a4:b6:6f:f2:
c4:00:84:f5:bd:0c:6d:a7:02:d2:d2:d2:2e:18:b1:96:d0:85:
3f:04:83:0f:1f:59:ba:01:af:78:3c:24:33:e3:43:0e:dc:27:
85:2a:39:3e:d4:ac:83:f0:30:91:87:6b:5c:f1:a8:f0:31:ed:
e6:3b:35:8e:17:8e:0d:ef:fe:8a:96:44:5d:2b:ca:ac:fa:59:
b0:ad:2f:71:f0:c7:95:44:b3:ba:30:41:b1:95:7e:e5:55:82:
c0:ec:7a:6b:4c:80:06:ea:82:2f:25:cf:d3:6c:89:ca:fb:0a:
30:d3:cc:c3:f5:c1:3a:8c:1c:8f:56:10:6d:44:6d:35:bc:33:
8d:bd:a8:26:04:04:54:52:fa:e9:16:8d:3a:d1:0b:60:27:ca:
28:17:fa:20:d2:d1:1e:a2:1b:89:60:eb:79:0b:1c:e5:0d:f7:
b8:d0:3c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org