Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oWifLwi3EtN5g2TBTuwW5XXZ81M.roa
File: oWifLwi3EtN5g2TBTuwW5XXZ81M.roa (raw, json)
Hash identifier: mfYRGVR/hfIw0HRnngBVG6Nsdhb9b1FZsLXzVbgF1dA=
Subject key identifier: A1:68:9F:2F:08:B7:12:D3:79:83:64:C1:4E:EC:16:E5:75:D9:F3:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189216762D8692587BD2ACD5E1DC62BA8CC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oWifLwi3EtN5g2TBTuwW5XXZ81M.roa
Signing time: Tue 04 Jul 2023 14:56:10 +0000
ROA not before: Tue 04 Jul 2023 14:56:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213305
IP address blocks: 163.5.94.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:67:62:d8:69:25:87:bd:2a:cd:5e:1d:c6:2b:a8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 4 14:56:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1689f2f08b712d3798364c14eec16e575d9f353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:87:f6:63:48:26:04:19:74:1f:df:f1:26:fe:
29:ed:37:28:ef:72:62:1e:fd:7f:a0:6e:78:e1:d8:
bb:18:ef:58:f9:68:fc:2a:d5:4f:c6:84:51:a4:81:
d6:94:6b:f4:5c:dd:e0:a7:6e:16:c0:1b:20:be:7b:
aa:a4:f9:40:6f:cf:32:ff:ff:fa:e6:f4:ae:4b:ed:
24:b9:6d:a1:d1:b1:34:b8:00:a2:e6:3c:67:28:72:
e9:c5:8b:25:4d:65:ee:20:26:38:2c:e4:a7:00:a8:
cd:4e:ba:32:64:62:17:d9:48:5e:f3:67:96:2b:62:
bb:b9:17:16:b6:e4:aa:a3:11:2e:b8:50:5d:c7:20:
8e:34:ba:cc:96:4d:86:6e:c4:e5:24:ba:03:bc:e6:
06:c0:a3:a6:8b:e1:69:7b:b0:dd:4f:66:ed:b6:7d:
2f:99:f2:c5:84:6e:a6:31:61:fb:01:2c:be:77:4b:
0c:16:b2:2f:19:6a:0e:dc:3c:05:5b:61:50:0a:e6:
14:05:29:fa:54:36:4b:e5:ba:31:05:31:da:eb:56:
06:5f:0f:0a:d9:8b:f9:11:31:d8:5b:78:2c:62:94:
d2:4d:bf:2d:2c:37:61:d9:0a:4c:b3:2b:6d:15:07:
d4:6a:9e:5c:f7:df:38:68:9a:e0:36:48:cb:1d:59:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:9F:2F:08:B7:12:D3:79:83:64:C1:4E:EC:16:E5:75:D9:F3:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oWifLwi3EtN5g2TBTuwW5XXZ81M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/24
163.5.135.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f7:1b:d9:58:98:22:04:4d:8a:3c:5c:37:72:b1:32:c6:05:
8c:dc:77:c9:96:85:5f:fd:8d:84:cf:46:82:fe:9d:38:c3:74:
cc:86:b7:c8:ad:26:8f:01:28:df:da:85:59:49:99:4d:c2:f2:
f7:1e:eb:8c:5f:38:c4:72:4d:2b:9a:aa:f1:71:17:8e:38:9e:
01:dd:33:a5:7d:45:11:a2:0d:ae:2c:42:af:ce:9f:40:dc:fc:
94:18:da:a6:7b:7b:21:3a:83:f1:31:0b:0d:69:70:97:a1:65:
6b:d0:33:7c:59:b1:07:ea:23:a9:47:2f:47:8b:de:ad:df:ff:
54:de:a4:ad:ac:c9:ff:49:5c:4d:af:98:55:59:a9:43:d3:28:
7e:f1:80:e0:43:41:1b:8d:5a:dd:39:2d:6d:0d:35:54:df:71:
ae:4b:4c:d0:54:71:2b:8c:dc:3c:d0:70:ef:4a:71:41:17:0f:
5b:fc:63:e0:23:c5:e8:df:69:68:56:52:9b:77:32:1a:6d:d4:
88:dc:1b:38:f1:94:c0:23:41:ce:5c:79:1c:31:36:f3:96:00:
ea:5f:c1:81:ac:f5:e4:57:f1:5b:0a:49:6c:24:90:85:1a:86:
4b:43:fb:f3:e3:73:69:d9:10:f3:9f:86:57:c2:0f:38:cd:4c:
98:98:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 13:49:13 2023 by rpki-client on console-ams.rpki-client.org