Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oawaYeEZDVbEVYaik_1ptcmNIGs.roa
File: oawaYeEZDVbEVYaik_1ptcmNIGs.roa (raw, json)
Hash identifier: Y7MvKXhgPvc00brglaf5nsA1R1qPdToeY4TryVgjrvo=
Subject key identifier: A1:AC:1A:61:E1:19:0D:56:C4:55:86:A2:93:FD:69:B5:C9:8D:20:6B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C25ABE0F4AE88F66CE8A49F2A48C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oawaYeEZDVbEVYaik_1ptcmNIGs.roa
Signing time: Mon 02 Jan 2023 02:15:01 +0000
ROA not before: Mon 02 Jan 2023 02:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c2:5a:be:0f:4a:e8:8f:66:ce:8a:49:f2:a4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1ac1a61e1190d56c45586a293fd69b5c98d206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:b6:f9:fb:59:61:ce:d6:27:00:9c:a3:bb:
28:78:b8:07:50:27:55:fc:14:50:b5:3a:d4:c4:6d:
76:0b:dd:6d:f0:d6:12:b0:c5:fd:a8:bf:6f:ee:fc:
13:48:a6:65:3f:5a:e7:f5:14:00:a8:5a:15:13:6d:
d3:fb:d7:f9:d0:c8:2a:39:59:f7:83:d3:80:aa:65:
59:48:f2:18:dd:c8:73:0a:88:0f:62:47:df:b9:d6:
73:c9:7f:92:b5:91:fb:10:b8:8a:e1:b6:9f:f4:88:
ed:2c:f0:f2:44:50:cf:6e:c7:46:b0:a2:15:69:7b:
f5:75:16:a3:33:d0:05:0f:55:bd:39:d1:72:09:ba:
1e:ab:0c:99:c6:89:c7:90:24:0b:d7:f1:bb:22:fb:
0f:4e:ed:19:b9:84:b7:81:91:c8:7f:19:0a:5a:d1:
3c:bd:79:7e:e6:a6:44:e9:17:bd:e7:40:be:e3:18:
5f:86:df:a7:77:38:8d:c0:53:ec:28:d6:18:2f:36:
69:1d:d1:c1:2a:6a:27:88:d0:76:05:d9:a8:48:d7:
74:0f:44:c0:5d:6d:6a:c8:cd:d4:3c:df:83:42:e2:
97:f4:a2:04:29:3b:73:ab:73:29:fc:2b:32:3f:40:
14:db:22:77:87:54:0e:28:f7:e2:21:c7:e0:dd:8b:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:1A:61:E1:19:0D:56:C4:55:86:A2:93:FD:69:B5:C9:8D:20:6B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oawaYeEZDVbEVYaik_1ptcmNIGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.170.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ef:e8:39:f3:f0:84:a3:c7:27:42:60:fd:d9:27:7b:ad:0a:
0f:b4:57:aa:57:17:ce:cf:13:db:33:f3:58:5f:36:5d:da:f2:
dd:5b:fa:12:d8:9b:63:b7:2a:05:30:cd:62:0a:26:7f:ac:60:
01:eb:29:f6:24:fa:fd:3d:fe:7b:8f:09:18:05:d1:99:37:69:
8a:fc:48:dd:80:e4:e8:37:cc:37:cf:20:52:63:ac:4f:d2:c8:
a0:af:83:cc:0d:96:bd:1f:cb:bd:5a:26:c4:50:5e:13:04:07:
44:4e:54:98:9f:c2:a2:91:dc:c5:17:b3:9c:1a:1f:28:a0:91:
c3:5d:be:d1:6a:b4:d3:9f:e5:4a:86:e5:e4:ae:23:d7:df:23:
a0:67:de:7e:0d:12:70:b8:b7:41:d8:69:62:3b:7a:5a:50:2c:
ce:a7:d8:54:91:0d:42:3a:bc:62:72:2c:0b:36:62:e2:ea:9c:
34:0c:17:4a:91:a6:b2:43:f9:ce:2a:b6:05:80:98:36:c2:ed:
ed:90:95:71:cd:6f:97:50:17:21:63:9c:93:6f:0a:bd:2a:ed:
72:91:34:62:47:92:f3:61:66:5d:60:e9:17:cb:8a:58:83:47:
d8:d5:75:59:28:c4:f2:31:f4:1e:db:a7:c5:2c:c9:c8:ac:d8:
d4:3a:7e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org