Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/r9EeuZN8wXSNl78pVemyEvYmIag.roa
File: r9EeuZN8wXSNl78pVemyEvYmIag.roa (raw, json)
Hash identifier: DB4GePfb+VakRGIuTjHKFhzymBwev0yBdEPH6lvKR3I=
Subject key identifier: AF:D1:1E:B9:93:7C:C1:74:8D:97:BF:29:55:E9:B2:12:F6:26:21:A8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B6A8BCB80398069233BE07328C38
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/r9EeuZN8wXSNl78pVemyEvYmIag.roa
Signing time: Mon 02 Jan 2023 02:14:58 +0000
ROA not before: Mon 02 Jan 2023 02:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b6:a8:bc:b8:03:98:06:92:33:be:07:32:8c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd11eb9937cc1748d97bf2955e9b212f62621a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:b2:23:52:4b:fe:03:a1:ed:44:4a:20:73:
c9:9d:e2:84:37:cf:74:04:74:49:a4:84:4f:f6:3c:
9a:8e:c4:36:63:6d:c8:f2:33:09:34:30:49:5b:51:
cf:a9:bd:ef:84:bd:74:1d:64:df:77:19:6e:7c:64:
ad:e6:c6:7b:17:21:fd:f4:14:7e:7a:56:e0:07:fb:
41:9f:f2:6d:09:3b:6b:6f:8b:2a:c3:36:1a:3d:c5:
6d:c0:af:1f:fb:f9:b2:6e:9e:c8:60:ef:04:a7:78:
0d:8d:bd:15:5e:76:0d:ec:fd:71:0f:40:a4:6d:93:
a4:27:88:60:40:2c:b6:c6:49:2f:ea:83:e9:eb:78:
e2:f2:59:58:6a:c3:34:19:d0:14:ba:e1:d5:a3:47:
29:c8:43:3d:dd:91:f2:27:0b:a6:83:1e:3d:5d:f1:
fa:ba:55:51:ea:cc:28:f8:fa:e0:21:0e:51:51:24:
f1:ff:1e:90:5e:c3:fb:22:c1:10:e6:e0:31:fe:ec:
bb:1d:2a:e5:4b:25:57:68:c3:44:50:d8:68:d9:47:
59:fd:37:3b:a8:f2:9a:2e:4c:f8:ca:bc:7e:95:b4:
4f:be:71:c2:34:32:3a:a6:63:ac:71:83:08:96:08:
15:17:de:2f:d9:f2:9d:e2:8e:2a:e2:e4:60:f3:54:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:1E:B9:93:7C:C1:74:8D:97:BF:29:55:E9:B2:12:F6:26:21:A8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/r9EeuZN8wXSNl78pVemyEvYmIag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:45:28:68:ec:6b:c1:91:8c:0b:70:37:c2:b7:ab:93:bd:61:
d5:68:a9:19:eb:f4:d1:b1:05:79:a1:07:89:35:6b:b5:ee:e6:
b7:07:d5:f4:91:1d:8b:02:b7:dc:de:93:38:29:8d:2e:0e:4b:
4f:7f:9c:b9:6d:83:2e:09:e1:79:86:b0:a6:e0:53:f3:5a:46:
4f:96:36:54:98:41:11:17:db:b4:8e:e0:5b:ec:bc:44:35:a8:
59:b1:ca:56:0e:4a:48:93:51:86:eb:d2:39:d4:e0:f8:fd:c2:
01:5a:e7:b0:85:6f:b6:ea:28:27:6f:00:5d:b6:ef:d2:44:0d:
3d:f8:4c:20:33:94:e0:e1:d2:15:cf:e7:a7:9c:58:a8:6c:4d:
24:e4:98:83:2f:f4:71:e9:d2:ad:8b:a9:df:54:38:5d:5e:33:
2a:5c:2e:2a:0e:d3:57:dd:70:6d:b5:ff:e4:11:1f:03:b7:48:
f4:0e:be:c5:97:2a:7b:65:2b:9e:27:46:a6:8e:a5:cc:f0:28:
9c:86:20:46:63:bb:22:6a:29:d8:99:81:75:4e:68:cc:75:07:
69:9a:16:f6:07:82:12:f7:3e:97:b4:e1:4c:66:a9:0e:f3:2e:
80:25:64:d3:ee:9e:e4:37:4f:71:f1:e5:76:92:cb:bd:0e:80:
21:e7:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 23:03:55 2023 by rpki-client on console-ams.rpki-client.org