Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/reQnfovSKOLEkVbQqcUe2_MdFXY.roa
File: reQnfovSKOLEkVbQqcUe2_MdFXY.roa (raw, json)
Hash identifier: NOWem6Sb6+Hl9m7V61amHH/wXe0JWpvq82WmiIV0NdY=
Subject key identifier: AD:E4:27:7E:8B:D2:28:E2:C4:91:56:D0:A9:C5:1E:DB:F3:1D:15:76
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018968AF01426F6A38306F28D19F99072B24
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/reQnfovSKOLEkVbQqcUe2_MdFXY.roa
Signing time: Tue 18 Jul 2023 11:07:26 +0000
ROA not before: Tue 18 Jul 2023 11:07:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:af:01:42:6f:6a:38:30:6f:28:d1:9f:99:07:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 18 11:07:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ade4277e8bd228e2c49156d0a9c51edbf31d1576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:11:17:8d:a1:9c:17:18:c9:48:b4:19:81:
cc:c0:88:e2:c3:15:f9:1a:b2:96:df:0c:19:53:a0:
cb:29:e4:3b:0d:98:84:cd:fe:3c:01:b1:a3:65:c9:
b2:82:57:58:ff:c9:08:68:fd:d1:fc:86:bc:33:51:
64:a1:f1:f6:9c:88:cd:0e:b9:70:dd:46:09:07:c5:
a9:a3:f5:83:ea:5a:0a:20:c4:b3:2c:92:b1:b0:92:
59:f2:88:4c:6a:06:4e:9e:5a:55:c5:5c:b8:be:3f:
bf:2b:2c:b5:b7:de:a1:df:a6:0d:9c:df:29:ad:2b:
70:3e:e3:77:9d:4f:2b:42:4a:cd:63:da:4e:07:ae:
c5:69:d5:0f:99:46:ec:14:87:03:40:2a:ba:0e:ef:
15:d2:af:7b:fa:8e:ca:af:aa:40:86:9f:8b:00:d5:
2f:e7:b7:e0:22:6d:c5:2f:9e:34:5d:c8:4d:9f:45:
88:22:48:14:a6:b9:d2:ed:14:8a:04:a8:8c:7f:ed:
e5:f6:f2:f5:1e:ba:3e:37:83:2e:a8:ce:b1:e6:d0:
f2:b4:d0:63:07:eb:da:fd:72:3d:27:2c:91:cb:01:
da:c5:28:97:8e:49:1d:04:9c:f4:d7:34:d9:73:56:
55:1f:e3:21:f4:05:a7:e3:de:47:59:93:e8:27:e9:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:E4:27:7E:8B:D2:28:E2:C4:91:56:D0:A9:C5:1E:DB:F3:1D:15:76
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/reQnfovSKOLEkVbQqcUe2_MdFXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.166.0/24
Signature Algorithm: sha256WithRSAEncryption
01:1e:a9:86:79:07:2d:ee:5d:af:12:1d:8d:32:26:8a:c7:cd:
a8:1a:37:53:b2:6c:9d:d8:a7:f1:b8:1d:ce:32:03:11:d9:64:
d4:a8:ce:84:cf:95:f0:b5:05:34:29:f6:24:85:ee:37:d3:ed:
2a:5a:78:ec:03:5e:9b:e1:bf:00:a9:1a:f5:c8:52:a9:c8:8e:
7c:c4:49:71:7b:29:b4:50:65:f1:6b:d5:61:03:8b:b4:af:34:
eb:be:98:d1:53:d5:c0:cb:50:b1:12:fb:1c:20:bd:15:75:ef:
7f:8b:da:96:9a:3a:4f:ac:b1:1e:e3:77:67:ea:4b:84:b1:f4:
56:e0:60:29:db:d3:7c:ba:0d:1f:5a:32:31:a7:3e:51:0f:01:
e1:5e:bc:73:db:6c:f9:73:27:6d:d7:30:93:06:63:43:f9:4a:
ca:ee:31:d5:d4:c1:15:50:ef:76:e4:e8:a3:24:ce:48:f8:fa:
ee:92:d2:15:86:34:93:76:4d:c0:98:15:12:de:f2:ab:65:9d:
31:c9:aa:20:2e:96:54:fc:1b:3e:c5:2f:a7:9d:4b:4f:f4:45:
a6:f6:9e:5d:a8:8b:4d:15:04:b0:d5:c0:66:30:8a:c5:50:82:
a7:4c:70:de:6a:ae:43:6f:4f:3c:62:70:be:ae:e1:00:f3:1e:
cd:ff:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 22:00:11 2023 by rpki-client on console-ams.rpki-client.org