Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sGX-9UCX3bwzphOuwlQrMRqfmQA.roa
File: sGX-9UCX3bwzphOuwlQrMRqfmQA.roa (raw, json)
Hash identifier: 2aZ+iyJO/sV4ifQZkJH2kkfsq9q54pjRmnY9S0Zp3/g=
Subject key identifier: B0:65:FE:F5:40:97:DD:BC:33:A6:13:AE:C2:54:2B:31:1A:9F:99:00
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189B78389E50B9F8E1580A7B294F61343CE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sGX-9UCX3bwzphOuwlQrMRqfmQA.roa
Signing time: Wed 02 Aug 2023 18:29:58 +0000
ROA not before: Wed 02 Aug 2023 18:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 163.5.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b7:83:89:e5:0b:9f:8e:15:80:a7:b2:94:f6:13:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 2 18:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b065fef54097ddbc33a613aec2542b311a9f9900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:78:a7:71:37:02:a3:09:ff:6d:4f:52:37:
dd:fa:10:95:6c:60:1f:9d:28:5e:1d:fb:c5:29:6c:
44:59:8a:ca:73:4b:07:59:ea:19:6a:f8:21:12:e2:
35:36:7f:fe:6b:2a:45:60:04:f3:5a:26:ab:f9:c6:
d6:18:6a:c7:1b:65:f0:d0:f8:a8:df:ff:b5:bd:68:
d6:d6:50:38:00:3a:c2:d3:26:25:e4:f9:28:03:02:
c1:fc:e9:ec:68:40:3a:6c:b7:0d:09:36:e9:2f:af:
5c:b2:b9:11:66:d3:96:5d:2f:de:3a:31:e5:55:a8:
da:35:81:10:c2:55:b9:98:59:3c:9d:a9:b3:b9:c5:
6f:76:49:14:f8:c2:b6:b7:1e:3c:eb:c4:1e:bb:85:
2c:76:dd:e6:7d:44:d2:08:c3:3b:04:51:ea:09:42:
18:cb:60:46:07:f5:3f:a0:79:f6:70:04:f8:80:c9:
f0:8c:4e:f2:0e:ef:68:65:ab:d4:e9:26:3c:d4:12:
dc:58:aa:22:a5:11:5f:da:9b:91:48:2a:af:4f:a0:
1c:f3:50:3e:92:58:ae:8d:6e:f0:2e:3b:54:72:d9:
1c:25:b4:aa:8a:34:db:3a:31:8f:71:2d:cb:2b:cc:
6b:9a:85:12:ef:b8:06:db:28:08:14:e4:ba:5e:44:
c9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:65:FE:F5:40:97:DD:BC:33:A6:13:AE:C2:54:2B:31:1A:9F:99:00
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/sGX-9UCX3bwzphOuwlQrMRqfmQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.132.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:cb:fd:c2:f0:f5:4b:11:46:ba:1f:18:0a:da:5a:74:23:b8:
2b:ae:2b:58:79:c5:38:70:af:50:29:6c:c1:19:b7:87:f0:aa:
21:9c:64:3f:5d:c0:07:0b:f1:76:03:4d:95:f1:1d:e9:cc:79:
23:bc:60:9d:ce:cf:9f:5d:db:59:88:59:ed:56:af:0b:1e:3e:
c9:84:9c:2c:d7:a2:0b:62:1f:d8:c2:16:19:1c:00:73:67:17:
90:bb:b0:cb:8e:95:fd:69:8e:93:b8:e6:87:51:d4:f8:d7:14:
9e:db:29:e5:da:5d:c6:91:77:93:ba:15:01:99:68:7c:4b:cb:
99:f1:0c:38:53:b8:9f:db:c2:55:51:6f:fb:21:f6:7a:66:8c:
e6:0f:6f:e2:1c:cc:3e:01:70:61:5c:5f:b0:db:9a:20:b5:8f:
f9:c5:5c:e9:2e:e3:81:b4:ba:ca:73:62:a1:f0:2d:b0:48:51:
97:b0:e3:fa:6a:68:4d:ce:af:7b:8d:e6:b7:61:f2:e8:f2:ba:
79:6a:83:fa:5d:de:1a:d3:5f:7a:43:31:b5:be:2c:a8:c3:64:
8a:ac:f0:86:96:f6:71:3a:48:1a:47:2d:73:d6:a6:c3:27:e2:
bd:d4:ce:ad:65:1a:20:4a:93:a7:a6:64:b2:4a:05:e5:3e:50:
99:1a:7d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 11:50:50 2023 by rpki-client on console-fra.rpki-client.org