Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/slEUDBW5ifVwcoZHDqoqonVTwHo.roa
File: slEUDBW5ifVwcoZHDqoqonVTwHo.roa (raw, json)
Hash identifier: doJexK9T69BSvHhVCVkjbtTZ2cjyvGHCe1gTq5YN8u0=
Subject key identifier: B2:51:14:0C:15:B9:89:F5:70:72:86:47:0E:AA:2A:A2:75:53:C0:7A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B6FB63E7C05D09FCCA37850D28CB56D3C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/slEUDBW5ifVwcoZHDqoqonVTwHo.roa
Signing time: Fri 27 Oct 2023 05:58:16 +0000
ROA not before: Fri 27 Oct 2023 05:58:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 163.5.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:b6:3e:7c:05:d0:9f:cc:a3:78:50:d2:8c:b5:6d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 05:58:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b251140c15b989f5707286470eaa2aa27553c07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c5:f2:e2:36:6a:80:61:29:25:2c:dc:8c:17:
db:2c:24:80:49:75:4a:f1:6e:9d:a8:82:f8:ea:f7:
a2:7a:82:64:ed:e5:8d:14:4b:f6:61:ff:e1:bd:14:
a4:3d:a3:3d:c8:f4:72:f9:ab:d1:28:6d:61:e6:a7:
b0:41:19:da:4c:4d:d6:7f:35:f2:e7:a9:99:5c:12:
ea:7b:6e:d7:af:bd:ea:8f:32:40:6f:c0:d0:41:6e:
90:a4:5a:7d:da:ac:10:7f:87:4b:88:21:d6:f9:9b:
8c:cf:82:d6:32:8b:bd:15:22:45:49:0f:01:a8:b6:
74:77:96:4c:15:eb:a6:ee:8c:4a:a9:e8:6b:42:85:
24:a3:7a:b2:b6:99:3f:a5:1f:3a:c1:94:6b:1c:41:
43:50:ce:73:6e:74:d5:24:a6:f9:57:2e:ab:a0:71:
49:3a:cb:0f:b7:b8:2d:81:bf:40:c5:b2:db:e2:50:
58:e9:ea:16:03:12:97:2f:95:aa:fe:ea:42:9c:d1:
fe:9f:35:66:9f:af:c2:37:83:75:0d:ef:b1:54:7f:
17:18:41:16:e7:d3:3d:3f:80:5d:bf:bb:9d:ab:16:
7c:14:09:dd:44:bb:56:b3:c4:87:d4:16:6c:24:0a:
d6:13:7e:65:06:04:4d:73:01:33:93:78:82:61:29:
1a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:51:14:0C:15:B9:89:F5:70:72:86:47:0E:AA:2A:A2:75:53:C0:7A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/slEUDBW5ifVwcoZHDqoqonVTwHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.212.0/24
Signature Algorithm: sha256WithRSAEncryption
26:06:71:d5:e5:bd:b5:6e:da:2a:66:d0:1c:1c:ca:5f:5a:e8:
58:08:b1:9b:db:df:b9:46:d7:bb:c4:0f:d9:c1:2a:48:80:6b:
fd:2b:35:a5:78:ff:39:ff:ce:f1:da:95:f1:7e:0f:10:c1:1a:
6b:ae:b3:c7:db:a3:e9:88:f4:4c:03:d7:91:1b:f8:89:43:d0:
b4:96:ee:25:7b:e0:99:06:24:b7:4a:95:ff:46:1c:12:bc:8f:
3d:fe:ce:94:b2:41:f2:f8:d9:7a:7b:b4:12:27:e7:1c:41:29:
2f:65:0e:24:ec:b8:ca:cc:27:a5:ea:c2:fa:fd:6b:db:3d:c8:
b1:ec:76:9b:be:b0:5a:87:c0:9c:45:1c:c1:53:a6:01:e0:8c:
a0:5c:43:00:b2:18:ee:b2:f5:27:16:ad:2c:85:9b:45:a1:0f:
64:7c:d6:3e:ba:ad:e3:e5:bd:e6:50:a1:49:73:9a:99:cd:a1:
64:0c:3f:8e:c3:1e:ab:03:72:4f:67:1a:33:fd:d5:c1:57:42:
10:54:63:04:03:cc:c5:ef:b1:4f:6b:4e:94:4a:e6:af:25:62:
f2:ab:5d:02:cc:fb:ca:84:56:3d:20:a0:c6:f0:72:d8:f2:67:
81:bb:c6:23:e9:3d:03:63:3e:40:e4:4e:a8:2a:81:a7:ea:11:
9a:15:11:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 10:20:58 2023 by rpki-client on console-ams.rpki-client.org