Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/svdpnJ6-Xw28FuoKn3SwVi0rg5w.roa
File: svdpnJ6-Xw28FuoKn3SwVi0rg5w.roa (raw, json)
Hash identifier: 5tx0r9ecBfNmW6RMqX9Kw0poxiN+EcbOrWCPycnkyjI=
Subject key identifier: B2:F7:69:9C:9E:BE:5F:0D:BC:16:EA:0A:9F:74:B0:56:2D:2B:83:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B6EA1BDB7EA77BFE6C1EBFBB6222
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/svdpnJ6-Xw28FuoKn3SwVi0rg5w.roa
Signing time: Mon 02 Jan 2023 02:14:58 +0000
ROA not before: Mon 02 Jan 2023 02:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 163.5.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b6:ea:1b:db:7e:a7:7b:fe:6c:1e:bf:bb:62:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f7699c9ebe5f0dbc16ea0a9f74b0562d2b839c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:24:8c:b9:b4:64:28:52:8f:36:22:f0:06:e5:
f1:dc:64:df:d4:77:64:32:a4:65:e0:63:da:d1:33:
60:8e:46:f2:2a:e2:95:18:f8:8b:18:1e:c5:3f:86:
bb:96:20:bd:f9:13:47:5c:40:10:de:c0:3f:bd:67:
7b:74:5a:1d:3e:0d:a8:02:40:32:4b:3e:16:14:ba:
79:40:5d:af:dc:ba:76:29:a9:60:be:8d:7f:83:13:
0c:1b:e8:3d:d9:0c:da:85:78:fd:9f:48:7c:82:ba:
f2:7f:8b:e4:c3:16:b0:f5:4c:53:f9:95:e9:8c:9a:
2d:36:6a:ef:67:4f:df:6e:d6:ab:84:be:b8:59:b4:
a4:db:32:c5:35:ee:e6:48:7d:6b:5f:6e:1d:df:cc:
20:ba:fa:b6:86:09:ac:db:51:b2:bb:fa:f4:71:1b:
16:a8:e3:e0:d3:ab:c0:6f:dd:79:0a:4d:61:a9:c3:
1d:7c:b5:8d:2c:83:e3:82:76:86:98:33:0f:09:8f:
63:84:45:d7:58:be:07:30:ec:7c:70:9e:fd:c0:68:
98:51:0a:6b:c2:f8:2b:97:4a:0a:4c:03:fb:80:33:
89:a6:70:97:8b:22:94:95:bb:52:5f:59:2e:62:10:
8f:64:95:66:c7:70:cd:72:e4:69:8d:05:f4:19:f0:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F7:69:9C:9E:BE:5F:0D:BC:16:EA:0A:9F:74:B0:56:2D:2B:83:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/svdpnJ6-Xw28FuoKn3SwVi0rg5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
29:03:68:4d:c9:0c:40:fe:c8:26:5d:4a:2d:84:50:90:4f:a2:
fe:30:b8:bc:51:10:80:b6:ef:26:89:04:c4:36:85:ba:5f:ae:
89:b0:73:eb:21:31:65:69:07:ba:e0:7f:d0:0e:09:8f:52:2f:
fd:f3:2e:43:24:50:f1:ca:11:a6:01:1b:5a:5d:0f:b4:dc:c0:
1e:48:92:89:db:99:aa:e4:a9:f7:9d:6f:9a:a4:0c:b3:77:15:
c7:73:bb:7f:27:61:8c:23:8a:85:31:fe:06:de:6e:1c:f4:a7:
86:e0:89:78:5c:d6:e8:75:f9:3f:3b:f6:26:e2:1a:0b:56:c9:
69:af:ae:ac:e6:85:73:cb:ed:10:80:b5:a4:3c:95:ca:87:ba:
7a:c9:15:f6:fd:d6:fe:fe:5b:2c:3f:82:c1:1f:29:13:83:3d:
cb:c5:1f:58:f9:83:24:05:33:b6:6f:34:c4:b8:87:4a:0a:a8:
4d:1f:a6:3e:66:ec:a9:d5:50:dc:c7:e3:c5:0a:c5:d3:17:df:
50:30:42:5b:46:30:f3:b3:90:27:4c:5f:a2:22:28:65:4f:69:
41:26:72:77:1b:0d:fe:76:d3:0e:92:f1:3b:85:2c:66:6a:8f:
2d:af:20:c9:f8:29:68:63:4e:7d:4b:c1:7a:cc:bf:a7:ed:0b:
84:bc:6d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 23:03:55 2023 by rpki-client on console-ams.rpki-client.org