Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tw7d3t4DfV6ugkaKT7m3SGCoXjE.roa
File: tw7d3t4DfV6ugkaKT7m3SGCoXjE.roa (raw, json)
Hash identifier: KB1l0f5XtxuIQtL0cffPmEImOzAruvy4oto5xXwaBr8=
Subject key identifier: B7:0E:DD:DE:DE:03:7D:5E:AE:82:46:8A:4F:B9:B7:48:60:A8:5E:31
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC403E3B0857DF56A05E2448B24F451EC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tw7d3t4DfV6ugkaKT7m3SGCoXjE.roa
Signing time: Mon 01 Jan 2024 07:53:58 +0000
ROA not before: Mon 01 Jan 2024 07:53:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 163.5.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:03:e3:b0:85:7d:f5:6a:05:e2:44:8b:24:f4:51:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 07:53:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b70edddede037d5eae82468a4fb9b74860a85e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:28:72:06:e0:a2:da:69:19:e4:be:0c:d3:
69:c7:39:ba:a1:74:e7:32:18:ff:b8:15:c6:16:ef:
27:2a:ff:bf:31:c6:90:29:7d:79:57:15:4a:51:ab:
1a:2f:10:5b:49:3c:52:a0:2a:da:65:73:16:8d:5d:
03:02:9d:4e:d0:e8:8a:d1:0b:55:b7:5a:4c:39:49:
33:4a:df:09:1b:fd:8a:68:20:39:89:fc:6c:e0:bd:
28:95:6d:59:51:06:32:ba:19:19:9e:c6:81:b4:89:
85:69:f6:bc:2b:87:81:2a:92:ae:33:6f:73:57:03:
b5:e3:dd:8d:20:b0:14:bf:d7:f5:fb:f1:c0:4a:62:
a7:d1:cc:db:22:df:41:be:ff:48:2a:af:06:5f:c7:
5e:25:ef:42:be:c9:32:5b:24:b9:c7:d3:f7:ac:9a:
7a:4f:c1:aa:87:86:6e:1d:fb:82:c1:bf:62:2e:ac:
5d:8b:47:fc:e5:8a:5f:28:9d:da:2b:bd:e1:f3:c2:
ad:8c:df:05:f8:ba:e3:76:ab:b7:99:95:c6:89:06:
40:32:4c:7a:02:f7:c4:9c:fc:9c:ba:de:1b:26:a2:
45:ac:e5:e1:5c:9a:42:3b:f5:38:d1:d8:eb:5b:40:
2c:2f:7c:f8:b6:a4:05:04:51:97:11:48:40:c7:f6:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0E:DD:DE:DE:03:7D:5E:AE:82:46:8A:4F:B9:B7:48:60:A8:5E:31
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tw7d3t4DfV6ugkaKT7m3SGCoXjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
Signature Algorithm: sha256WithRSAEncryption
56:62:0a:48:a5:0e:7f:df:5e:14:2f:9d:ee:da:3f:49:4d:37:
27:d1:f9:94:05:33:85:04:3a:1b:5c:00:59:18:b9:58:38:b1:
3a:8e:6c:0f:ce:7e:c9:19:5f:34:44:32:6c:74:3b:b5:56:7e:
e2:91:35:f4:db:2c:63:3c:0f:99:fe:a6:63:4e:c4:a8:dd:0f:
ce:55:cf:93:b6:e7:9b:36:89:c0:2f:95:12:ef:57:b8:1a:a7:
17:80:7d:78:f0:a9:c2:aa:2f:2b:15:a2:8a:62:33:07:26:89:
4f:bb:3a:8b:e8:da:a7:0e:b6:7c:57:b7:3b:06:ea:64:db:55:
45:68:a9:4c:64:94:50:05:c2:38:9c:07:a9:ce:25:99:f2:25:
24:4a:76:14:24:b7:02:63:27:1f:16:d4:c4:bd:f5:22:bf:52:
1c:70:00:1e:8b:a5:7e:b5:b5:eb:5b:2e:cd:fa:3f:b5:93:b8:
36:14:fe:42:82:2b:a4:fe:7f:4d:37:45:f5:9b:fc:80:00:5c:
bb:79:f9:13:af:93:8e:d4:7e:bd:da:c9:ef:d0:ac:28:be:46:
52:0b:dc:0f:2a:e9:f6:c6:44:51:db:62:b3:f3:fd:fa:4d:10:
e2:ba:1a:1d:58:7b:16:af:f0:fc:68:8a:e2:c1:a3:d0:fc:d4:
bf:f6:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org