Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u4pXoxgqJiheqxdIwOp4G7m1DL4.roa
File: u4pXoxgqJiheqxdIwOp4G7m1DL4.roa (raw, json)
Hash identifier: XRWPllJcxw+pefscP1nyQBZSFkvgf80wZRH3rN3aUCg=
Subject key identifier: BB:8A:57:A3:18:2A:26:28:5E:AB:17:48:C0:EA:78:1B:B9:B5:0C:BE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01881BCE4291E7C0CB12B8FE43B04EF18709
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u4pXoxgqJiheqxdIwOp4G7m1DL4.roa
Signing time: Sun 14 May 2023 19:48:02 +0000
ROA not before: Sun 14 May 2023 19:48:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207992
IP address blocks: 163.5.121.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1b:ce:42:91:e7:c0:cb:12:b8:fe:43:b0:4e:f1:87:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 14 19:48:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb8a57a3182a26285eab1748c0ea781bb9b50cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:d5:d4:35:90:12:7d:5f:96:30:e0:70:45:
90:9e:c4:78:08:f9:51:1f:e1:be:3a:53:a3:5a:e4:
4b:b7:74:71:f9:ad:69:bb:09:e8:e9:44:0a:81:26:
51:0c:41:94:82:f0:d3:6f:d3:20:8e:ef:df:ef:76:
ef:64:b0:5c:0f:32:d1:94:f9:98:b6:99:b4:74:45:
e2:6f:f0:31:34:e1:13:3e:11:4b:fc:37:43:76:b6:
5a:99:95:81:cb:02:cd:10:15:f2:1f:89:ad:2e:2a:
6f:d1:31:5e:d9:e4:74:8e:24:f4:42:84:7a:ef:69:
12:ef:8e:e2:1d:32:44:a3:e3:01:5a:7c:6a:8d:18:
9f:ea:27:eb:6e:29:6f:f2:86:0e:ab:24:b6:34:af:
4f:b2:21:04:ef:c9:64:f1:bd:d7:c8:9c:bf:98:7e:
ec:19:fa:25:7e:d8:e6:ec:ed:96:5c:32:27:bf:53:
3c:31:cd:2d:19:0e:de:72:a5:88:f9:24:28:a1:23:
bc:8f:cd:a8:95:51:85:34:09:7b:45:8a:b8:45:2b:
fa:82:ba:1c:ac:c9:d5:25:d8:43:64:5b:c4:d5:7f:
df:47:a1:cc:69:a5:8e:9b:ae:70:87:72:57:0f:79:
ae:bc:f4:fb:21:e3:ee:16:6a:cd:62:1f:28:41:58:
4f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8A:57:A3:18:2A:26:28:5E:AB:17:48:C0:EA:78:1B:B9:B5:0C:BE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u4pXoxgqJiheqxdIwOp4G7m1DL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.121.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:60:f1:b1:49:2d:33:85:25:28:89:b4:2c:c6:87:a8:eb:ce:
5e:79:b2:ab:d9:49:87:f4:87:26:c2:a2:41:84:38:ca:9b:7b:
cf:b1:6b:ed:43:54:c1:04:7b:ad:e1:26:a9:3c:47:ed:f6:92:
35:fa:81:23:8a:af:9e:43:0a:ce:5c:bb:df:c2:b8:ef:f3:55:
26:d9:e2:e0:1e:62:b4:c0:d3:4e:a8:c0:e9:85:2d:70:22:22:
4c:ad:22:b2:3b:d3:a2:ba:34:67:1a:f3:8e:be:ea:5b:3a:65:
3a:50:db:45:40:52:d9:e6:61:fa:41:d6:b6:41:3b:cc:b4:52:
a6:36:ac:32:d2:02:a8:d5:8f:3d:c6:30:2f:ec:ed:1d:a0:53:
33:a5:02:3a:52:cf:d7:03:b4:23:5c:1c:53:69:8e:f3:17:81:
89:b5:b6:90:6b:ee:b5:a3:9e:5a:0c:56:f3:e8:37:99:26:62:
f3:ae:81:60:bd:33:41:be:fb:51:d2:9c:10:11:1b:8b:67:33:
fc:56:a4:a8:dc:b5:a7:da:c0:b6:64:fd:3e:6e:2a:c0:a0:00:
e4:71:47:5a:76:76:19:d9:b8:24:cb:a5:8c:9c:be:b1:d8:2b:
00:b5:aa:40:e5:43:97:b2:25:f5:44:ae:2d:22:2e:fa:65:fd:
a1:23:38:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 13:19:31 2023 by rpki-client on console-ams.rpki-client.org