Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u7RPj2i9Hrw41ihmCfAbW42Rv60.roa
File: u7RPj2i9Hrw41ihmCfAbW42Rv60.roa (raw, json)
Hash identifier: UvbgKPmofryYGTKR5H6F+a5hRjLJG+/zhtTyb1ynIr0=
Subject key identifier: BB:B4:4F:8F:68:BD:1E:BC:38:D6:28:66:09:F0:1B:5B:8D:91:BF:AD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018AC3B90612283356AD8FF0D6F371BD947D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u7RPj2i9Hrw41ihmCfAbW42Rv60.roa
Signing time: Sat 23 Sep 2023 20:26:37 +0000
ROA not before: Sat 23 Sep 2023 20:26:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202992
IP address blocks: 163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:b9:06:12:28:33:56:ad:8f:f0:d6:f3:71:bd:94:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 20:26:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbb44f8f68bd1ebc38d6286609f01b5b8d91bfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:24:a3:76:88:04:2b:1b:f1:a9:3a:ff:dc:a9:
31:77:27:f2:d9:88:8b:e2:3c:4d:e5:9f:e3:94:bd:
56:f4:0d:62:98:22:aa:92:43:ee:48:cc:be:11:cb:
1c:92:c9:25:35:1a:36:55:fa:07:d6:c3:9d:15:d0:
03:d3:a7:f3:54:b7:51:b0:07:c4:9c:95:fa:93:7b:
1f:1b:3d:e7:d4:e7:35:02:11:05:d6:85:fd:cc:2b:
66:38:8f:64:32:9d:91:98:05:62:43:8a:6b:58:7d:
35:e8:72:a3:62:0a:a2:23:d0:e5:a9:a3:91:ec:96:
e5:a3:d6:d9:7c:ad:12:fe:0e:02:2c:e7:1d:35:70:
1e:c5:b8:42:2d:da:e7:7e:25:69:51:26:17:7d:d5:
19:e4:04:6f:7e:b7:5f:b8:19:9f:66:e1:ac:dd:39:
be:61:db:de:9f:56:50:bd:94:3d:0d:1d:4a:a3:c5:
b4:5c:a5:8b:4e:e4:84:5a:af:d8:e5:d7:5b:bc:d5:
2c:38:e8:7f:75:76:01:fe:71:cb:62:7a:a6:1c:d2:
bd:90:46:75:cc:e0:1b:52:1d:9b:29:61:d4:8d:43:
f6:b1:89:ec:9e:fb:16:ce:6c:e8:5f:37:6d:8e:99:
ba:cd:ae:12:98:ab:76:46:f2:a3:76:a2:fd:d6:b8:
54:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B4:4F:8F:68:BD:1E:BC:38:D6:28:66:09:F0:1B:5B:8D:91:BF:AD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/u7RPj2i9Hrw41ihmCfAbW42Rv60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
44:3f:e2:5f:03:85:38:3c:0a:ff:55:6e:50:78:e1:83:fb:2e:
1b:a0:15:59:af:69:4e:d3:00:0f:e7:5a:de:d3:80:a8:18:b7:
7e:2d:b0:b0:c1:be:3a:09:47:b0:11:53:ce:40:0d:b0:6d:5a:
71:1d:0e:24:69:e0:21:98:1e:1a:ad:be:f2:5d:bb:af:50:e3:
e1:d7:4f:0f:b5:58:3a:27:e3:4f:35:4a:0e:a0:d6:5c:4c:1b:
9e:30:73:b8:5e:5e:3a:4f:cf:36:80:ec:66:ef:a0:fd:24:ed:
43:a2:e0:ab:84:87:66:71:8f:50:4a:45:26:36:18:6a:0e:23:
1c:e3:20:c7:93:f3:3f:b5:01:a2:be:b0:f2:14:ef:10:7d:9b:
ce:1c:1c:4e:d8:bb:ec:f7:bf:3a:91:40:ee:ed:47:04:1a:13:
17:c8:db:e1:8f:3f:1b:ac:ec:ca:5e:71:63:2a:d8:b1:03:e7:
eb:ef:92:c7:6c:c3:fa:03:08:6b:c1:f7:4b:9e:b5:c7:78:74:
b5:d8:13:ad:35:7b:6c:d8:b4:39:e8:94:3a:fc:29:7b:28:96:
38:27:b4:1c:03:40:37:d6:01:27:d4:3b:7b:08:7c:a7:30:c4:
d2:1c:df:9f:8f:16:47:c8:c3:fb:09:76:3b:88:3a:c5:6c:13:
b3:99:db:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 18:25:33 2023 by rpki-client on console-ams.rpki-client.org