Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uDIZKI1JLth0DgO0vcRSbeK2ERY.roa
File: uDIZKI1JLth0DgO0vcRSbeK2ERY.roa (raw, json)
Hash identifier: LBVE3uMMJ9zlNEqCtVEHLJe27LskQTz12C0PogIh5HQ=
Subject key identifier: B8:32:19:28:8D:49:2E:D8:74:0E:03:B4:BD:C4:52:6D:E2:B6:11:16
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018761CC77A76E21C17AE9F89C966E864308
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uDIZKI1JLth0DgO0vcRSbeK2ERY.roa
Signing time: Sat 08 Apr 2023 16:56:42 +0000
ROA not before: Sat 08 Apr 2023 16:56:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49468
IP address blocks: 163.5.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:cc:77:a7:6e:21:c1:7a:e9:f8:9c:96:6e:86:43:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 8 16:56:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b83219288d492ed8740e03b4bdc4526de2b61116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5e:f7:14:1f:12:26:00:52:5d:3f:f8:bc:01:
7a:49:fd:7d:e4:0c:df:57:67:c0:35:d3:94:8f:f8:
ee:3c:57:50:4b:90:f1:a9:18:30:a2:8e:6e:e6:6d:
7d:7d:7a:44:b9:76:da:45:16:72:38:71:7d:1e:10:
62:8d:4b:9a:d7:9d:1b:d6:8d:8b:5c:57:ec:a1:9d:
83:b8:13:8b:40:45:2a:c1:07:4e:61:e6:f9:8e:99:
43:34:f9:28:eb:f2:32:f9:07:04:53:b3:31:52:23:
07:01:c5:b6:cc:94:2e:cc:45:4c:de:89:0a:4e:3e:
83:28:cf:26:7a:89:d3:b6:c2:09:e6:65:32:c2:4d:
13:29:94:90:5e:19:b8:aa:b8:b3:03:04:ba:57:4f:
22:c6:ec:2a:80:4b:05:7a:62:45:70:7d:50:df:db:
de:84:ae:e4:c9:ca:c1:86:a1:a5:33:49:8b:e5:17:
fe:ea:6c:e7:83:f1:96:15:80:95:59:e4:da:78:d4:
83:b1:69:59:15:54:5e:fd:24:e5:c1:7f:3c:5a:a2:
62:67:eb:27:99:01:b2:32:33:2a:15:bd:fb:c1:7a:
23:79:90:e4:32:4c:3c:b2:52:fe:6a:0a:e8:0a:7a:
07:67:77:64:e0:5c:92:f0:3a:9d:7c:5f:5c:68:d8:
78:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:32:19:28:8D:49:2E:D8:74:0E:03:B4:BD:C4:52:6D:E2:B6:11:16
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uDIZKI1JLth0DgO0vcRSbeK2ERY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
06:83:fb:26:5e:96:fa:2e:d0:6f:f4:28:76:89:c4:0c:e4:d7:
f6:e4:ec:18:ee:c1:d1:e8:a2:e5:29:18:57:3b:79:75:d6:91:
f1:d8:b2:b2:42:76:5d:30:18:fb:79:ef:61:79:7e:e6:f3:be:
03:0c:8d:de:b8:ef:cf:8d:b7:25:a0:71:4c:99:b9:db:38:5c:
95:fb:7f:f2:80:2e:19:be:77:b1:89:9d:c6:2f:88:95:f9:a6:
4e:44:b1:d2:9d:65:47:78:d0:c5:7b:17:22:5a:8c:bc:5e:0e:
69:e7:32:38:af:39:2c:41:b7:f1:15:cc:1e:72:42:7d:2f:08:
bf:3e:89:55:5f:23:eb:db:96:3a:92:55:57:53:63:33:ef:59:
4d:17:be:2c:6d:fd:b2:59:aa:5b:5e:40:fa:2b:52:94:b7:4d:
fd:62:17:ba:f6:0d:6c:04:00:b6:5c:21:7f:4c:79:45:52:bf:
9a:d0:bc:64:24:1d:d1:93:95:ce:51:13:19:75:b1:d4:2b:29:
9b:34:18:e2:25:58:2e:96:c9:8c:3d:e2:a6:c4:bb:6a:36:62:
37:0f:d3:1b:25:89:52:67:40:37:bd:71:90:b4:50:38:04:5e:
9a:0f:12:09:b7:92:4f:00:4d:15:e5:3f:64:41:26:fa:55:09:
bc:17:31:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdhzHenbiHBeun4nJZuhkMIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNDA4MTY1NjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODMyMTkyODhkNDkyZWQ4NzQwZTAzYjRiZGM0NTI2ZGUyYjYxMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV73FB8SJgBSXT/4vAF6Sf195Azf
V2fANdOUj/juPFdQS5DxqRgwoo5u5m19fXpEuXbaRRZyOHF9HhBijUua150b1o2L
XFfsoZ2DuBOLQEUqwQdOYeb5jplDNPko6/Iy+QcEU7MxUiMHAcW2zJQuzEVM3okK
Tj6DKM8meonTtsIJ5mUywk0TKZSQXhm4qrizAwS6V08ixuwqgEsFemJFcH1Q39ve
hK7kycrBhqGlM0mL5Rf+6mzng/GWFYCVWeTaeNSDsWlZFVRe/STlwX88WqJiZ+sn
mQGyMjMqFb37wXojeZDkMkw8slL+agroCnoHZ3dk4FyS8DqdfF9caNh4jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgyGSiNSS7YdA4DtL3EUm3ithEWMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvdURJWktJMUpMdGgwRGdPMHZjUlNiZUsyRVJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW4MA0G
CSqGSIb3DQEBCwUAA4IBAQAGg/smXpb6LtBv9Ch2icQM5Nf25OwY7sHR6KLlKRhX
O3l11pHx2LKyQnZdMBj7ee9heX7m874DDI3euO/PjbcloHFMmbnbOFyV+3/ygC4Z
vnexiZ3GL4iV+aZORLHSnWVHeNDFexciWoy8Xg5p5zI4rzksQbfxFcweckJ9Lwi/
PolVXyPr25Y6klVXU2Mz71lNF74sbf2yWapbXkD6K1KUt039Yhe69g1sBAC2XCF/
THlFUr+a0LxkJB3Rk5XOURMZdbHUKymbNBjiJVgulsmMPeKmxLtqNmI3D9MbJYlS
Z0A3vXGQtFA4BF6aDxIJt5JPAE0V5T9kQSb6VQm8FzE5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org