Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uHCUZY1IPYiIMOcmuE-72uUzevM.roa
File: uHCUZY1IPYiIMOcmuE-72uUzevM.roa (raw, json)
Hash identifier: YgO4CFIsiLaWWdH0iHSn22oPFiwGU8qOnS9a6s1e6zI=
Subject key identifier: B8:70:94:65:8D:48:3D:88:88:30:E7:26:B8:4F:BB:DA:E5:33:7A:F3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189265E248DCCF6C3D93858E014C66EDF9D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uHCUZY1IPYiIMOcmuE-72uUzevM.roa
Signing time: Wed 05 Jul 2023 14:04:11 +0000
ROA not before: Wed 05 Jul 2023 14:04:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:5e:24:8d:cc:f6:c3:d9:38:58:e0:14:c6:6e:df:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 5 14:04:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b87094658d483d888830e726b84fbbdae5337af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:34:63:75:b5:94:31:2e:5f:49:00:21:84:18:
82:54:51:96:e7:dc:55:34:57:d4:4e:5d:1c:ed:7a:
09:4b:40:47:0b:63:24:b4:26:6a:0a:1a:1b:45:58:
5e:db:0f:4a:aa:f0:35:7c:cc:ac:5a:49:56:e2:16:
8b:62:c3:23:15:7b:05:08:7d:5b:8f:02:84:d0:e1:
e1:f7:2d:db:f1:f9:91:ae:77:88:d5:68:39:35:9c:
82:46:b0:36:da:92:46:8b:eb:24:c6:96:bc:ef:21:
84:44:cf:d3:0f:fd:cf:dd:c3:57:06:95:41:26:33:
58:13:f6:08:a9:82:26:00:7e:de:25:cf:d3:96:b9:
fd:f9:8a:ac:73:0a:71:11:17:27:61:30:39:88:5c:
6b:a5:d6:08:ad:ff:56:b8:ad:ac:7b:5f:28:0d:fb:
a2:06:fc:d8:63:2b:e2:01:55:d3:ce:c6:ab:6c:23:
e7:c0:73:3e:7c:45:14:8b:bb:11:7a:f4:56:14:ee:
f7:c9:9a:1b:41:8e:66:45:34:b8:16:74:37:61:70:
c7:22:95:89:bf:b8:47:95:43:4d:98:88:d1:72:ce:
25:85:82:c6:98:d3:00:fc:72:16:93:9e:8a:49:d9:
f2:14:2b:cb:56:2e:f9:50:d0:19:68:51:8f:a0:71:
a8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:70:94:65:8D:48:3D:88:88:30:E7:26:B8:4F:BB:DA:E5:33:7A:F3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uHCUZY1IPYiIMOcmuE-72uUzevM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e7:a2:30:78:9f:c1:4b:60:2e:ac:b7:83:1f:38:df:d5:c7:
46:52:28:87:5d:83:c5:e9:fb:2d:67:77:b3:77:f9:34:c5:7b:
6f:24:24:0d:a9:7e:5a:5c:62:9d:48:16:14:1e:51:b0:6c:2d:
cc:4b:1e:88:62:7e:58:33:9e:68:08:65:f8:d2:3b:1a:5e:6e:
88:2b:ec:1f:3d:49:67:10:93:1f:90:7a:4a:f6:b3:bf:54:23:
e5:2a:dc:01:94:18:24:8a:03:76:93:ea:bb:2e:55:7d:38:e7:
9e:cf:74:74:36:ca:fa:4f:25:12:a9:bc:81:b6:aa:be:28:d8:
7d:03:ba:a7:12:5a:b3:31:19:13:6c:81:67:ee:3f:1b:90:48:
33:62:3b:41:1c:7b:34:8c:eb:f3:fb:fa:c7:fe:fb:1f:c0:27:
fc:30:1a:9c:42:78:77:0a:9d:f6:87:20:d4:d4:c5:2b:59:fc:
2b:67:19:43:db:7e:21:9c:8b:4f:50:fe:ea:a0:19:a0:cb:98:
5c:a4:3a:3f:80:5b:d1:6c:31:a2:b0:29:b2:6b:fd:fa:27:12:
fc:27:00:28:8c:38:3d:21:48:7a:3b:2b:3d:98:3e:4c:a4:f6:
ee:3b:0e:37:5b:63:76:8c:e4:45:62:93:26:8b:97:58:6e:19:
a8:bf:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org