Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vmPkxRtMMbfyFE7aKGStLqLJdVU.roa
File: vmPkxRtMMbfyFE7aKGStLqLJdVU.roa (raw, json)
Hash identifier: iDE7bsvCOmusviHbaearkhAAu8kRA7FHr5n8T3YOmjI=
Subject key identifier: BE:63:E4:C5:1B:4C:31:B7:F2:14:4E:DA:28:64:AD:2E:A2:C9:75:55
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189C598E4926C45F4F2246B8A2186921471
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vmPkxRtMMbfyFE7aKGStLqLJdVU.roa
Signing time: Sat 05 Aug 2023 12:07:58 +0000
ROA not before: Sat 05 Aug 2023 12:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 163.5.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:98:e4:92:6c:45:f4:f2:24:6b:8a:21:86:92:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 12:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be63e4c51b4c31b7f2144eda2864ad2ea2c97555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:e5:1d:c7:d0:c2:a2:f6:10:bf:49:75:69:
ba:64:a1:4a:6e:0d:f5:a1:63:5c:70:6b:3b:a9:5f:
7b:79:f6:51:61:c9:e2:4f:7d:dd:63:71:95:3e:f3:
34:fb:0b:65:f9:f2:bd:a0:90:1e:86:c2:15:ff:e5:
30:78:ba:7e:3c:eb:6d:44:24:5a:62:05:d0:7a:30:
63:73:3d:5d:bb:c6:c5:c9:c0:db:eb:f9:23:94:a7:
8b:ac:42:5d:24:a4:e4:3b:df:b4:30:fd:06:0f:d2:
c0:05:e1:a1:10:8d:c7:8f:d8:bb:f2:d1:64:8a:ac:
c1:91:31:a4:f5:35:55:e9:3d:50:97:35:f9:ad:16:
68:b9:e6:aa:52:2b:a4:20:7d:1e:f7:8f:70:33:27:
75:22:a8:6b:49:5f:1f:66:3c:a6:e1:a6:0b:fa:aa:
bb:39:87:a9:4b:20:ae:37:1c:c1:70:ff:e2:c2:cf:
2d:97:b4:af:77:e9:c1:90:35:42:b1:51:68:53:55:
4c:58:8e:87:53:03:80:90:fa:5e:e1:15:08:72:11:
50:ef:60:77:24:ab:e9:1d:77:9c:dd:48:9a:df:96:
0e:29:8e:b8:70:4c:70:4d:77:2a:f0:46:ad:1e:b5:
2a:6b:fc:55:91:d1:a6:02:00:31:0b:90:3a:8a:a1:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:63:E4:C5:1B:4C:31:B7:F2:14:4E:DA:28:64:AD:2E:A2:C9:75:55
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vmPkxRtMMbfyFE7aKGStLqLJdVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:d6:54:29:f1:c3:c4:c8:8c:09:0e:59:d3:6c:56:96:bb:96:
7f:5c:a9:7b:ef:52:5c:fa:c1:9c:d3:ac:4a:73:d8:41:67:05:
be:f2:c5:38:77:1e:41:d5:86:5d:2b:1d:35:c6:4d:ec:4b:30:
15:d2:ee:35:90:44:d9:2b:b5:16:f6:6c:79:e0:46:d8:bf:fe:
fb:fd:5f:8b:07:ed:6d:4d:b2:4a:99:dc:2a:1d:57:ed:b5:e7:
bf:38:60:80:ff:3c:fd:19:e0:b3:45:fa:a6:98:a1:df:78:dd:
f3:fa:af:a9:00:58:6a:44:e5:6a:26:3f:6b:32:90:34:9c:24:
8c:c0:5f:6d:67:81:a7:ba:a4:4b:4d:e4:79:0c:fc:7c:fa:cc:
e6:91:19:b1:34:71:e2:18:a8:0d:47:a8:b2:17:88:48:10:f9:
fc:af:de:e1:46:8f:ca:a5:6d:b8:24:e2:77:c0:80:fe:d5:cb:
e8:53:cc:3f:35:03:a7:64:32:95:34:fa:b7:2a:d4:6e:71:92:
42:7a:7f:63:a8:a6:a2:82:b3:da:13:68:b7:94:07:37:ff:4c:
d8:ef:2f:23:42:ee:ab:45:f2:c6:90:6c:a9:70:0a:a4:3f:1e:
4d:17:92:14:4b:f6:34:d4:be:a3:26:16:54:da:85:dd:f0:f2:
90:fb:5c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:00:43 2023 by rpki-client on console-fra.rpki-client.org