Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wfMeIlwlmGRY2h8mcDWdCRJkt_o.roa
File: wfMeIlwlmGRY2h8mcDWdCRJkt_o.roa (raw, json)
Hash identifier: K3UFEZ5D6wukePdDFuQIf4AExgVXThsrAQrybXwYpHo=
Subject key identifier: C1:F3:1E:22:5C:25:98:64:58:DA:1F:26:70:35:9D:09:12:64:B7:FA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189D4F429AACA9F6410578C187421A477E3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wfMeIlwlmGRY2h8mcDWdCRJkt_o.roa
Signing time: Tue 08 Aug 2023 11:41:58 +0000
ROA not before: Tue 08 Aug 2023 11:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 163.5.74.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:f4:29:aa:ca:9f:64:10:57:8c:18:74:21:a4:77:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 11:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f31e225c25986458da1f2670359d091264b7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:16:2e:c6:98:65:92:f7:2b:15:db:79:75:
37:fb:84:bd:7f:4a:01:0d:31:70:d1:80:9b:b5:a5:
65:4d:c8:f4:74:68:91:89:27:17:65:a0:34:67:d1:
23:14:14:7a:d8:72:a9:3d:e7:d9:63:e4:1a:7e:36:
f8:9e:92:70:7b:a0:5b:16:96:a7:b2:f8:8d:d8:a4:
09:b7:ae:29:bf:5c:54:16:b0:44:99:aa:c3:eb:8f:
ad:e5:30:2e:94:72:7a:06:c0:b8:a0:83:99:e5:ef:
e4:73:0c:a7:20:54:d4:c2:93:84:23:3f:bc:4b:1e:
f9:52:6f:54:58:75:71:bf:69:9f:3d:2e:27:fc:94:
63:8c:d1:90:e9:1e:24:a8:55:1d:89:e6:b8:34:b2:
13:de:49:b0:a1:e9:4d:1c:47:3e:fd:d0:00:a4:44:
90:15:aa:b3:d5:fe:b6:9b:a1:e5:79:21:0a:b8:b3:
d2:ae:6d:23:ea:4a:96:11:0e:49:03:2e:9f:37:ee:
87:42:ab:e1:4e:21:aa:0b:fd:aa:73:bc:70:51:7f:
9a:14:06:94:8c:fb:9d:dc:49:0f:2d:9a:24:70:32:
82:b1:19:ec:ec:ce:55:ff:52:09:1b:24:09:26:0a:
66:e6:e4:16:61:f1:c1:56:90:d2:6c:eb:c8:55:c9:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:1E:22:5C:25:98:64:58:DA:1F:26:70:35:9D:09:12:64:B7:FA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wfMeIlwlmGRY2h8mcDWdCRJkt_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.74.0/24
163.5.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:4c:d0:82:a4:b1:9d:10:c3:7e:19:6c:6b:05:20:64:42:c2:
8c:d9:02:cb:06:8d:26:53:c9:60:b7:df:87:a8:b5:75:f6:d1:
d2:a0:c2:f5:d6:4e:68:13:c4:58:da:d0:b1:d6:e1:07:c8:3e:
0e:09:e4:35:63:33:e2:02:34:b2:9a:28:22:00:bc:ca:68:53:
25:d0:a8:a8:67:e5:3b:90:89:9b:f6:f5:6f:a0:ef:3a:b1:b7:
63:c3:05:16:cd:8c:0d:9e:c3:76:1e:48:61:87:d2:d9:63:76:
59:fc:aa:1f:1e:34:76:a5:d2:20:0a:3e:3b:4c:e6:68:77:31:
04:04:37:4d:78:c2:a0:62:c2:c3:0d:84:50:6a:82:6a:ce:bc:
cc:a5:82:ca:a6:e2:a4:5e:89:77:4f:cb:93:a7:45:68:6b:23:
5e:0b:36:17:26:f2:72:d0:fe:22:88:25:c7:e5:f2:8c:7f:77:
d7:b9:ea:26:11:d3:36:6f:9a:a3:46:51:bf:c6:f8:56:21:4b:
fc:e9:74:32:c0:78:52:ae:7e:85:7c:6c:82:0a:78:5f:38:a2:
4f:9f:80:ae:50:30:e5:5c:47:f8:69:60:b6:e0:09:c8:ae:ba:
d4:92:eb:5b:22:11:ed:3b:6f:b4:99:c8:10:2a:74:cb:d1:5f:
16:67:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 11:11:15 2023 by rpki-client on console-fra.rpki-client.org