Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wqJ2jSo6ChES3OWtxpr2lOFhZA4.roa
File: wqJ2jSo6ChES3OWtxpr2lOFhZA4.roa (raw, json)
Hash identifier: V76xfLEnFh4cDxzZgHYO+KDdkScmvC5tJ4YlxQcU5Jg=
Subject key identifier: C2:A2:76:8D:2A:3A:0A:11:12:DC:E5:AD:C6:9A:F6:94:E1:61:64:0E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01880C7D2A091A9245A62BE4A49CDA0F5DF2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wqJ2jSo6ChES3OWtxpr2lOFhZA4.roa
Signing time: Thu 11 May 2023 20:25:09 +0000
ROA not before: Thu 11 May 2023 20:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199432
IP address blocks: 163.5.100.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0c:7d:2a:09:1a:92:45:a6:2b:e4:a4:9c:da:0f:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 11 20:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a2768d2a3a0a1112dce5adc69af694e161640e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:bf:fa:2d:30:ae:81:56:15:2d:c4:91:55:
7b:60:a9:87:a1:b6:b3:e2:43:06:a5:6f:aa:3d:f1:
35:c4:6d:03:f3:cd:1e:b3:79:e4:7f:23:16:1e:bb:
54:dc:c2:2d:e3:f0:cc:b7:46:e8:82:9c:4e:b2:b7:
61:c2:10:b2:96:77:d5:68:27:d7:af:51:a5:a8:ef:
d4:0b:76:4d:33:4a:35:c3:28:6d:98:6b:ce:99:37:
da:82:7e:a7:b1:4d:0e:c3:a6:17:e3:ec:2f:3a:32:
9d:e3:b5:0c:72:b9:00:3b:c7:ce:0e:e6:23:01:c4:
e6:29:9e:7e:0b:fd:2d:76:aa:85:c9:bd:bd:ab:86:
4d:9f:ed:20:a2:5c:9b:fb:a2:55:9e:bb:04:ea:7e:
0a:6c:46:56:38:78:a9:6a:d5:94:dc:a4:22:02:71:
68:82:c7:76:d2:86:b5:75:65:f0:3e:13:9d:e5:67:
cd:5c:72:7f:9a:52:69:77:f3:ee:56:8d:3b:52:8a:
0d:3a:7f:dd:fc:24:c3:8c:85:fa:87:08:40:05:02:
13:93:4b:0c:62:72:8b:f8:80:c2:dc:d7:28:76:b7:
fe:3b:e1:33:a8:df:46:1a:52:84:e8:c0:08:e4:0c:
f3:b8:11:59:e2:02:f2:e0:eb:d3:7a:3c:36:a0:2f:
9d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A2:76:8D:2A:3A:0A:11:12:DC:E5:AD:C6:9A:F6:94:E1:61:64:0E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wqJ2jSo6ChES3OWtxpr2lOFhZA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.100.0/24
Signature Algorithm: sha256WithRSAEncryption
85:77:23:08:a2:4f:7c:ed:39:fb:3a:c0:ce:5b:a1:cc:73:62:
d4:63:31:ff:6a:9d:24:2a:e7:6c:f7:37:2a:d2:d8:94:16:51:
27:d9:71:6c:7c:22:81:f9:a3:26:9c:82:87:39:07:89:4f:4c:
53:02:ae:f1:1b:e2:db:af:37:66:bd:bd:8f:be:b8:1c:24:01:
f2:5f:c4:6e:b7:78:e8:e4:f2:3d:22:b2:1b:e0:59:a4:65:42:
6b:15:78:d3:d9:7c:62:83:74:6e:e1:05:dd:c7:1c:c8:d6:d0:
c3:60:60:16:f7:fe:61:53:c0:06:44:dc:3b:d0:7a:40:6c:28:
7b:3c:bf:4f:97:18:10:cf:d1:f6:28:be:28:16:83:a3:90:a6:
a6:c9:9c:11:51:b4:12:75:fc:89:fd:af:73:b6:db:a7:f3:85:
b1:02:c2:16:94:d4:28:3d:0c:78:f9:ab:45:1b:5b:48:8f:4d:
ad:63:a1:3c:9e:fe:02:f8:99:79:3b:6b:2d:3a:62:1c:cf:97:
23:98:b3:49:77:71:72:2e:7e:c8:3d:68:cb:c5:84:f6:87:d3:
b9:46:3c:19:76:40:75:eb:6c:a1:12:65:b0:44:78:df:48:cc:
cf:54:83:b5:25:5c:25:29:a7:04:41:14:08:fe:20:20:72:c2:
dc:07:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org