Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wt6tMfhmTGnuLYrfTG-yWzKC0_0.roa
File: wt6tMfhmTGnuLYrfTG-yWzKC0_0.roa (raw, json)
Hash identifier: bJRium8xzpA/LPLOpzRsTRKFkOl29xSxTx0P0hnIMPQ=
Subject key identifier: C2:DE:AD:31:F8:66:4C:69:EE:2D:8A:DF:4C:6F:B2:5B:32:82:D3:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189CA4467C3D63E4610BDB90011307CB757
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wt6tMfhmTGnuLYrfTG-yWzKC0_0.roa
Signing time: Sun 06 Aug 2023 09:53:47 +0000
ROA not before: Sun 06 Aug 2023 09:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54252
IP address blocks: 163.5.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:44:67:c3:d6:3e:46:10:bd:b9:00:11:30:7c:b7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 09:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2dead31f8664c69ee2d8adf4c6fb25b3282d3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:63:87:6c:cc:96:b3:f0:1d:eb:d1:2c:57:eb:
6d:26:eb:54:34:55:ac:fb:31:e7:80:52:a9:69:4b:
f5:0e:5b:ce:13:37:5c:d4:b1:b7:0f:b3:c8:c1:99:
14:12:89:d1:b7:1a:a6:f2:c3:36:e3:b9:1d:d4:b4:
69:72:3a:f4:a7:74:e1:73:1c:b9:af:4e:33:a5:5a:
87:02:a6:2e:23:4f:0e:8a:d9:61:59:79:2d:87:1c:
41:7c:db:dc:b4:03:69:e9:00:90:d3:56:98:b5:a9:
54:51:e0:d2:77:ef:ff:14:4a:34:63:fd:48:fd:5d:
6b:3c:f0:19:77:a1:0a:ca:96:d0:66:64:6c:a9:e8:
48:03:85:b5:9b:7d:70:80:18:5d:5d:ca:e2:15:99:
55:71:ae:41:32:35:57:a3:82:75:f3:b5:d4:36:38:
5e:30:17:15:8e:26:89:83:db:cd:bd:99:71:b9:15:
21:11:6f:6b:d9:3d:48:6f:52:9d:00:83:35:ac:56:
6b:d0:1d:93:c3:52:a0:af:12:0f:bf:4f:50:88:5f:
8d:e7:13:4e:37:40:a8:a2:2a:8d:86:0b:e1:7f:69:
1c:35:5d:17:da:0e:fd:79:0c:54:e7:a9:ae:1a:e7:
6f:98:9c:53:99:27:08:4c:79:ed:87:be:4c:d2:89:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:AD:31:F8:66:4C:69:EE:2D:8A:DF:4C:6F:B2:5B:32:82:D3:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wt6tMfhmTGnuLYrfTG-yWzKC0_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1e:b8:a8:76:8f:06:bc:a5:fb:af:82:ea:71:f9:42:b4:ed:
c7:43:bc:60:35:38:67:1c:fb:17:6a:39:0f:07:50:4d:26:a2:
03:6a:e1:39:6b:b4:cd:cb:6f:66:d1:6a:75:c7:b5:11:7b:57:
d5:b8:57:e2:f1:a2:fb:e4:ed:c8:0e:eb:76:7c:72:e6:6f:0c:
0d:eb:b2:9d:b5:1b:6d:22:4e:36:e5:83:71:ac:46:b4:d8:b5:
1e:c4:83:2c:91:26:55:0d:0b:1b:ab:bb:c4:20:0e:36:21:e1:
a3:fd:5f:a9:47:3c:5c:e0:37:ec:1c:66:dc:7f:68:d6:20:a3:
d2:26:a6:ee:0d:28:bf:3b:5c:e9:60:73:f4:e2:62:1f:1d:e2:
48:d1:71:c0:47:7c:f4:0e:70:13:98:ba:c6:61:9b:0e:c1:cb:
4f:53:5c:c7:7c:52:11:ee:96:ae:2a:32:4e:43:97:03:48:97:
73:2d:10:d5:43:2f:86:14:0c:de:46:b8:4b:f7:46:2d:4c:ce:
a0:fc:91:d9:1b:ec:da:b1:3a:dc:2e:c8:bf:92:2a:f9:39:5e:
00:96:a4:03:01:27:07:29:4f:94:35:db:06:9e:bc:bb:40:64:
32:d3:a1:22:0b:5b:10:06:95:b4:4d:34:96:3e:ec:19:47:47:
76:bb:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 18:56:39 2023 by rpki-client on console-ams.rpki-client.org