Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xDsNAxbT2sB_Gr_3N8CyDg4Uk7Y.roa
File: xDsNAxbT2sB_Gr_3N8CyDg4Uk7Y.roa (raw, json)
Hash identifier: vr83wxBV+Iy22PZrhMw9ztoEaGS0atdP9nvTVO5yk9M=
Subject key identifier: C4:3B:0D:03:16:D3:DA:C0:7F:1A:BF:F7:37:C0:B2:0E:0E:14:93:B6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042CEB05E59BE985FF8BB44456CC13A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xDsNAxbT2sB_Gr_3N8CyDg4Uk7Y.roa
Signing time: Mon 02 Jan 2023 02:15:04 +0000
ROA not before: Mon 02 Jan 2023 02:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:ce:b0:5e:59:be:98:5f:f8:bb:44:45:6c:c1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c43b0d0316d3dac07f1abff737c0b20e0e1493b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:c9:f5:c5:1c:2a:ae:bc:6a:a3:16:ba:bd:
ca:19:f7:18:de:e7:52:f5:af:78:03:81:c9:01:18:
00:a7:18:c3:13:a1:a2:4d:95:1e:76:93:db:af:88:
7c:83:10:21:04:94:fa:5c:53:3f:44:43:c0:e5:58:
80:33:a9:2c:0a:7a:d9:b2:fa:b6:64:3a:10:5f:7b:
dd:ff:60:90:8c:3a:92:eb:32:f4:ab:97:c4:a9:33:
51:90:9e:c4:5a:68:b9:df:7a:b7:fc:31:d6:82:36:
71:ce:a0:4e:5a:01:06:92:ed:20:7b:fa:94:dc:db:
eb:fe:74:57:5e:3e:8c:c3:60:fc:9d:59:75:2d:18:
0f:4c:dd:f3:88:01:f3:6c:7d:aa:de:9f:1a:b0:97:
16:6f:62:c6:d4:f8:49:0c:35:07:5d:c6:29:09:8f:
c7:ad:e1:d7:36:9f:39:39:f1:27:50:ed:d7:d6:01:
a3:10:44:85:f3:21:13:58:17:ac:0b:75:6d:62:56:
de:0f:b2:bc:d4:2a:d2:bb:d5:43:eb:d9:71:74:5d:
90:71:32:be:18:38:b7:0d:89:0f:96:3e:c3:a5:d1:
62:10:bd:90:ef:c6:68:a4:c2:1f:4d:a6:96:0f:9a:
17:8e:fa:91:b9:f6:55:c4:34:d2:6e:73:07:b4:45:
c1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3B:0D:03:16:D3:DA:C0:7F:1A:BF:F7:37:C0:B2:0E:0E:14:93:B6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xDsNAxbT2sB_Gr_3N8CyDg4Uk7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:64:ea:1f:54:76:54:24:f1:7c:9f:0b:dd:8e:b0:7d:8d:87:
7a:d6:4d:c0:36:c7:eb:bd:b6:fb:02:6e:46:16:1d:52:03:2a:
18:2f:06:bb:61:3f:b2:af:91:42:d9:5a:0f:c6:96:c7:88:70:
1c:6e:a2:2b:58:df:44:66:ba:fe:2f:cf:b0:ab:19:92:76:92:
51:66:e7:6b:5f:52:66:2c:f5:06:c4:5c:50:ee:9a:36:dd:1c:
5a:e0:d1:43:e8:44:03:25:a5:5b:1d:cf:ca:de:3f:66:e4:a2:
a8:f5:5e:0f:95:64:a7:8e:65:77:8c:3a:95:8c:a3:bf:a3:9e:
48:a7:8b:41:c8:8a:14:f1:00:2c:60:74:a3:49:23:bd:27:80:
03:f9:1f:5f:46:dc:31:10:53:da:7f:6f:8b:d8:fc:13:28:aa:
c5:de:09:04:a3:a2:35:09:78:58:0c:a5:a8:25:6e:4f:d0:55:
6a:0f:be:51:5c:57:a0:dc:b7:49:10:9e:fe:46:f4:76:30:a8:
42:f4:d6:93:e6:a1:5d:8e:a4:0a:ad:3d:50:97:ce:8a:a2:12:
34:8a:ef:ef:b0:e1:19:c4:2a:c5:6d:1f:52:1d:7a:3e:8e:2c:
dc:5b:72:a3:cf:8a:cf:e4:76:e0:77:fe:f3:8b:31:c6:f6:80:
b1:53:7b:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwQs6wXlm+mF/4u0RFbME6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTAyMDIxNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDNiMGQwMzE2ZDNkYWMwN2YxYWJmZjczN2MwYjIwZTBlMTQ5M2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA3J9cUcKq68aqMWur3KGfcY3udS
9a94A4HJARgApxjDE6GiTZUedpPbr4h8gxAhBJT6XFM/REPA5ViAM6ksCnrZsvq2
ZDoQX3vd/2CQjDqS6zL0q5fEqTNRkJ7EWmi533q3/DHWgjZxzqBOWgEGku0ge/qU
3Nvr/nRXXj6Mw2D8nVl1LRgPTN3ziAHzbH2q3p8asJcWb2LG1PhJDDUHXcYpCY/H
reHXNp85OfEnUO3X1gGjEESF8yETWBesC3VtYlbeD7K81CrSu9VD69lxdF2QcTK+
GDi3DYkPlj7DpdFiEL2Q78ZopMIfTaaWD5oXjvqRufZVxDTSbnMHtEXBzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMQ7DQMW09rAfxq/9zfAsg4OFJO2MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEveERzTkF4YlQyc0JfR3JfM044Q3lEZzRVazdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowUkMA0G
CSqGSIb3DQEBCwUAA4IBAQAbZOofVHZUJPF8nwvdjrB9jYd61k3ANsfrvbb7Am5G
Fh1SAyoYLwa7YT+yr5FC2VoPxpbHiHAcbqIrWN9EZrr+L8+wqxmSdpJRZudrX1Jm
LPUGxFxQ7po23Rxa4NFD6EQDJaVbHc/K3j9m5KKo9V4PlWSnjmV3jDqVjKO/o55I
p4tByIoU8QAsYHSjSSO9J4AD+R9fRtwxEFPaf2+L2PwTKKrF3gkEo6I1CXhYDKWo
JW5P0FVqD75RXFeg3LdJEJ7+RvR2MKhC9NaT5qFdjqQKrT1Ql86KohI0iu/vsOEZ
xCrFbR9SHXo+jizcW3Kjz4rP5Hbgd/7zizHG9oCxU3tD
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org