Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xTRH8490nYVeTtv5uviKqddyQbY.roa
File: xTRH8490nYVeTtv5uviKqddyQbY.roa (raw, json)
Hash identifier: mXIvvV1U19W5jSYiL053Qi3s9SJu/qIyv85ZxCVXB1o=
Subject key identifier: C5:34:47:F3:8F:74:9D:85:5E:4E:DB:F9:BA:F8:8A:A9:D7:72:41:B6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A85E0174665AFE225E9E8AEEE6F8248F0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xTRH8490nYVeTtv5uviKqddyQbY.roa
Signing time: Mon 11 Sep 2023 20:12:50 +0000
ROA not before: Mon 11 Sep 2023 20:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399073
IP address blocks: 163.5.72.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:e0:17:46:65:af:e2:25:e9:e8:ae:ee:6f:82:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 11 20:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c53447f38f749d855e4edbf9baf88aa9d77241b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:c4:cf:13:33:0f:57:23:5d:d6:f0:ca:ae:
78:74:d4:cf:ec:b0:32:f8:27:b1:f9:27:a9:17:6b:
3b:95:ec:22:e9:6e:f6:56:31:09:45:66:29:be:f7:
6b:09:be:ce:f3:a0:66:aa:e0:9d:c4:36:1c:e8:8c:
65:55:c1:d5:b4:00:8e:35:74:80:b8:19:8d:c2:c3:
26:f6:a7:08:cc:d6:94:9c:55:e7:97:85:60:ad:fe:
89:dd:f0:38:df:8f:2b:2a:7e:d5:8d:b5:49:e4:16:
fb:e6:f3:cc:bc:d0:0a:e3:98:e0:7c:9f:4c:c9:2e:
b0:8d:67:50:85:59:80:ab:85:22:43:5a:d1:24:2c:
ca:7e:60:2b:aa:57:92:5f:a0:42:cd:82:ee:75:73:
d5:f1:62:af:c9:e1:67:40:d6:17:80:45:7e:49:75:
d6:b4:26:ab:fe:ae:f6:fc:d4:be:d7:1f:a2:2e:6a:
d1:3f:d3:2a:de:44:cd:ef:ae:89:30:f7:11:94:ec:
09:c1:75:de:8e:4f:ed:78:bd:4e:df:1a:71:60:9f:
55:41:57:a4:41:6f:e0:35:4d:fe:75:23:43:f2:7a:
e3:08:bd:12:cc:ae:2f:67:4b:02:a9:33:75:c8:2f:
8a:b1:ee:dd:84:6d:03:7f:b3:c7:c0:e2:f4:f2:b2:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:47:F3:8F:74:9D:85:5E:4E:DB:F9:BA:F8:8A:A9:D7:72:41:B6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xTRH8490nYVeTtv5uviKqddyQbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.72.0/24
163.5.77.0/24
Signature Algorithm: sha256WithRSAEncryption
67:1a:68:a3:bf:f2:c0:9f:0b:c2:d3:11:da:86:75:91:f2:37:
95:cb:11:69:30:d9:23:2e:e2:dd:46:58:56:3c:6d:eb:ce:f9:
44:93:64:62:9e:c3:f4:a0:e7:76:e4:d7:55:56:4f:11:a1:55:
e0:ae:68:fb:10:7a:a6:89:2a:69:5f:c8:98:0c:f9:ac:1b:c7:
46:e6:dc:2a:01:b0:29:27:02:a5:a4:47:43:d7:6b:c3:73:50:
25:db:e2:e9:a2:f0:28:a0:b2:56:7a:4d:0b:8f:10:10:26:95:
fb:06:58:f2:f2:7e:4d:b8:cf:b7:9d:38:46:1b:05:30:b9:2c:
ba:8a:c1:25:fc:a0:43:77:ff:ac:70:9c:3d:8d:17:50:ab:db:
20:17:d5:4a:b5:79:4c:ac:95:34:2d:9a:70:3e:57:f1:19:26:
ac:10:af:d4:d4:7b:c4:a4:46:ed:9c:1e:68:20:20:a7:11:29:
69:20:48:08:99:8f:7d:84:08:c0:32:ee:a0:17:d3:d6:b3:fd:
e1:94:c9:bb:61:c3:47:c9:f8:0e:4c:ea:2e:6b:68:2a:cf:d2:
b6:13:08:d3:d7:c7:21:fc:ca:4b:db:bd:4c:05:ab:fa:83:8a:
ee:95:61:c6:66:3e:47:13:75:ea:ea:9f:41:81:33:e8:01:a8:
6a:ff:e1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 14:13:24 2023 by rpki-client on console-fra.rpki-client.org