Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xVKk7NlPr6b0Z_YNyJpXRATkKy0.roa
File: xVKk7NlPr6b0Z_YNyJpXRATkKy0.roa (raw, json)
Hash identifier: DqlosDGJZFs+t8E4AZUNB7fSU8904gcJ5QZC7V3/j8k=
Subject key identifier: C5:52:A4:EC:D9:4F:AF:A6:F4:67:F6:0D:C8:9A:57:44:04:E4:2B:2D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01889CDFCB831F1A985863A1EAF9F5CC9E18
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xVKk7NlPr6b0Z_YNyJpXRATkKy0.roa
Signing time: Thu 08 Jun 2023 21:18:12 +0000
ROA not before: Thu 08 Jun 2023 21:18:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201670
IP address blocks: 163.5.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 15:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9c:df:cb:83:1f:1a:98:58:63:a1:ea:f9:f5:cc:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 8 21:18:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c552a4ecd94fafa6f467f60dc89a574404e42b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:dc:e3:fa:ae:e0:6f:b5:88:d0:1b:4c:1a:
a5:1b:6d:ad:26:4a:6b:7d:5c:f3:f3:9d:4a:e7:05:
c2:ba:e3:3f:80:56:c3:70:c3:af:01:6f:26:db:d6:
43:74:34:38:97:46:fa:79:4b:65:59:60:70:da:10:
40:52:d8:98:80:cf:a7:ba:c0:0f:a2:cc:a7:a9:f2:
44:00:3f:4b:53:2d:61:f0:6a:dd:57:4d:41:e6:e3:
ea:b5:14:f7:c7:7a:36:79:fa:35:fe:3d:dd:1c:58:
1d:ba:78:63:8d:9f:2c:10:cd:9e:3c:66:75:03:b0:
7a:01:dd:4f:2d:a6:ec:f3:b9:51:b2:bb:fc:e9:5a:
97:e8:a2:17:3b:30:8e:8d:12:48:ad:b1:fd:50:c5:
4f:83:a8:a2:9b:93:2a:3f:74:b8:3c:86:a1:8f:55:
43:bc:b8:64:e6:b4:48:95:e1:6e:70:da:32:71:9d:
f2:61:86:bc:51:a0:95:2b:fe:4b:c2:fe:f3:bf:eb:
a4:da:07:92:38:a9:f0:61:1f:7c:40:11:fa:75:09:
11:ea:18:2a:db:a6:93:11:2d:29:cd:b4:0f:3e:24:
62:d4:49:09:e1:f5:62:71:fd:85:c5:93:8e:c1:92:
98:a7:50:64:59:24:8c:05:d8:cc:ee:ba:37:32:76:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:A4:EC:D9:4F:AF:A6:F4:67:F6:0D:C8:9A:57:44:04:E4:2B:2D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xVKk7NlPr6b0Z_YNyJpXRATkKy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.184.0/24
Signature Algorithm: sha256WithRSAEncryption
77:42:c9:3f:6e:ba:9f:ca:8c:c1:f0:78:a6:4a:1c:1e:10:43:
f1:29:1e:ec:4e:5a:a9:38:18:e9:49:1c:26:77:bb:41:b1:98:
85:fa:c1:2c:8f:56:73:d7:d7:e4:0c:01:36:dc:74:63:16:5b:
0c:27:51:50:83:96:55:f5:2c:78:8e:31:7b:c6:b9:67:d3:0c:
3a:97:aa:6f:9f:c4:80:d0:d6:90:95:97:02:38:e6:59:bb:e9:
92:ab:a3:21:26:9f:a4:d2:a9:2e:21:3b:9d:18:49:2d:ea:cd:
9b:63:da:31:ae:05:22:05:65:44:be:79:c0:6a:14:04:74:d0:
33:f6:5c:d3:f6:f9:3b:5e:5d:12:50:84:4f:06:6e:db:43:ec:
d9:1b:1b:1b:c0:05:68:e2:d8:c7:1c:98:78:2d:3c:cd:dd:aa:
f9:ec:f6:3c:b8:ce:13:c8:78:ea:e2:42:a9:8e:8e:55:4a:07:
b2:6c:e4:e5:ad:c4:29:c2:54:61:f1:53:27:11:49:f2:91:db:
cf:84:44:c0:d3:a1:3a:d3:a9:8b:a5:b3:bb:88:83:41:bb:fd:
66:eb:30:1e:24:fe:1f:ed:50:96:29:96:90:ec:1f:a8:99:f9:
27:ae:1c:2a:df:a0:32:0c:c2:38:04:ca:42:2b:ae:b8:ab:a7:
44:81:76:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org