Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x_jTfxviyLPO27GTqVJJJguX3eI.roa
File: x_jTfxviyLPO27GTqVJJJguX3eI.roa (raw, json)
Hash identifier: acdHSj0VYMRxmwE54OTdAAT8anhdGhbI7WXKLdlsvgo=
Subject key identifier: C7:F8:D3:7F:1B:E2:C8:B3:CE:DB:B1:93:A9:52:49:26:0B:97:DD:E2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189B688AF974542688AEF5A5204E451CAC9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x_jTfxviyLPO27GTqVJJJguX3eI.roa
Signing time: Wed 02 Aug 2023 13:55:58 +0000
ROA not before: Wed 02 Aug 2023 13:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197644
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:88:af:97:45:42:68:8a:ef:5a:52:04:e4:51:ca:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 2 13:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7f8d37f1be2c8b3cedbb193a95249260b97dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:66:6d:3c:6e:2a:77:0b:c3:15:5b:ec:07:4a:
a8:a6:e4:7b:15:a8:a2:f0:5d:48:d3:95:ed:4a:b2:
39:07:3c:93:56:b2:88:6a:7e:fa:52:91:09:e1:4d:
5f:3c:15:95:c9:e2:77:b3:46:ae:d8:e2:da:95:7e:
1e:e5:f2:1d:63:70:26:e4:98:10:cf:65:fb:8d:4b:
48:31:e0:5d:30:1e:70:1c:77:7d:9c:36:16:06:5c:
ee:1a:85:db:62:5b:d5:bc:6d:d8:80:03:db:9e:00:
55:c7:71:9b:dc:ea:95:d4:52:e2:93:ed:34:24:93:
ec:d0:07:b1:f0:60:1e:bf:f5:ae:7e:50:24:fa:99:
00:f1:9f:f9:42:19:78:c4:36:7f:8e:85:c8:9b:07:
81:a8:e0:b5:5a:a0:88:20:33:bf:01:83:89:c6:22:
1f:62:91:20:cf:0b:4c:55:80:e8:c6:33:56:f0:df:
11:5b:87:be:d9:e4:b9:b6:7b:28:de:56:1a:7a:5f:
fc:fa:35:5b:cd:d0:ce:2e:4b:ed:9a:17:90:67:da:
73:cc:40:50:c2:82:b0:07:6d:72:ef:96:b5:91:62:
da:1f:c1:19:44:7e:15:8c:91:81:c0:0f:b2:c8:5d:
dd:94:ea:50:06:de:f2:05:4a:b0:34:68:e9:c0:55:
06:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F8:D3:7F:1B:E2:C8:B3:CE:DB:B1:93:A9:52:49:26:0B:97:DD:E2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/x_jTfxviyLPO27GTqVJJJguX3eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.86.0/24
Signature Algorithm: sha256WithRSAEncryption
51:50:74:8b:02:d8:8d:05:f1:fe:9f:88:fe:3a:fc:2d:c4:34:
c1:51:72:bc:a1:31:ea:aa:f5:49:63:42:8d:a1:bb:68:87:78:
95:88:69:55:1e:80:8b:26:22:54:e0:ae:04:3a:06:11:a8:67:
f6:24:36:0f:0e:4d:82:47:ea:01:2b:9f:2f:a1:fa:aa:02:4e:
99:31:f7:27:78:eb:f9:97:f0:63:02:c7:9d:f8:72:5d:d7:75:
0e:22:14:e2:93:47:c1:f5:39:36:5e:5f:7e:ef:e5:85:89:c8:
cc:73:cf:f4:4c:26:46:85:d6:f5:fe:fd:0f:63:ff:ea:f7:b9:
c4:b4:a8:00:63:29:19:d5:e8:97:46:9b:3c:e4:ff:f1:a0:c7:
ec:94:fd:04:88:0c:3f:0f:5c:11:b2:57:3b:50:4b:8d:db:2c:
bb:1d:64:ed:97:ec:28:79:a3:5f:46:eb:e3:73:a6:3f:75:ae:
5a:cf:e0:4b:a7:30:cb:91:88:26:da:c0:2c:f0:50:e7:c4:58:
0d:d0:eb:2f:0f:b3:31:e2:84:78:3c:ad:e1:c4:ad:e7:5f:1e:
3c:a3:04:df:75:08:83:6a:2c:ff:09:67:18:92:a8:16:1b:c2:
66:b9:b6:d4:c9:af:be:46:43:b1:87:22:b8:a9:9c:4f:ea:11:
3d:c1:95:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 19:58:28 2023 by rpki-client on console-ams.rpki-client.org