Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ykWOi174hS_7gYvHdIDyXfv54fU.roa
File: ykWOi174hS_7gYvHdIDyXfv54fU.roa (raw, json)
Hash identifier: 4hZ3GQqCpsaVyn1bpAJAIYubC9rixV9nvsxjI6yMLoQ=
Subject key identifier: CA:45:8E:8B:5E:F8:85:2F:FB:81:8B:C7:74:80:F2:5D:FB:F9:E1:F5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188AEC6023330E33A138BE4C5C8AE9F7680
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ykWOi174hS_7gYvHdIDyXfv54fU.roa
Signing time: Mon 12 Jun 2023 08:43:12 +0000
ROA not before: Mon 12 Jun 2023 08:43:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 163.5.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:c6:02:33:30:e3:3a:13:8b:e4:c5:c8:ae:9f:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 12 08:43:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca458e8b5ef8852ffb818bc77480f25dfbf9e1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:9d:b5:24:59:d8:c5:fa:e4:01:68:f5:f1:
98:9c:7e:0b:5a:49:31:87:e2:d5:ff:90:a9:49:3e:
df:15:bf:cc:d7:e2:51:03:c9:7d:38:49:53:64:5a:
5d:ce:68:57:f9:ed:b2:11:e4:aa:26:89:62:96:14:
9b:45:38:a6:49:20:03:70:4d:96:e2:17:91:3b:51:
1b:d7:4f:06:df:d9:71:91:cb:a5:3e:71:c8:f2:47:
48:9d:71:a3:35:e9:4a:7b:7b:90:cb:a3:11:19:ef:
93:32:31:67:6c:c7:7a:4d:3a:bb:74:f4:9d:1a:91:
6d:c3:81:bc:e8:1a:05:23:90:cd:9e:cd:2c:7f:58:
e6:04:0a:4b:38:18:75:12:4a:a5:2d:42:8b:33:61:
f9:51:e5:ad:87:cd:c2:27:04:7b:1d:94:37:5a:c2:
41:65:f1:da:a1:cb:00:5a:a4:dc:91:cb:63:a8:db:
4d:7b:47:4c:c7:e9:5d:b3:98:eb:ab:af:0e:4e:0f:
38:bf:18:d3:48:c7:fb:a1:9a:67:a1:4b:00:ae:1d:
7d:19:bf:92:7d:65:90:3f:dd:d4:9d:c1:f0:9b:e1:
a4:01:f3:38:48:f5:42:97:c9:50:67:38:8d:35:8a:
df:00:04:c8:ec:de:1d:e9:18:a9:61:ee:7c:62:9c:
15:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:45:8E:8B:5E:F8:85:2F:FB:81:8B:C7:74:80:F2:5D:FB:F9:E1:F5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ykWOi174hS_7gYvHdIDyXfv54fU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.166.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:95:12:63:14:cc:b4:c8:67:52:5d:d5:c2:92:51:d4:ea:a3:
42:38:ae:3e:46:3a:32:88:dc:45:b3:4b:36:b5:44:3b:cf:34:
13:01:09:0f:38:84:ba:fd:52:8b:d5:7d:80:2b:1f:be:af:ab:
86:81:0a:dd:86:f0:2f:16:83:71:a7:ee:fc:d1:bb:e8:5a:5c:
2b:70:9b:9e:59:f1:ed:ef:f8:e7:0d:8c:6f:f1:36:63:e3:d0:
4d:3a:b5:64:d5:b6:ee:92:9e:5a:ac:fb:e8:9d:4f:41:82:f4:
f2:42:1c:db:37:52:a8:bd:3a:e2:10:b8:3c:3b:36:7c:eb:85:
d2:55:5e:4b:a8:a3:67:03:69:df:56:6d:c3:6b:be:22:4b:1c:
64:ee:61:53:15:73:ca:89:ce:75:8f:7e:19:ed:3d:b2:74:76:
fd:a9:0a:1c:17:67:39:7c:ae:74:4b:41:de:18:af:d4:a5:58:
b0:0a:50:cb:b1:3d:9d:54:cd:31:26:2d:44:af:e3:68:a2:4b:
d8:bc:c3:ca:72:47:9f:cd:b4:68:75:5b:d1:f5:5f:08:e7:7e:
a1:87:68:3b:1c:b1:b8:4a:60:b3:9b:17:4e:9a:19:46:0a:4d:
88:ca:dd:6d:f4:12:e2:3c:22:8b:9b:79:52:ce:93:80:c8:58:
37:ea:a4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org