Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zk5qCn45V-JP55fMrDLVfTj1vAE.roa
File: zk5qCn45V-JP55fMrDLVfTj1vAE.roa (raw, json)
Hash identifier: JgBdlRKCjxY1Pdz5s29WABXY9Q3y5fm8FnIxV+hvoYM=
Subject key identifier: CE:4E:6A:0A:7E:39:57:E2:4F:E7:97:CC:AC:32:D5:7D:38:F5:BC:01
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188D431F7019CE93373F9AFE52FA9510A38
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zk5qCn45V-JP55fMrDLVfTj1vAE.roa
Signing time: Mon 19 Jun 2023 15:07:04 +0000
ROA not before: Mon 19 Jun 2023 15:07:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:31:f7:01:9c:e9:33:73:f9:af:e5:2f:a9:51:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 19 15:07:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce4e6a0a7e3957e24fe797ccac32d57d38f5bc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:01:5f:85:0e:fa:f9:ac:61:d3:3e:d4:f4:
a2:8e:b7:46:dd:b2:b4:4c:e2:30:4e:ca:70:f5:25:
2f:9a:a2:19:56:09:6e:eb:51:23:43:dd:53:aa:ef:
36:6c:65:89:9b:68:17:6b:71:4e:0e:50:38:86:04:
56:dc:40:60:46:88:7b:c2:0a:44:8c:55:e4:61:67:
30:99:5a:4b:24:62:f8:56:76:cd:20:ad:8e:dc:66:
f3:75:af:c5:9d:69:79:6a:67:fe:98:fd:53:22:ed:
4b:d2:e4:71:ed:e2:66:cd:26:3b:ed:59:7d:9d:3c:
c6:d8:34:36:fb:bc:8a:4b:97:eb:c4:98:05:6b:e9:
74:43:82:68:ce:c8:f7:1f:99:82:a6:a5:81:92:ec:
1f:c1:12:08:35:bd:27:17:cb:e1:a6:9e:42:b0:fc:
f6:46:5a:e7:b6:c6:cb:59:3f:ba:37:55:2c:0d:7a:
fe:9b:30:1b:57:4c:c5:16:f2:09:ba:33:d8:5f:75:
0b:b1:fd:20:1b:45:ec:9a:4d:e8:a3:a7:9c:4a:9f:
d2:ce:8c:b5:71:05:e2:18:1e:00:91:7d:0d:40:3b:
27:c4:cd:cb:39:77:44:4f:43:de:7b:b5:3c:47:62:
bf:f8:bf:ba:91:e0:60:cb:61:ea:c4:16:4e:2b:d1:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4E:6A:0A:7E:39:57:E2:4F:E7:97:CC:AC:32:D5:7D:38:F5:BC:01
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zk5qCn45V-JP55fMrDLVfTj1vAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.185.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6a:6e:03:c7:ea:52:44:65:31:75:60:18:91:c5:a1:69:83:
3f:56:fd:dd:46:15:a1:d9:a9:11:37:53:5a:c4:e6:cb:62:15:
9f:4e:60:9c:b9:3b:fe:d9:6d:1e:b0:56:90:18:aa:28:79:36:
f5:aa:51:dd:65:bd:88:14:0d:b3:01:8a:1e:8e:a5:2e:30:0e:
e0:45:5b:1e:5d:b8:7e:65:c6:1b:98:d6:e1:5e:d0:06:0a:80:
d3:ec:18:27:b4:7f:04:36:b2:a7:03:a2:94:3f:a9:98:8b:32:
96:97:c2:38:e3:be:8d:80:3e:7c:03:84:8f:72:d1:01:9d:f4:
fb:e3:9a:b0:33:ef:86:97:b9:24:9e:33:d8:93:87:fb:d3:23:
ba:d4:68:9a:91:c4:c0:cb:96:69:8b:a2:17:79:6d:c3:ca:47:
78:8f:e0:17:f7:54:e7:d9:d0:5a:c3:79:de:18:db:f8:8b:b2:
ff:52:e8:e9:ee:09:93:d2:9e:f7:eb:b0:d3:0a:11:e4:78:f6:
44:51:e8:de:ef:14:c1:6d:19:bd:ab:b2:b8:ba:c9:06:b1:95:
5e:6c:44:54:0c:fe:e7:4b:02:2e:2a:d4:98:27:b6:26:7a:cd:
b8:92:95:db:76:db:28:63:20:b9:7c:e3:be:88:66:7d:bf:a2:
14:62:f8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org