Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ztXBVhs1EMe9sN73Cw_CxQRlvdo.roa
File: ztXBVhs1EMe9sN73Cw_CxQRlvdo.roa (raw, json)
Hash identifier: 67O+1fU8N8cTjb9fZhMIQ8PUU/IFkWJUAiK0MVSBrAY=
Subject key identifier: CE:D5:C1:56:1B:35:10:C7:BD:B0:DE:F7:0B:0F:C2:C5:04:65:BD:DA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B6FBAD104D4ABDB4B26D6124F32B03CA9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ztXBVhs1EMe9sN73Cw_CxQRlvdo.roa
Signing time: Fri 27 Oct 2023 06:03:16 +0000
ROA not before: Fri 27 Oct 2023 06:03:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 163.5.120.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:ba:d1:04:d4:ab:db:4b:26:d6:12:4f:32:b0:3c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 06:03:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ced5c1561b3510c7bdb0def70b0fc2c50465bdda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:23:a4:4a:dd:51:1b:14:cf:fa:e3:b2:26:a1:
22:3b:f1:17:4e:d0:11:31:4c:e0:30:79:63:6a:a1:
ec:d9:ab:e9:f8:ed:1d:1c:54:a5:22:d1:0a:f7:e1:
e3:32:5d:0d:c7:71:a8:86:fa:a6:26:10:0e:0e:57:
f3:19:58:f9:0e:67:b1:40:20:78:fc:66:ff:e1:bf:
f4:4a:fb:da:35:d4:0d:cc:95:d8:f7:6e:fe:76:89:
a9:9b:bf:48:a2:0c:0c:8f:c2:c7:85:4d:f2:35:b9:
fe:fe:35:6e:8c:28:24:91:cc:ee:71:75:7e:b1:7f:
84:0f:23:d4:e9:8b:fa:f2:bb:08:f2:f2:f1:f4:e3:
cc:99:2e:62:26:3f:cc:34:5a:98:c4:cd:77:a3:4a:
44:d5:ac:e1:1f:0d:45:32:b5:a0:6c:8b:c8:4d:4e:
97:63:a5:ea:d6:e1:4b:61:66:b3:21:5b:ac:f2:22:
e5:1e:78:d6:12:5c:dd:8d:56:be:7f:f0:47:e4:c6:
f4:58:03:bb:f2:87:6a:5a:3f:6f:c3:96:61:5d:70:
79:23:6d:77:65:14:2b:7d:11:a7:6e:bb:8e:19:1a:
05:80:7a:c1:bc:89:a5:0c:db:4c:c4:b0:fe:1e:4e:
ce:01:54:29:c3:89:2a:b9:0e:ba:4f:36:ce:b1:81:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D5:C1:56:1B:35:10:C7:BD:B0:DE:F7:0B:0F:C2:C5:04:65:BD:DA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ztXBVhs1EMe9sN73Cw_CxQRlvdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
Signature Algorithm: sha256WithRSAEncryption
42:6a:54:a5:67:e2:d4:ef:39:a8:f6:75:74:1f:6c:e2:b6:96:
a5:c9:02:73:95:bb:fa:49:f7:73:52:08:c1:f8:a3:b4:77:03:
ec:55:b2:51:98:cf:5b:c1:2a:b0:21:a0:4e:9b:48:e4:1b:5b:
69:a7:c3:4e:60:e8:73:bb:ca:42:29:59:f6:fe:34:bf:83:7d:
6a:62:d5:43:78:ec:72:dd:9f:42:3c:9b:ae:9c:6a:5a:34:f4:
13:b2:9e:c6:94:53:e6:38:d4:0f:d9:b6:87:60:db:1a:ab:46:
bd:48:b7:e7:b2:7e:e4:cc:6b:2e:67:8b:dd:ad:4a:ff:40:5e:
f7:1d:e3:ce:e8:a3:3f:b4:79:0d:3f:44:0e:0f:fd:f6:c8:1b:
67:51:2a:24:2c:06:d2:72:72:8f:32:64:39:3a:c5:62:79:62:
70:4f:c9:3a:28:f8:47:40:ec:29:ce:68:12:c3:7d:35:b6:f3:
be:25:c3:bb:80:41:2c:a8:3d:a5:35:7c:46:41:97:84:cd:9d:
9e:02:73:52:d5:1d:97:c4:44:a7:e5:b5:6e:19:98:d8:0e:f0:
64:3c:74:7d:f5:5a:2c:64:8e:40:42:c6:0c:da:01:0b:88:97:
ce:cf:c0:63:8b:a1:a0:a7:24:40:a0:86:95:24:32:31:49:f4:
bc:bc:46:25
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 30 05:12:33 2023 by rpki-client on console-fra.rpki-client.org