Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zuY2hfy8W31viOYBmMLsLbAaj2I.roa
File: zuY2hfy8W31viOYBmMLsLbAaj2I.roa (raw, json)
Hash identifier: NhQL9Pf42r40boRm2EastD5MVfTpM64tO29iXjp1RV8=
Subject key identifier: CE:E6:36:85:FC:BC:5B:7D:6F:88:E6:01:98:C2:EC:2D:B0:1A:8F:62
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042C54EAAF6C5BFE46EEF9F71AC308C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zuY2hfy8W31viOYBmMLsLbAaj2I.roa
Signing time: Mon 02 Jan 2023 02:15:02 +0000
ROA not before: Mon 02 Jan 2023 02:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150303
IP address blocks: 163.5.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:c5:4e:aa:f6:c5:bf:e4:6e:ef:9f:71:ac:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee63685fcbc5b7d6f88e60198c2ec2db01a8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:67:e0:80:b2:97:e1:07:5a:78:57:6f:98:87:
1a:68:61:5a:80:46:62:9f:3e:c2:1c:54:65:3f:1f:
a5:6b:01:ee:70:5a:1b:0f:e3:8a:a0:21:cf:10:76:
b7:1f:49:c9:7b:27:53:c1:db:d2:6e:00:bf:45:75:
0c:75:b4:14:99:02:85:26:44:b4:a5:9e:37:d4:d6:
2b:44:dd:f2:44:1a:92:42:6e:6d:4d:a4:73:bc:e0:
13:25:6a:fb:a7:0c:b5:c9:68:97:2e:3b:81:5f:a2:
06:b0:a4:a6:eb:74:1c:9f:34:1a:d3:1f:9c:77:5b:
6d:c4:0f:7a:2c:43:1c:99:08:78:8a:56:a3:40:18:
b1:f8:6b:8b:d0:4d:cf:7b:ef:81:90:57:2e:8f:bb:
25:16:13:3d:1c:93:77:73:53:c8:99:46:7b:95:41:
d5:65:a5:cc:1e:0f:51:b9:6e:86:69:a3:0d:de:8d:
15:34:33:d4:fd:88:df:34:1d:7e:3d:b0:f3:35:d5:
1b:c5:98:ca:b4:cf:45:15:4c:93:13:55:51:a7:62:
95:3b:70:e9:bc:63:01:d5:00:2a:24:f4:71:8b:02:
64:8e:e2:cc:05:2d:55:2a:ef:9a:8d:51:3d:c7:29:
28:d9:d1:d9:81:98:87:57:c0:d9:6f:df:31:9b:db:
2b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E6:36:85:FC:BC:5B:7D:6F:88:E6:01:98:C2:EC:2D:B0:1A:8F:62
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zuY2hfy8W31viOYBmMLsLbAaj2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:70:df:83:85:a2:fa:f5:92:c0:11:25:50:fd:92:d4:8a:8a:
f7:4e:94:80:92:5d:ec:7f:88:8d:af:ce:62:39:bc:88:4d:c1:
63:cd:33:9f:98:97:93:2e:73:55:13:d5:79:b8:8c:bf:5d:5e:
95:bd:c3:d4:47:5d:cf:8a:32:38:f5:d2:86:e1:c7:5e:87:d7:
4b:c1:c1:83:60:1e:a5:a4:26:0a:fe:57:be:f3:33:69:00:45:
3f:34:26:16:68:d9:31:45:d3:69:40:e3:77:17:ef:76:c6:15:
68:89:22:9d:dd:54:e5:61:2a:7f:35:bc:94:05:5e:77:e6:97:
da:37:57:fc:60:a6:0a:71:52:ef:f6:39:04:19:55:3b:de:c7:
4f:1e:4b:53:0e:a4:b9:2d:27:16:29:f2:17:43:f9:a9:0c:ae:
95:b2:9a:bb:e7:64:cf:a0:08:03:cb:24:4d:a1:f4:a2:dc:ec:
65:5f:11:39:95:86:3a:17:d8:e0:70:9b:dc:4f:0e:11:d2:17:
ea:74:91:de:30:2e:c7:7f:98:81:9c:a4:0f:46:f3:fd:f1:56:
5f:e2:eb:a1:8c:0a:3b:06:58:8c:41:74:f6:57:9e:67:e7:35:
9b:93:98:90:a7:35:6e:e8:43:c7:28:87:b7:a3:eb:2f:3b:38:
c0:79:db:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:12 2023 by rpki-client on console-ams.rpki-client.org