Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AkyG2LA95hszh2BfVCf8qqkV5KE.roa
File: AkyG2LA95hszh2BfVCf8qqkV5KE.roa (raw, json)
Hash identifier: NDyzKDHgM79h31/hLIPHKIZOGrzGE5OlBbaUIBHIgb8=
Subject key identifier: 02:4C:86:D8:B0:3D:E6:1B:33:87:60:5F:54:27:FC:AA:A9:15:E4:A1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255667620D7C95C806DBD5B011A5EE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AkyG2LA95hszh2BfVCf8qqkV5KE.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 163.5.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 17:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:56:67:62:0d:7c:95:c8:06:db:d5:b0:11:a5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=024c86d8b03de61b3387605f5427fcaaa915e4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:20:e4:c2:55:c0:51:90:7c:60:a7:f6:55:a7:
bd:9f:f9:56:6b:83:98:c4:4c:bf:9d:29:5b:0a:84:
d7:a4:27:8c:6f:8f:c2:0a:ca:c4:7d:63:a5:ca:aa:
8c:0c:9c:94:8b:fb:08:46:c2:f1:a8:b5:16:78:6f:
cf:a0:c2:0a:3b:14:97:73:36:5c:87:b3:0a:91:7e:
d6:a2:52:90:c1:1e:79:27:2c:2f:bc:15:b5:5e:38:
89:3c:4f:14:88:3d:05:91:7d:09:31:09:2a:45:56:
05:62:60:e9:80:94:dd:68:43:03:6d:cc:2f:dd:e7:
80:70:e6:64:c3:a7:b0:e4:6d:d7:13:e8:42:f8:ea:
bd:f4:a1:ae:69:48:70:be:14:fb:10:0e:72:7c:79:
ae:51:65:60:9f:b9:78:f8:65:a4:7b:c4:6b:66:eb:
ec:51:e0:4f:cc:8f:a8:59:d2:af:1f:5c:c5:4d:2e:
28:f7:e9:ef:2a:98:94:e1:99:5f:f3:d7:99:7d:09:
e6:0b:40:b7:3c:8a:63:8b:72:eb:ec:6b:6b:f1:1a:
15:a1:c1:ec:07:e3:7a:aa:c4:d5:e4:fe:56:cf:d6:
78:80:d6:0c:81:68:16:e1:00:9d:a7:cb:0a:79:77:
bb:26:db:0b:ac:55:90:2c:cb:b9:d2:1f:39:13:1d:
2f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4C:86:D8:B0:3D:E6:1B:33:87:60:5F:54:27:FC:AA:A9:15:E4:A1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AkyG2LA95hszh2BfVCf8qqkV5KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:1d:0a:74:45:46:c5:3e:42:ef:c1:15:f1:f3:a4:3f:55:85:
3b:dc:bc:99:52:77:bd:fd:03:4e:b5:b1:af:19:56:6e:02:20:
e1:c2:45:70:bd:e5:89:1c:41:8b:f4:40:18:84:aa:87:2a:c6:
d4:c4:46:85:aa:a5:92:64:96:c4:3e:0f:64:d4:0d:47:0b:c1:
59:33:bc:e2:16:4b:17:bc:68:7e:8a:10:5f:40:83:73:ce:36:
40:c3:40:91:2f:d2:35:7b:28:bb:8e:4b:94:ff:54:f2:12:6e:
1f:5e:e9:e0:99:f2:9d:fc:90:db:6b:3b:26:f8:b8:3e:74:8a:
f9:d6:83:94:f3:0c:95:1d:41:d1:dd:cc:15:b3:58:6e:40:b4:
c9:84:bb:2b:14:c3:11:13:4b:9e:ee:de:a5:cd:c5:98:f3:f8:
09:3b:4f:31:cc:87:04:48:c3:1e:de:39:1f:96:da:c0:11:77:
2c:4d:57:5d:08:19:39:c7:57:52:02:61:02:64:ec:0b:33:db:
6e:92:4f:ad:c4:68:e1:58:26:e0:d7:e6:52:c8:9b:9e:25:5d:
fc:5b:8c:12:c6:f2:0e:9e:0d:b1:16:c0:f0:cb:4f:d7:81:c4:
d3:ff:9f:a4:e3:9a:f7:a4:db:77:6c:8c:64:4c:97:08:e8:aa:
7a:ad:ed:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJVZnYg18lcgG29WwEaXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwMTAxMDgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjRjODZkOGIwM2RlNjFiMzM4NzYwNWY1NDI3ZmNhYWE5MTVlNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSDkwlXAUZB8YKf2Vae9n/lWa4OY
xEy/nSlbCoTXpCeMb4/CCsrEfWOlyqqMDJyUi/sIRsLxqLUWeG/PoMIKOxSXczZc
h7MKkX7WolKQwR55JywvvBW1XjiJPE8UiD0FkX0JMQkqRVYFYmDpgJTdaEMDbcwv
3eeAcOZkw6ew5G3XE+hC+Oq99KGuaUhwvhT7EA5yfHmuUWVgn7l4+GWke8RrZuvs
UeBPzI+oWdKvH1zFTS4o9+nvKpiU4Zlf89eZfQnmC0C3PIpji3Lr7Gtr8RoVocHs
B+N6qsTV5P5Wz9Z4gNYMgWgW4QCdp8sKeXe7JtsLrFWQLMu50h85Ex0vJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAJMhtiwPeYbM4dgX1Qn/KqpFeShMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQWt5RzJMQTk1aHN6aDJCZlZDZjhxcWtWNUtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXpMA0G
CSqGSIb3DQEBCwUAA4IBAQA+HQp0RUbFPkLvwRXx86Q/VYU73LyZUne9/QNOtbGv
GVZuAiDhwkVwveWJHEGL9EAYhKqHKsbUxEaFqqWSZJbEPg9k1A1HC8FZM7ziFksX
vGh+ihBfQINzzjZAw0CRL9I1eyi7jkuU/1TyEm4fXungmfKd/JDbazsm+Lg+dIr5
1oOU8wyVHUHR3cwVs1huQLTJhLsrFMMRE0ue7t6lzcWY8/gJO08xzIcESMMe3jkf
ltrAEXcsTVddCBk5x1dSAmECZOwLM9tukk+txGjhWCbg1+ZSyJueJV38W4wSxvIO
ng2xFsDwy0/XgcTT/5+k45r3pNt3bIxkTJcI6Kp6re2I
-----END CERTIFICATE-----
Generated at Wed May 1 21:27:24 2024 by rpki-client on console-fra.rpki-client.org