Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0PWrfOWGiw-nhGSP9spNKikkPDk.roa
File: 0PWrfOWGiw-nhGSP9spNKikkPDk.roa (raw, json)
Hash identifier: jOAxhYLzD/COA/pJGu3J2WdjLCJBVFbROQ4wAaU3wMw=
Subject key identifier: D0:F5:AB:7C:E5:86:8B:0F:A7:84:64:8F:F6:CA:4D:2A:29:24:3C:39
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191C31BC5E7EF9A720E1DF6F0A2AD3AD644
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0PWrfOWGiw-nhGSP9spNKikkPDk.roa
Signing time: Thu 05 Sep 2024 16:54:22 +0000
ROA not before: Thu 05 Sep 2024 16:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.58.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 16:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:1b:c5:e7:ef:9a:72:0e:1d:f6:f0:a2:ad:3a:d6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 16:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0f5ab7ce5868b0fa784648ff6ca4d2a29243c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:f0:c2:2a:af:b2:8b:a1:23:d6:1b:5b:35:
ce:c2:69:2c:ac:13:5e:9d:5b:f8:0e:13:88:64:6d:
55:d1:01:29:93:b0:d1:bb:d8:63:ba:35:4d:a8:99:
99:bb:80:cd:9a:9a:92:4d:a7:41:32:5f:dd:17:ab:
d9:ac:c4:aa:08:f1:ec:42:f5:9f:af:fc:51:c2:c6:
ed:17:44:1f:c9:a9:0a:4b:e9:74:a8:c6:90:e1:bd:
34:df:7f:5e:65:f4:50:5f:01:b3:50:68:4f:6a:81:
d6:03:89:cc:97:55:ef:03:69:d0:2e:d7:bf:cb:02:
fd:65:f5:61:45:3e:49:b5:ec:78:7a:37:e5:32:81:
50:95:b1:5d:16:5f:51:55:24:5a:46:51:cf:29:e7:
1c:6e:f7:bf:f4:b7:c8:b8:02:7b:a4:91:bb:11:da:
b7:2d:64:63:9f:fb:5d:6f:cf:fa:ff:7a:28:d4:d5:
ad:f9:0f:46:af:dd:fb:2a:49:b1:a5:4e:8a:99:e2:
c9:7a:f4:88:92:14:85:bb:70:3c:8d:63:5b:bb:b0:
e6:f8:5d:a8:94:26:90:a8:1e:8a:f6:a9:1b:8a:8c:
2e:99:b5:1f:97:d5:e7:a6:b4:ea:73:bf:63:78:d3:
ee:6c:f5:eb:d7:7e:f6:a9:c6:c4:c8:0a:7f:0e:6a:
8a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:AB:7C:E5:86:8B:0F:A7:84:64:8F:F6:CA:4D:2A:29:24:3C:39
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0PWrfOWGiw-nhGSP9spNKikkPDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.245.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8b:48:13:00:ac:e3:c7:fd:01:d1:38:84:70:50:04:e4:86:
5b:6c:c8:87:bb:14:0e:c0:11:0e:eb:0a:5c:eb:00:07:9d:6b:
cf:e6:30:08:f5:0f:4c:d4:cd:01:11:6e:ef:94:78:05:33:fb:
ba:14:e9:89:fd:a8:b1:1b:59:00:81:7d:34:39:19:cc:01:45:
ce:bc:56:17:3d:c2:ef:d3:a5:8b:53:60:1a:b9:01:a9:38:2c:
06:07:06:11:3a:4b:13:7e:b4:af:91:02:56:68:f7:1f:17:0d:
2d:e7:ed:4c:d1:00:a1:a3:12:4b:da:da:ee:5d:3d:2d:ce:57:
16:b6:57:e9:d5:4c:b9:10:ca:a7:15:bd:c2:fe:df:75:dc:72:
de:4b:e3:9f:2c:06:d4:73:c2:0f:44:01:24:c1:49:f4:3e:1f:
2e:66:b7:8b:a2:ee:2a:81:3e:db:b1:28:dc:a8:f1:3a:09:36:
78:14:a7:15:ab:04:51:f6:f3:56:8c:aa:04:75:60:b4:94:e4:
50:1e:d6:93:33:b4:4d:c8:f4:a7:e7:28:0c:65:0a:27:a3:52:
58:8d:4c:57:a6:c3:a7:b3:d5:e2:0e:87:d4:54:44:4a:35:28:
f8:56:31:27:6e:6c:dc:26:4c:19:11:40:16:7c:55:5a:91:47:
4d:8f:74:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHDG8Xn75pyDh328KKtOtZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwOTA1MTY1NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGY1YWI3Y2U1ODY4YjBmYTc4NDY0OGZmNmNhNGQyYTI5MjQzYzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBnwwiqvsouhI9YbWzXOwmksrBNe
nVv4DhOIZG1V0QEpk7DRu9hjujVNqJmZu4DNmpqSTadBMl/dF6vZrMSqCPHsQvWf
r/xRwsbtF0QfyakKS+l0qMaQ4b00339eZfRQXwGzUGhPaoHWA4nMl1XvA2nQLte/
ywL9ZfVhRT5Jtex4ejflMoFQlbFdFl9RVSRaRlHPKeccbve/9LfIuAJ7pJG7Edq3
LWRjn/tdb8/6/3oo1NWt+Q9Gr937KkmxpU6KmeLJevSIkhSFu3A8jWNbu7Dm+F2o
lCaQqB6K9qkbiowumbUfl9XnprTqc79jeNPubPXr1372qcbEyAp/DmqKnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFND1q3zlhosPp4Rkj/bKTSopJDw5MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMFBXcmZPV0dpdy1uaEdTUDlzcE5LaWtrUERrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowU6AwQA
owX1MA0GCSqGSIb3DQEBCwUAA4IBAQA+i0gTAKzjx/0B0TiEcFAE5IZbbMiHuxQO
wBEO6wpc6wAHnWvP5jAI9Q9M1M0BEW7vlHgFM/u6FOmJ/aixG1kAgX00ORnMAUXO
vFYXPcLv06WLU2AauQGpOCwGBwYROksTfrSvkQJWaPcfFw0t5+1M0QChoxJL2tru
XT0tzlcWtlfp1Uy5EMqnFb3C/t913HLeS+OfLAbUc8IPRAEkwUn0Ph8uZreLou4q
gT7bsSjcqPE6CTZ4FKcVqwRR9vNWjKoEdWC0lORQHtaTM7RNyPSn5ygMZQono1JY
jUxXpsOns9XiDofUVERKNSj4VjEnbmzcJkwZEUAWfFVakUdNj3S6
-----END CERTIFICATE-----
Generated at Wed Sep 11 19:10:19 2024 by rpki-client on console-fra.rpki-client.org