Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2ib6eb65IfMKFEru28JVAlYyJ1Q.roa
File: 2ib6eb65IfMKFEru28JVAlYyJ1Q.roa (raw, json)
Hash identifier: SSsTFePANQ2baY7ax7KERtlGRwBnoIjLh3dqcxf18qw=
Subject key identifier: DA:26:FA:79:BE:B9:21:F3:0A:14:4A:EE:DB:C2:55:02:56:32:27:54
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01938D820BB72E1B022879D9D68ED027C1B2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2ib6eb65IfMKFEru28JVAlYyJ1Q.roa
Signing time: Tue 03 Dec 2024 17:12:10 +0000
ROA not before: Tue 03 Dec 2024 17:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.2.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.24.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.50.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.57.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
163.5.81.0/24 maxlen: 24
163.5.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 11:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:82:0b:b7:2e:1b:02:28:79:d9:d6:8e:d0:27:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 3 17:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da26fa79beb921f30a144aeedbc2550256322754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:e7:4c:8e:62:97:42:d0:c8:bd:77:4c:ba:
5e:17:d7:64:0c:f6:f1:9b:bd:ea:40:90:a2:99:58:
92:b6:5c:b7:39:d7:d8:f6:66:da:a3:b9:4c:54:59:
b3:78:9e:0d:b7:b9:4c:bb:c9:ed:09:ea:17:a1:be:
8b:e3:21:61:91:9c:8e:2a:a2:f0:d9:50:ad:e9:0a:
58:65:f3:30:8c:18:c1:bc:d4:4d:d6:1b:57:ea:15:
a2:17:1f:5a:9a:fd:42:73:d6:e7:c7:c1:56:e7:c9:
48:9e:5d:30:4f:2a:fe:2c:80:f6:06:3b:67:d6:dd:
97:30:7c:33:c4:98:ef:93:cb:42:96:2b:52:10:bb:
ec:69:74:e9:c6:c6:d6:12:dd:d4:8b:14:80:56:4f:
5d:74:7d:09:c0:40:c4:55:3b:b5:6f:dd:4f:ed:fd:
bb:fa:b8:d0:d1:34:eb:94:f1:7b:14:06:af:6d:84:
b0:31:04:86:d1:40:90:dd:62:38:82:3b:bf:6b:18:
f0:18:6e:4d:7d:50:44:ed:42:6f:7d:ab:80:58:b0:
60:53:68:e4:bd:a2:ab:9d:cd:65:28:a5:77:99:a9:
52:39:90:d1:3a:b2:f2:82:81:87:02:82:2f:9a:bb:
31:9b:77:be:8e:47:cc:2a:ed:b5:33:0d:0a:50:85:
7f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:26:FA:79:BE:B9:21:F3:0A:14:4A:EE:DB:C2:55:02:56:32:27:54
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2ib6eb65IfMKFEru28JVAlYyJ1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/24
163.5.2.0/24
163.5.5.0/24
163.5.10.0/23
163.5.20.0/23
163.5.23.0-163.5.24.255
163.5.42.0/23
163.5.45.0/24
163.5.48.0/24
163.5.50.0/24
163.5.52.0/24
163.5.55.0/24
163.5.57.0/24
163.5.68.0/23
163.5.80.0/23
163.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
50:83:c0:34:16:3e:c5:a3:5f:7b:31:f4:01:0f:ad:12:7e:5b:
56:ba:22:03:28:dc:5d:1f:a1:0f:c0:51:4f:61:64:da:d3:d5:
80:3e:9c:27:7b:1f:7e:64:79:a7:ca:9a:61:d6:64:5a:c1:59:
eb:7f:c4:53:5b:2f:31:78:c3:48:fb:05:f5:de:5d:ce:f1:18:
46:c4:1b:55:c5:dd:40:9e:8c:72:66:84:94:90:4e:4e:82:7a:
12:b4:eb:c9:58:f9:0d:5c:b4:34:1e:78:10:e1:e0:b3:04:4a:
4d:bd:77:ed:24:09:07:3b:03:96:43:53:dd:5f:94:38:c6:7e:
d6:fd:60:39:63:50:3e:cc:52:43:7a:b8:8c:c8:aa:69:cc:25:
a6:c7:41:91:a5:c4:a5:c8:e9:08:6d:a8:c6:d7:e0:78:78:e0:
9b:94:c5:62:c9:e4:33:c9:4e:76:ad:d4:f4:b4:60:16:35:1e:
ed:06:d9:f6:75:25:3c:8f:75:5f:4e:71:88:cf:86:dc:91:bf:
11:a2:29:3c:3b:07:6b:79:ef:05:2d:ad:e5:ff:f2:be:5f:33:
33:02:a3:e6:ff:41:ed:c6:7c:b9:ba:0f:24:71:a3:04:34:6f:
df:cc:54:4e:d0:ab:05:0d:3d:6e:64:e8:14:2b:d8:ba:2c:3b:
f9:ee:c2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:47 2025 by rpki-client