Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3a7dDzzU3ZSM-yvFIkxeh0Pt8Vg.roa
File: 3a7dDzzU3ZSM-yvFIkxeh0Pt8Vg.roa (raw, json)
Hash identifier: D0/cvCnBpPaSaD92M6QyBk0Zd2WbDz+MrVDNmmTRNRI=
Subject key identifier: DD:AE:DD:0F:3C:D4:DD:94:8C:FB:2B:C5:22:4C:5E:87:43:ED:F1:58
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01928A2E70375A365F55CF16DD74FA9B68BE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3a7dDzzU3ZSM-yvFIkxeh0Pt8Vg.roa
Signing time: Mon 14 Oct 2024 08:39:12 +0000
ROA not before: Mon 14 Oct 2024 08:39:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 163.5.135.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 06:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8a:2e:70:37:5a:36:5f:55:cf:16:dd:74:fa:9b:68:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 14 08:39:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddaedd0f3cd4dd948cfb2bc5224c5e8743edf158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:03:f7:b6:a8:f0:af:96:69:9f:9e:b4:91:1c:
23:20:df:36:93:9c:f1:f0:a4:b0:69:50:f5:8c:5b:
9c:62:19:34:de:07:56:4e:c6:d2:8d:de:f6:5a:65:
65:51:d6:01:ab:97:62:b6:04:73:0c:b3:0d:e2:c5:
b2:61:66:64:df:f4:e7:9d:78:b4:5b:57:1d:a6:82:
06:7b:44:3d:fb:11:87:e5:46:0c:d9:e0:4e:f3:0a:
a4:79:65:d4:55:38:fc:0f:32:59:9c:9f:f8:39:e0:
0f:2c:22:f4:d8:41:09:be:55:59:88:5c:a5:65:46:
01:82:5f:2a:65:02:ff:c9:af:87:e5:0a:36:d5:b1:
ac:a5:91:41:9f:e6:8e:17:41:c4:a7:9b:58:5c:bf:
39:55:76:1f:01:67:56:40:d9:4a:0b:37:2a:c3:7a:
75:ac:d4:00:a4:69:0a:fd:bd:c8:00:ee:c9:8b:22:
c5:44:bb:39:d8:a4:da:ee:7c:54:bd:1a:28:e0:1d:
c2:58:26:44:40:e6:f3:2b:b5:67:2e:cd:bb:3b:bd:
7e:1f:ba:e7:01:d2:ea:17:dd:24:3b:87:73:89:24:
40:67:9d:d9:3b:e3:bf:d6:06:0f:a1:af:96:35:6c:
c5:df:b3:9c:bb:5b:c7:19:d4:30:87:bb:25:30:72:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:DD:0F:3C:D4:DD:94:8C:FB:2B:C5:22:4C:5E:87:43:ED:F1:58
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3a7dDzzU3ZSM-yvFIkxeh0Pt8Vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.135.0/24
163.5.175.0/24
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
92:27:be:cf:f3:2d:f9:06:a3:56:bc:92:e6:6b:56:53:63:f8:
dc:61:32:14:76:d0:0b:5d:6d:c0:80:73:11:db:9d:05:db:02:
70:ae:ec:31:d4:0b:db:d6:bd:82:3f:95:20:c5:1a:97:e9:e2:
8f:1c:10:55:b8:3d:fa:15:58:91:9e:a7:0e:b7:8f:50:fb:de:
c4:49:0c:f7:54:97:20:8c:e3:9e:6c:f5:f4:d1:92:0d:76:df:
87:4b:3c:ce:e8:3d:cb:76:01:43:a7:4c:f4:7a:74:05:78:87:
49:55:d6:a8:ff:d4:ad:d7:7f:b7:c7:dd:2f:d0:fa:24:87:d0:
b3:9a:74:ab:3b:cc:4d:0e:99:51:95:19:d1:74:e2:2a:88:01:
78:a0:09:e3:dc:e0:c7:a7:d3:1c:1b:b4:69:8d:cf:24:31:e5:
38:ab:c2:ef:b5:07:a5:9e:6e:95:22:4c:29:f1:25:92:58:f8:
e1:29:d2:da:10:44:9d:a5:68:58:d0:9f:51:7d:0d:5a:6b:1b:
3e:e1:01:bd:63:d7:0f:7c:a8:32:6c:35:43:d9:6a:3d:c7:58:
e5:5d:b2:44:59:81:0a:cd:94:e4:cb:c9:4c:f2:19:20:71:fe:
43:34:06:de:68:d2:7d:b3:9d:20:6d:f9:f0:d9:52:cb:d1:81:
41:d4:3d:a5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZKKLnA3WjZfVc8W3XT6m2i+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMDE0MDgzOTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGFlZGQwZjNjZDRkZDk0OGNmYjJiYzUyMjRjNWU4NzQzZWRmMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AP3tqjwr5Zpn560kRwjIN82k5zx
8KSwaVD1jFucYhk03gdWTsbSjd72WmVlUdYBq5ditgRzDLMN4sWyYWZk3/TnnXi0
W1cdpoIGe0Q9+xGH5UYM2eBO8wqkeWXUVTj8DzJZnJ/4OeAPLCL02EEJvlVZiFyl
ZUYBgl8qZQL/ya+H5Qo21bGspZFBn+aOF0HEp5tYXL85VXYfAWdWQNlKCzcqw3p1
rNQApGkK/b3IAO7JiyLFRLs52KTa7nxUvRoo4B3CWCZEQObzK7VnLs27O71+H7rn
AdLqF90kO4dziSRAZ53ZO+O/1gYPoa+WNWzF37Ocu1vHGdQwh7slMHLEZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN2u3Q881N2UjPsrxSJMXodD7fFYMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvM2E3ZER6elUzWlNNLXl2RklreGVoMFB0OFZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowWHAwQA
owWvAwQAowXRMA0GCSqGSIb3DQEBCwUAA4IBAQCSJ77P8y35BqNWvJLma1ZTY/jc
YTIUdtALXW3AgHMR250F2wJwruwx1Avb1r2CP5UgxRqX6eKPHBBVuD36FViRnqcO
t49Q+97ESQz3VJcgjOOebPX00ZINdt+HSzzO6D3LdgFDp0z0enQFeIdJVdao/9St
13+3x90v0Pokh9CzmnSrO8xNDplRlRnRdOIqiAF4oAnj3ODHp9McG7Rpjc8kMeU4
q8LvtQelnm6VIkwp8SWSWPjhKdLaEESdpWhY0J9RfQ1aaxs+4QG9Y9cPfKgybDVD
2Wo9x1jlXbJEWYEKzZTky8lM8hkgcf5DNAbeaNJ9s50gbfnw2VLL0YFB1D2l
-----END CERTIFICATE-----
Generated at Thu Oct 24 09:01:22 2024 by rpki-client on console-fra.rpki-client.org