Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3wHzKvilIASE4cqN_6zHfoVGPmM.roa
File: 3wHzKvilIASE4cqN_6zHfoVGPmM.roa (raw, json)
Hash identifier: /LAfZrc8Jn1nRTMM10qQh18N1AtPSVjId6bnE5Cw6lc=
Subject key identifier: DF:01:F3:2A:F8:A5:20:04:84:E1:CA:8D:FF:AC:C7:7E:85:46:3E:63
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42556EC8183D0B9D97D4F2EFE142BF4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3wHzKvilIASE4cqN_6zHfoVGPmM.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 16:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:56:ec:81:83:d0:b9:d9:7d:4f:2e:fe:14:2b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df01f32af8a5200484e1ca8dffacc77e85463e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:e2:06:ba:ba:72:35:09:b5:ed:37:7e:66:
25:7e:67:18:c1:f5:3d:38:4e:33:61:46:54:5d:ed:
fb:ac:5e:a8:dc:6d:2a:06:68:39:46:41:fe:65:7a:
2f:12:6c:3e:61:d7:76:81:bb:ab:b4:f8:94:9b:68:
7d:b4:3e:8c:50:54:31:aa:2b:07:ee:b9:64:16:98:
c1:00:4a:b4:63:7d:d4:0f:7d:67:68:e2:62:2d:d4:
71:1f:f6:53:64:6f:a6:90:19:ce:cd:0e:c2:e7:b6:
b2:f7:39:34:d4:f9:5e:63:5d:0a:9f:eb:d8:96:98:
02:9f:f3:58:85:f6:06:18:a5:3a:88:bf:c7:b2:7b:
37:d9:30:ba:22:7c:b4:a4:d8:a0:0f:2f:c2:d3:c6:
9a:5e:b9:bf:2e:5e:1f:b3:26:e3:ff:8e:68:9e:91:
3a:68:f7:e6:c7:97:3f:1d:54:e2:ed:43:61:dd:91:
88:78:e2:f9:58:4e:a2:96:4e:2a:22:a4:8c:da:08:
13:05:d8:75:13:c8:1b:40:6d:d3:39:89:d6:a7:b0:
65:36:7a:43:43:f3:74:7c:a5:21:0d:af:cc:63:c3:
da:5e:9c:f4:d6:91:76:27:50:39:5a:4b:e3:f3:98:
e8:86:f9:9a:6f:6e:8e:3c:4c:d2:4b:c6:0d:b6:ae:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:01:F3:2A:F8:A5:20:04:84:E1:CA:8D:FF:AC:C7:7E:85:46:3E:63
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3wHzKvilIASE4cqN_6zHfoVGPmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.104.0/24
163.5.129.0/24
163.5.157.0/24
163.5.194.0/24
Signature Algorithm: sha256WithRSAEncryption
97:94:9a:8b:e6:07:24:85:d3:4d:ef:30:56:d7:c7:aa:e5:35:
2e:c1:ae:56:39:5e:dc:70:90:c9:08:0d:c9:54:e6:10:3a:3f:
e4:43:63:2d:0d:75:8f:d5:82:74:55:a3:ba:d7:bc:4e:42:3b:
06:5e:20:f5:ba:f5:a4:2c:c2:b3:c5:0f:df:c8:67:41:97:55:
b3:4d:88:57:cb:46:c5:97:f6:b3:6c:ec:66:83:c3:2e:63:f6:
27:c5:58:47:0b:19:ea:28:b8:a8:1c:23:bf:27:33:84:c4:3e:
9e:99:5a:6e:8b:d5:bb:50:f2:d8:f9:0b:82:d4:ec:52:6a:d4:
89:b8:c4:ca:9f:54:cd:8b:c7:1f:b4:87:78:91:07:64:b4:a6:
a2:88:f3:fa:fe:2d:34:ac:64:38:a6:ee:08:e5:23:d9:2c:c3:
44:00:95:34:2b:35:e6:ce:91:c6:b5:01:3b:cf:f4:d2:bd:6d:
12:08:57:80:65:85:59:cf:d8:ab:74:7d:05:78:b1:f4:eb:45:
86:0f:0a:90:cb:ac:27:ad:11:c8:b0:78:06:4a:dc:85:95:8f:
91:17:00:44:44:46:48:2d:e4:3e:b9:8d:86:1f:84:88:2e:73:
aa:5c:2d:e7:1f:b1:09:1f:0e:39:7c:f3:b8:dd:c2:a8:63:38:
7c:16:66:f2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEJVbsgYPQudl9Ty7+FCv0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwMTAxMDgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjAxZjMyYWY4YTUyMDA0ODRlMWNhOGRmZmFjYzc3ZTg1NDYzZTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW7iBrq6cjUJte03fmYlfmcYwfU9
OE4zYUZUXe37rF6o3G0qBmg5RkH+ZXovEmw+Ydd2gburtPiUm2h9tD6MUFQxqisH
7rlkFpjBAEq0Y33UD31naOJiLdRxH/ZTZG+mkBnOzQ7C57ay9zk01PleY10Kn+vY
lpgCn/NYhfYGGKU6iL/Hsns32TC6Iny0pNigDy/C08aaXrm/Ll4fsybj/45onpE6
aPfmx5c/HVTi7UNh3ZGIeOL5WE6ilk4qIqSM2ggTBdh1E8gbQG3TOYnWp7BlNnpD
Q/N0fKUhDa/MY8PaXpz01pF2J1A5Wkvj85johvmab26OPEzSS8YNtq6mqwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN8B8yr4pSAEhOHKjf+sx36FRj5jMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvM3dIekt2aWxJQVNFNGNxTl82ekhmb1ZHUG1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowVoAwQA
owWBAwQAowWdAwQAowXCMA0GCSqGSIb3DQEBCwUAA4IBAQCXlJqL5gckhdNN7zBW
18eq5TUuwa5WOV7ccJDJCA3JVOYQOj/kQ2MtDXWP1YJ0VaO617xOQjsGXiD1uvWk
LMKzxQ/fyGdBl1WzTYhXy0bFl/azbOxmg8MuY/YnxVhHCxnqKLioHCO/JzOExD6e
mVpui9W7UPLY+QuC1OxSatSJuMTKn1TNi8cftId4kQdktKaiiPP6/i00rGQ4pu4I
5SPZLMNEAJU0KzXmzpHGtQE7z/TSvW0SCFeAZYVZz9irdH0FeLH060WGDwqQy6wn
rRHIsHgGStyFlY+RFwBEREZILeQ+uY2GH4SILnOqXC3nH7EJHw45fPO43cKoYzh8
Fmby
-----END CERTIFICATE-----
Generated at Fri Feb 2 20:33:30 2024 by rpki-client on console-fra.rpki-client.org