Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/41896pCujT5UifYPlztwQbfNang.roa
File: 41896pCujT5UifYPlztwQbfNang.roa (raw, json)
Hash identifier: Cr4MLIdD4rcx4ZCrovzQ69ZlhTKmSP2jNbykvRLc2/Q=
Subject key identifier: E3:5F:3D:EA:90:AE:8D:3E:54:89:F6:0F:97:3B:70:41:B7:CD:6A:78
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191623FA1E4E765E9F6D48A7DAF962B7BAA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/41896pCujT5UifYPlztwQbfNang.roa
Signing time: Sat 17 Aug 2024 21:30:22 +0000
ROA not before: Sat 17 Aug 2024 21:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 13:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:62:3f:a1:e4:e7:65:e9:f6:d4:8a:7d:af:96:2b:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 17 21:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e35f3dea90ae8d3e5489f60f973b7041b7cd6a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:df:58:0a:cf:9e:19:73:cc:d9:29:3d:88:
ad:46:df:cf:56:94:4c:a7:9b:bb:e5:bf:34:b3:60:
69:c3:1e:e6:29:f3:e0:d5:03:83:e5:34:7e:14:88:
12:27:f7:ad:da:c1:b6:2c:30:84:62:df:cb:22:57:
bc:03:67:03:52:dc:57:e1:f0:56:d5:17:a0:85:b5:
08:f9:21:44:1d:0b:5b:1f:6d:02:d2:58:da:a3:49:
cd:43:62:f4:90:6c:69:da:b9:23:f3:fc:a7:07:dd:
bc:60:f0:31:4c:46:46:04:74:9b:77:91:f9:66:e3:
2d:34:5d:da:85:03:a8:fb:de:33:4a:58:35:3e:ad:
0a:68:e5:bd:6e:d9:00:13:d6:9b:ad:30:04:3b:55:
fe:a2:72:25:0c:53:dc:2a:22:d6:94:41:22:cb:47:
67:d5:4b:9d:77:11:4a:fa:07:be:94:7d:42:86:c7:
f9:d4:ae:f8:ec:f6:8d:97:55:3b:3f:36:68:92:fb:
fb:57:57:9c:91:73:91:77:f8:32:b9:b8:e4:f9:1d:
55:bf:58:46:e8:1c:47:5d:d0:92:e7:ea:5e:2e:0c:
1f:4d:1c:44:45:c8:1c:b0:94:00:4c:b3:35:59:33:
09:ca:44:be:e2:ed:8e:b8:9b:e0:b4:36:ce:e7:e2:
0f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5F:3D:EA:90:AE:8D:3E:54:89:F6:0F:97:3B:70:41:B7:CD:6A:78
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/41896pCujT5UifYPlztwQbfNang.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.134.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0a:f4:26:3e:89:23:68:4d:52:d3:ec:e0:6c:0e:d0:30:0e:
c5:c5:37:a5:95:35:30:0f:60:61:f1:78:45:55:6f:d7:83:96:
9d:48:9c:19:94:5e:f3:86:67:1d:70:e1:77:54:15:07:48:d5:
8b:e4:98:c4:01:1f:5c:5e:6b:d3:10:37:95:17:3e:9a:ae:6e:
1e:a4:09:b7:b3:c7:2d:03:0c:84:3a:0f:32:dd:d6:01:81:dd:
96:90:67:fe:38:76:83:1a:9e:60:d1:5c:23:e1:72:00:ae:52:
2c:ee:85:73:c0:2d:71:4c:99:48:06:f9:f3:95:14:51:c6:b3:
e6:57:28:88:fb:e2:03:58:6f:64:59:87:12:f5:b3:0d:03:ac:
45:7c:f3:d0:f5:c7:45:e1:c4:47:1d:3e:0b:2b:89:d1:fb:96:
9b:2b:dc:2b:39:41:16:68:1c:98:86:ec:f3:cb:86:f9:cb:79:
90:14:f0:29:8d:f8:ef:6d:33:84:76:83:ef:7e:81:7f:17:3b:
b3:1f:43:a5:4b:3f:fd:e7:fd:f3:5b:47:5a:1b:74:a9:ab:6c:
50:8f:b4:82:b6:ab:e7:97:ce:36:db:d0:09:a6:5d:63:9f:4d:
74:0b:a5:1b:20:54:bc:8d:65:35:06:3c:ce:a0:6d:a3:3a:9b:
cf:8d:8b:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFiP6Hk52Xp9tSKfa+WK3uqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwODE3MjEzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzVmM2RlYTkwYWU4ZDNlNTQ4OWY2MGY5NzNiNzA0MWI3Y2Q2YTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPLfWArPnhlzzNkpPYitRt/PVpRM
p5u75b80s2Bpwx7mKfPg1QOD5TR+FIgSJ/et2sG2LDCEYt/LIle8A2cDUtxX4fBW
1ReghbUI+SFEHQtbH20C0ljao0nNQ2L0kGxp2rkj8/ynB928YPAxTEZGBHSbd5H5
ZuMtNF3ahQOo+94zSlg1Pq0KaOW9btkAE9abrTAEO1X+onIlDFPcKiLWlEEiy0dn
1UuddxFK+ge+lH1Chsf51K747PaNl1U7PzZokvv7V1eckXORd/gyubjk+R1Vv1hG
6BxHXdCS5+peLgwfTRxERcgcsJQATLM1WTMJykS+4u2OuJvgtDbO5+IPCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFONfPeqQro0+VIn2D5c7cEG3zWp4MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNDE4OTZwQ3VqVDVVaWZZUGx6dHdRYmZOYW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowWGMA0G
CSqGSIb3DQEBCwUAA4IBAQAaCvQmPokjaE1S0+zgbA7QMA7FxTellTUwD2Bh8XhF
VW/Xg5adSJwZlF7zhmcdcOF3VBUHSNWL5JjEAR9cXmvTEDeVFz6arm4epAm3s8ct
AwyEOg8y3dYBgd2WkGf+OHaDGp5g0Vwj4XIArlIs7oVzwC1xTJlIBvnzlRRRxrPm
VyiI++IDWG9kWYcS9bMNA6xFfPPQ9cdF4cRHHT4LK4nR+5abK9wrOUEWaByYhuzz
y4b5y3mQFPApjfjvbTOEdoPvfoF/FzuzH0OlSz/95/3zW0daG3Spq2xQj7SCtqvn
l84229AJpl1jn010C6UbIFS8jWU1BjzOoG2jOpvPjYu0
-----END CERTIFICATE-----
Generated at Sat Sep 7 15:32:41 2024 by rpki-client on console-ams.rpki-client.org