Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/55IghO0oLCmSbV59WuwoWJV1OGg.roa
File: 55IghO0oLCmSbV59WuwoWJV1OGg.roa (raw, json)
Hash identifier: aSGl+KMszx01JZ66xB6h539io4cbuZcZBZcN/fgLJc4=
Subject key identifier: E7:92:20:84:ED:28:2C:29:92:6D:5E:7D:5A:EC:28:58:95:75:38:68
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01895A8FF89987B7140ED4738F7FEB9B9AE7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/55IghO0oLCmSbV59WuwoWJV1OGg.roa
Signing time: Sat 15 Jul 2023 17:18:51 +0000
ROA not before: Sat 15 Jul 2023 17:18:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 163.5.75.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 17:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:8f:f8:99:87:b7:14:0e:d4:73:8f:7f:eb:9b:9a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 15 17:18:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7922084ed282c29926d5e7d5aec285895753868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:fe:b2:87:b3:6c:9e:cd:30:a5:0f:3c:8f:
37:bb:81:88:01:5f:c6:e9:e5:84:d1:fe:2b:25:c2:
f9:32:80:3f:0c:91:08:d6:7d:01:1e:60:e6:42:f5:
90:5d:f6:fb:57:6f:49:fa:99:46:ca:0b:2d:e5:b2:
69:bd:8a:4f:c4:d4:4b:55:c1:3b:5a:63:60:3e:5d:
6b:c6:52:f1:0d:58:ad:fb:0c:23:09:87:01:b6:7a:
bc:5a:76:1e:31:1e:e1:b8:38:b8:d9:1a:5d:62:7a:
db:94:02:6c:bf:b1:49:ea:46:6f:74:3f:7f:cc:03:
72:3e:8f:7e:80:b7:0d:47:2f:63:66:ab:58:1e:59:
f1:22:f8:e4:d6:2f:e5:35:4d:5e:da:90:a1:8c:38:
9b:f0:c1:a1:41:02:49:51:86:67:4b:d4:d3:5a:c7:
e6:0e:32:89:b9:db:2b:32:7d:11:4b:b2:a7:af:1d:
6a:dd:62:7e:cd:91:7b:df:bc:07:94:9c:f9:4b:df:
5d:a8:d1:96:ad:11:f0:ab:27:d0:3d:c0:da:3a:07:
1a:4f:7b:c3:51:50:5c:e4:55:d4:a1:20:26:bb:57:
cc:3c:a4:c7:04:5b:ac:cf:00:cf:7f:84:e5:d8:4c:
35:8c:99:c6:39:99:ce:a0:4b:5f:98:a7:31:86:f1:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:92:20:84:ED:28:2C:29:92:6D:5E:7D:5A:EC:28:58:95:75:38:68
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/55IghO0oLCmSbV59WuwoWJV1OGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.75.0/24
163.5.84.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5e:8c:db:f3:ac:ef:64:40:4d:3f:9b:d1:68:b9:a5:ef:8c:
4a:ab:97:a3:d9:b4:5a:c1:ec:37:f3:3a:76:cd:39:70:08:17:
c3:4d:d3:1b:a6:dc:a4:7a:7c:4a:f1:49:2d:a4:22:55:96:f9:
e3:0b:5d:bd:a4:e0:12:92:cf:af:36:2b:be:62:3b:db:79:00:
14:c5:3f:bd:c4:d8:28:f5:e9:a1:71:96:12:63:b4:07:77:1c:
70:7d:be:24:ac:11:c9:16:23:44:e7:7d:ac:30:26:57:bf:c5:
ea:c6:eb:32:26:e7:0e:bf:53:3e:a1:ca:f3:cd:d9:ed:6f:f8:
b9:fd:de:73:73:85:56:97:3d:e4:1a:63:e4:6e:58:48:44:09:
f1:af:a8:51:6e:e9:12:52:37:98:a7:b2:7a:e4:90:5c:57:47:
d2:53:4b:74:70:57:ed:9f:82:6e:a2:56:69:5d:0e:73:e0:c3:
d5:19:81:fa:cb:e7:1c:84:c9:57:03:a1:62:ba:d2:d8:a7:30:
bb:86:f2:3c:83:5e:c0:ba:85:51:8e:f4:75:26:3c:38:c6:7d:
04:52:60:88:3d:2e:55:ac:67:45:ae:b7:b2:34:16:3a:90:95:
b9:56:fc:87:72:12:89:76:39:63:04:d3:71:80:cb:7d:7e:2e:
ba:c3:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:03 2024 by rpki-client on console-fra.rpki-client.org