Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7LSeethqc0d60TsGP4uF4FdaTKc.roa
File: 7LSeethqc0d60TsGP4uF4FdaTKc.roa (raw, json)
Hash identifier: saja8LqbGyzVZbinBEULsv2kyH0tzsbtiVRVMFh+ThM=
Subject key identifier: EC:B4:9E:7A:D8:6A:73:47:7A:D1:3B:06:3F:8B:85:E0:57:5A:4C:A7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193086DDA95E3989866393860A966F60754
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7LSeethqc0d60TsGP4uF4FdaTKc.roa
Signing time: Thu 07 Nov 2024 21:00:37 +0000
ROA not before: Thu 07 Nov 2024 21:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 18:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:6d:da:95:e3:98:98:66:39:38:60:a9:66:f6:07:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 7 21:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ecb49e7ad86a73477ad13b063f8b85e0575a4ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:80:3d:9d:74:e0:e9:aa:67:98:3f:7f:91:a1:
58:f6:95:a4:a5:72:56:5d:47:d4:41:27:0d:68:2d:
1e:93:e0:52:c6:f1:b1:23:cf:c5:1f:83:ca:54:aa:
46:49:59:b4:5a:cf:d0:dd:09:49:bb:0d:b4:1e:2d:
f2:7f:4a:5a:fc:db:8e:37:85:ca:b1:bd:ab:f0:f4:
45:a3:b4:2f:19:c1:bb:51:44:b5:87:7a:15:da:fc:
d7:c9:3f:f8:ee:1f:cf:bf:89:fa:cd:cb:25:ab:91:
13:67:a6:01:4b:55:57:ab:2e:7b:2d:e0:28:56:1a:
a6:5e:d3:4c:fb:94:c2:ea:fc:63:57:cf:d5:86:ea:
94:90:c7:26:a3:24:43:01:d3:ec:03:16:91:f8:d4:
43:6d:3a:28:21:1c:fa:a1:5d:5f:43:5a:88:29:08:
ec:4a:31:61:f0:bc:fd:ed:23:d2:5a:8b:ca:da:90:
6c:4e:6e:09:63:ed:ca:4a:e5:a6:45:2d:80:8d:0b:
d8:fb:3d:0f:cd:75:8b:9f:d5:10:14:23:9d:43:ea:
86:59:38:3b:b4:3c:75:66:be:31:1b:66:b0:1f:91:
4a:b9:91:f5:47:d6:b4:0b:35:bb:48:21:03:bd:c2:
df:4d:f5:b2:cb:47:48:09:ed:69:87:6d:f3:d9:58:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B4:9E:7A:D8:6A:73:47:7A:D1:3B:06:3F:8B:85:E0:57:5A:4C:A7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7LSeethqc0d60TsGP4uF4FdaTKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:1f:14:53:3e:ba:10:bf:52:cd:33:63:30:63:70:ca:b8:5a:
de:46:02:dc:b8:09:56:62:27:67:f6:32:b9:d5:75:c1:79:33:
f2:b7:90:8a:84:a8:b7:d6:1b:fb:2d:cb:4f:f9:7f:1e:c5:b3:
aa:af:64:bb:65:aa:61:a0:87:7d:36:74:9b:38:90:06:30:b0:
c2:6e:d8:ea:36:0e:36:f4:50:4b:88:ec:6c:39:5b:75:f3:3c:
cd:22:2c:56:c2:64:ef:76:1f:32:71:82:cf:f1:c3:e8:90:ba:
a7:0e:c8:0f:1f:48:bd:8e:8e:92:d5:03:ad:e3:41:f6:64:1d:
90:95:65:0e:21:94:e3:92:98:05:52:3d:7f:e3:e4:ca:72:c7:
b0:d3:6f:67:ce:b2:76:60:bb:af:20:a5:e3:4f:d8:71:44:b6:
a6:3f:7a:26:2e:34:76:df:5a:cc:6b:af:cf:4f:a5:06:af:dc:
59:6e:55:c8:f5:14:71:52:da:27:14:7d:11:74:cf:15:2a:93:
73:c4:7f:cd:3e:2f:3e:c9:11:b3:03:b8:be:54:4a:73:7b:bd:
83:5a:15:01:d0:b1:fd:85:cd:51:13:42:56:34:52:8a:2a:d3:
04:f5:3d:45:01:b0:8c:cb:67:25:58:8b:a4:c3:57:f9:83:f1:
9c:51:62:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:30:01 2024 by rpki-client on console-fra.rpki-client.org