Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7q4Xcyz5R2HcA4ozkNFaSrBUB_Y.roa
File: 7q4Xcyz5R2HcA4ozkNFaSrBUB_Y.roa (raw, json)
Hash identifier: 1A7nim4o/RpNIAOjxoFrjVBRbOVSbf2ZeoTm3bmKQrg=
Subject key identifier: EE:AE:17:73:2C:F9:47:61:DC:03:8A:33:90:D1:5A:4A:B0:54:07:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4254D34B4F8B834E03B160FDF6124D5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7q4Xcyz5R2HcA4ozkNFaSrBUB_Y.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 163.5.175.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:34:b4:f8:b8:34:e0:3b:16:0f:df:61:24:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eeae17732cf94761dc038a3390d15a4ab05407f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b0:9f:5c:da:66:19:61:6f:23:ed:b4:f2:4a:
80:07:58:8e:69:a5:f5:ce:32:b6:c4:c3:42:9f:e8:
9f:a6:8a:f7:91:48:cd:4e:75:2d:86:72:03:1b:8a:
57:b3:90:3c:7d:9b:ec:2c:00:87:9d:9a:e6:54:78:
2b:a0:af:92:cd:f9:32:a6:64:3f:29:92:1b:6f:59:
4e:d2:9d:09:f0:a8:36:b4:f6:74:70:6c:97:fe:24:
9f:fb:b3:f1:22:c4:84:13:22:47:e9:0d:a0:6a:8e:
7a:f4:f1:ac:08:db:65:64:22:a1:98:58:3d:a2:f7:
09:0b:4f:82:d0:38:12:cb:1f:b0:4b:51:62:42:f7:
91:a2:f0:cb:7e:9e:c7:ef:eb:87:17:29:c2:d8:e5:
da:25:34:ee:6f:13:95:b1:e6:35:ba:44:f5:06:bf:
d8:1b:32:10:82:59:60:90:49:0c:dd:7c:04:55:a9:
6c:65:b6:27:fb:ff:f5:2e:9d:81:73:30:2a:7f:99:
30:d3:d1:1e:1e:17:be:ba:7b:b5:d9:ac:3f:d5:b2:
bf:93:5c:20:ca:dc:09:e8:74:f1:c2:e9:5e:f7:0a:
fb:32:a1:fb:d9:8b:77:eb:75:41:83:9b:89:96:e1:
06:f8:d2:cc:d6:4a:db:61:d1:be:39:25:6d:9b:6e:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:AE:17:73:2C:F9:47:61:DC:03:8A:33:90:D1:5A:4A:B0:54:07:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7q4Xcyz5R2HcA4ozkNFaSrBUB_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.135.0-163.5.136.255
163.5.175.0/24
163.5.209.0/24
163.5.211.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8b:c8:73:95:3b:b6:f8:03:41:44:da:26:33:fa:05:76:3c:
31:2f:45:d4:7b:1e:c4:9c:a5:30:fb:fc:b2:93:76:0f:97:89:
c0:6e:73:7e:c8:94:3a:e8:e0:46:2e:5d:4f:8c:1b:bf:3b:6c:
b4:58:d8:7c:c6:88:e9:b6:3e:b9:af:30:0f:0d:26:b9:c1:b4:
45:60:9b:07:1a:8c:02:ac:be:cb:46:64:cb:4b:04:52:d9:cc:
53:02:74:86:7d:98:a6:69:44:0b:3b:fe:bd:92:50:eb:56:12:
5f:d2:ed:28:5f:9d:41:60:d4:19:b9:c9:b9:ae:90:74:8d:83:
42:d7:73:0f:fa:17:5d:3f:9d:1b:04:c5:aa:56:f8:e2:fa:ba:
03:9a:7b:37:1c:6d:89:7d:cc:48:bf:da:ac:62:f5:df:c6:1a:
7d:c2:27:be:a1:ee:d9:a6:07:00:ca:8b:48:92:f0:6c:5b:0c:
79:d3:e5:65:06:ca:c1:93:5e:54:7a:fe:d7:79:96:9b:ec:ea:
6e:8b:82:8b:cf:c0:8a:12:ba:0c:45:fa:42:93:de:b3:fa:a8:
bf:4e:87:34:d8:3d:94:1e:48:e5:6f:2e:a8:8f:68:d3:a3:d5:
50:ac:e4:00:18:ac:a4:fb:2f:57:ae:39:f9:2e:4d:54:be:6c:
91:ab:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 20:48:58 2024 by rpki-client on console-fra.rpki-client.org