Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/91A-oIIiUYMXtO4RJkZuIWTxxlQ.roa
File: 91A-oIIiUYMXtO4RJkZuIWTxxlQ.roa (raw, json)
Hash identifier: RM7Hzp1qgGRCCbSBmGSooxTNfeXdTEN31AE0/Xz7FiI=
Subject key identifier: F7:50:3E:A0:82:22:51:83:17:B4:EE:11:26:46:6E:21:64:F1:C6:54
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CDAF4D8B6BA0082B87E1EED77E0E0DF11
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/91A-oIIiUYMXtO4RJkZuIWTxxlQ.roa
Signing time: Fri 05 Jan 2024 18:48:48 +0000
ROA not before: Fri 05 Jan 2024 18:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198607
IP address blocks: 163.5.87.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 09:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:f4:d8:b6:ba:00:82:b8:7e:1e:ed:77:e0:e0:df:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 5 18:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7503ea08222518317b4ee1126466e2164f1c654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:7b:25:e6:51:6f:6d:08:9a:d8:97:20:61:
88:e6:67:f7:ad:e9:b7:e2:33:88:26:0c:ab:da:c0:
c9:e1:18:60:87:99:13:a8:a4:93:79:0b:2d:6d:2d:
51:9e:a2:93:fa:7c:f5:ed:e5:d9:67:28:87:bb:8e:
0e:b3:ed:af:23:12:0e:0b:26:95:f3:f3:5c:96:ef:
88:6d:5d:ef:65:d0:9d:a8:a9:2d:45:65:de:2b:18:
97:8d:b6:ab:5c:3d:b2:e4:53:c6:d3:d2:0a:f5:c9:
6d:53:b8:14:58:90:02:2e:b1:aa:61:9d:92:ef:81:
fc:90:53:9d:27:fa:91:74:f4:c1:12:ee:6e:04:b8:
71:e9:30:23:77:05:78:17:1e:af:fe:b2:00:b3:48:
aa:bc:66:6a:e8:a8:ab:fb:2f:00:31:2d:4b:7c:02:
5d:29:e2:40:b6:c1:39:5c:6f:36:28:52:59:81:fc:
d4:b2:89:ee:80:c2:5f:46:2a:4c:1a:b1:c0:d6:aa:
c8:8f:d7:f1:ca:73:ae:0a:41:76:68:20:cc:e8:97:
4f:1b:52:31:f2:ff:f5:d8:13:f8:5d:dc:66:f0:ac:
90:ce:f7:ef:21:d3:68:6d:5e:53:17:5a:a2:81:3c:
bd:3e:b4:bb:bc:9c:94:6b:f5:bc:98:ee:01:e7:50:
0a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:3E:A0:82:22:51:83:17:B4:EE:11:26:46:6E:21:64:F1:C6:54
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/91A-oIIiUYMXtO4RJkZuIWTxxlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.87.0/24
163.5.127.0/24
163.5.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:32:b8:ca:ee:60:b4:8d:63:05:f2:4a:20:06:d1:b9:e3:5c:
14:e9:77:d9:a6:52:da:41:eb:36:44:8f:a0:1f:fa:d0:52:e7:
a3:c5:87:b8:98:99:d0:3e:98:82:1a:02:03:d3:f5:67:13:6d:
3a:b4:e7:81:4f:f1:62:77:15:c0:23:95:31:8b:95:fa:4a:c5:
94:b3:6f:00:67:26:a1:0d:ad:3b:ae:54:69:bb:36:9d:7b:2d:
e5:31:00:78:3c:80:34:bd:82:34:10:02:05:0c:9d:cb:a6:73:
b2:5d:0d:04:2f:f1:ce:d5:af:55:21:c3:d2:ea:fe:1d:d7:55:
63:bc:05:ce:ab:76:05:69:49:52:5e:79:d5:8a:2c:03:f9:06:
77:06:5b:00:09:4b:1b:22:7a:af:d0:84:e1:6d:d3:73:80:63:
d6:7a:a1:80:98:8a:f0:81:c6:62:3c:09:4e:67:5b:89:25:5c:
5f:2b:88:74:c2:d7:64:08:96:bf:11:6f:f6:f9:3f:6e:d8:01:
e6:88:a9:63:f6:8b:17:8c:b2:b5:30:fd:68:fb:86:9f:25:f9:
a9:84:ce:35:cd:89:c3:69:c7:da:4a:6a:93:a2:2c:c2:a0:57:
a4:22:c6:38:78:77:08:e8:5a:76:73:04:b0:b2:31:3c:c5:fb:
ab:db:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 12:09:09 2024 by rpki-client on console-ams.rpki-client.org