Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9DHTcaAeLsSWmv50D-RjlRQm1Zs.roa
File: 9DHTcaAeLsSWmv50D-RjlRQm1Zs.roa (raw, json)
Hash identifier: 6bNUMDqtJqzN3BEQ5U4HfgiHQuZZ9ufD4Yq1UKAk4CU=
Subject key identifier: F4:31:D3:71:A0:1E:2E:C4:96:9A:FE:74:0F:E4:63:95:14:26:D5:9B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01938D820B29C950708888053C957649AE86
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9DHTcaAeLsSWmv50D-RjlRQm1Zs.roa
Signing time: Tue 03 Dec 2024 17:12:10 +0000
ROA not before: Tue 03 Dec 2024 17:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.1.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 11:05:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:82:0b:29:c9:50:70:88:88:05:3c:95:76:49:ae:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 3 17:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f431d371a01e2ec4969afe740fe463951426d59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:98:9f:71:4e:73:9e:48:b2:de:72:3c:9e:
57:75:e3:0e:d4:fd:09:f8:41:94:ab:20:cc:2e:39:
01:61:22:62:16:df:34:14:96:ad:a2:fb:5d:71:46:
16:36:e0:4f:69:1c:cf:fa:63:0d:f4:a1:41:2f:85:
ec:8b:9c:73:74:83:df:c3:f4:07:d9:8a:94:99:8a:
57:6e:9d:e7:5e:84:b1:4c:b5:01:13:4b:97:b1:cb:
34:20:d0:0a:8b:e3:e8:f6:55:74:29:e9:95:78:69:
ed:a9:88:b3:61:d4:56:f3:63:2b:81:d3:00:f5:f9:
d1:ea:b3:81:77:11:91:04:b5:38:d3:c1:9e:be:bc:
98:2f:c0:e7:c3:6b:48:27:74:9e:6b:9b:9b:2a:46:
08:c5:2e:e1:03:02:ef:af:73:31:8a:77:cb:54:76:
02:c0:3e:f2:f8:57:8c:0c:19:35:c9:b4:58:6e:8d:
ef:9a:8a:7f:74:8e:4e:6c:38:7c:af:93:22:7c:eb:
79:b1:d8:a3:c6:bf:a6:6e:17:5f:e8:4e:c6:8b:8c:
08:0d:da:f9:89:40:55:d2:51:ad:80:c3:8a:19:d5:
ce:cc:f9:c8:08:ce:88:60:d0:96:e7:73:cc:ae:24:
52:ab:95:52:c3:79:a0:fc:9e:ff:d9:76:0b:98:c8:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:D3:71:A0:1E:2E:C4:96:9A:FE:74:0F:E4:63:95:14:26:D5:9B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9DHTcaAeLsSWmv50D-RjlRQm1Zs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.1.0/24
163.5.3.0-163.5.4.255
163.5.6.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b7:39:cc:bc:df:b5:28:93:88:8f:75:24:5b:2a:35:73:54:
38:0a:63:74:56:00:5f:c3:f1:7b:b5:66:26:21:65:71:94:ba:
41:fa:05:b2:64:6b:87:1f:15:23:d8:d6:c6:c8:b2:e1:ae:da:
b0:dd:c9:c9:09:22:d0:17:b0:09:18:a3:db:87:87:6a:5e:cf:
9b:8a:c7:f4:03:5c:80:85:83:ea:70:01:e1:eb:6c:48:aa:9f:
96:15:19:d3:95:65:24:55:22:e1:37:9d:ba:98:86:7a:6a:4a:
97:b5:21:82:f0:3e:b5:06:4c:92:07:c4:35:d9:81:cf:a8:f1:
a2:9e:58:17:15:ce:59:7b:b5:ac:c9:ae:6d:c7:9e:59:f9:76:
72:06:46:70:f0:a1:ac:f5:43:0e:ac:ee:aa:ac:9c:bd:fe:7f:
d6:9f:1b:8b:ab:4a:31:7f:c3:58:25:52:c0:30:f2:32:4d:97:
4a:42:9b:06:ec:e2:7f:f1:92:4f:d1:80:8e:61:0d:55:8b:0e:
c2:cc:97:7e:88:04:51:8c:79:d2:49:98:2f:7c:b1:56:0e:4a:
b4:8a:99:92:4f:dd:fc:f5:be:86:35:14:49:42:84:6c:a5:ec:
f6:3b:67:56:fd:1d:5b:09:fd:4c:0e:6e:e9:b9:33:13:a6:10:
44:e2:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:35 2025 by rpki-client