Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9cPcuSX4-guRUO1xL-F_ESCOmoE.roa
File: 9cPcuSX4-guRUO1xL-F_ESCOmoE.roa (raw, json)
Hash identifier: Xls1Q3Iw65wRsto2PJ2eolmyLEjjHmMvIbhULoRAaaQ=
Subject key identifier: F5:C3:DC:B9:25:F8:FA:0B:91:50:ED:71:2F:E1:7F:11:20:8E:9A:81
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018DEB2B20792E08A11C6539E8E49D775C2C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9cPcuSX4-guRUO1xL-F_ESCOmoE.roa
Signing time: Tue 27 Feb 2024 15:24:48 +0000
ROA not before: Tue 27 Feb 2024 15:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 15:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:2b:20:79:2e:08:a1:1c:65:39:e8:e4:9d:77:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 27 15:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5c3dcb925f8fa0b9150ed712fe17f11208e9a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:bc:bf:05:8b:30:0b:08:af:71:cc:ab:cd:
95:d6:98:e2:97:47:6f:28:5c:e3:b1:6c:96:5c:19:
63:ca:09:e0:dc:f5:3d:32:af:98:89:bf:62:c1:06:
30:56:73:b6:d9:db:d8:39:79:1a:d5:d2:f4:75:5a:
45:c4:0c:8f:50:a2:ff:f9:bd:52:7d:b8:f2:ad:7d:
33:90:36:af:7f:47:0c:07:07:81:75:e7:3d:c9:ab:
af:d3:cf:fa:09:bd:c8:8f:2e:b3:dd:28:e8:e0:c3:
b8:4a:4e:9c:b9:85:99:f6:6e:85:6f:3f:b1:90:18:
f3:ad:ce:0f:28:fa:a4:b8:0f:d7:5b:7d:7e:b9:e8:
7c:49:f6:8b:05:44:eb:29:d3:96:c9:2a:77:2c:a0:
a4:96:5c:35:d2:a4:6c:95:04:9c:58:4a:96:22:47:
f6:ca:a1:ca:cb:6e:d2:d9:ef:b8:2d:88:e6:cc:ad:
cd:5c:ec:21:99:96:a7:c9:0d:42:2b:ca:2d:a4:51:
98:01:7e:e9:01:4e:6a:8e:8b:a9:09:f8:a4:ce:1b:
6f:30:5c:72:ba:bf:c5:9a:36:b5:51:a4:26:58:b0:
10:8a:0c:f5:8e:85:28:b2:06:2d:8b:3e:74:24:a8:
de:46:e7:fa:28:0f:a6:e9:ac:8e:b3:45:4d:ba:1f:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C3:DC:B9:25:F8:FA:0B:91:50:ED:71:2F:E1:7F:11:20:8E:9A:81
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9cPcuSX4-guRUO1xL-F_ESCOmoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.145.0/24
163.5.212.0/24
163.5.223.0/24
163.5.244.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:89:5d:48:66:43:3a:0d:3d:60:ea:45:e5:9f:3c:b9:43:1c:
d7:1a:0f:b0:eb:dc:b4:8a:5b:f2:fb:a7:57:4e:5a:7a:20:21:
d4:70:5a:77:49:31:69:0e:66:98:b0:81:c7:51:c3:3c:2b:a2:
c9:e7:7f:50:5d:c1:d8:41:99:51:e1:ec:65:3e:05:43:13:15:
bc:e6:b4:b6:58:f4:a6:50:d3:30:84:14:d8:b7:ea:ee:8b:61:
42:55:f7:33:f9:cf:9b:70:a9:e1:97:1a:ab:6a:4f:e8:83:c0:
ff:f6:91:34:b5:58:36:fa:d2:1f:51:69:f0:ce:90:f6:26:12:
19:bc:19:80:97:72:3c:54:12:51:16:b8:c4:fe:0e:d5:6c:45:
6f:93:65:02:18:75:a0:7f:ea:59:14:35:07:71:45:18:80:2c:
cf:70:c7:10:3e:ca:32:0c:96:ab:be:9b:df:8d:16:23:d9:44:
ef:88:13:9c:a3:f2:24:f3:05:63:f1:28:71:aa:3e:67:44:c6:
0b:24:0d:a5:02:d6:f6:64:bf:42:a5:a6:57:3d:ae:c3:06:2a:
7a:e5:0d:a7:f5:9e:37:7d:23:19:e2:21:b4:41:0b:93:d8:3b:
77:8a:fd:1d:e7:54:4b:89:5f:0d:35:a6:a2:47:87:27:74:79:
f8:bf:6b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 17:23:12 2024 by rpki-client on console-ams.rpki-client.org