Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CeBsBgJjMADbIJY9yO1ByGQKTA8.roa
File: CeBsBgJjMADbIJY9yO1ByGQKTA8.roa (raw, json)
Hash identifier: poCmVHh623wW0L9dxnJJVL/KrXqBu6v3IqFhDSpI7WU=
Subject key identifier: 09:E0:6C:06:02:63:30:00:DB:20:96:3D:C8:ED:41:C8:64:0A:4C:0F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019387CDC6FEDD9485EE94BA8453787A9303
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CeBsBgJjMADbIJY9yO1ByGQKTA8.roa
Signing time: Mon 02 Dec 2024 14:37:10 +0000
ROA not before: Mon 02 Dec 2024 14:37:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214411
IP address blocks: 163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:87:cd:c6:fe:dd:94:85:ee:94:ba:84:53:78:7a:93:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 2 14:37:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09e06c0602633000db20963dc8ed41c8640a4c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7d:b2:b5:4c:43:b8:b4:f3:94:77:67:b3:54:
8b:30:1c:b8:ab:ba:8e:d6:04:da:8d:ba:6e:ca:ef:
56:38:a3:99:25:c3:61:89:5c:70:08:06:a4:6c:d3:
33:d3:4e:4b:17:d3:1c:d8:84:5d:8b:8e:a7:f1:88:
82:7b:30:28:b8:37:6d:6a:2d:c2:bd:e1:c3:e4:27:
cc:36:0f:3b:a0:21:47:7d:4b:ec:75:9f:e1:3e:ce:
e4:71:1f:81:4f:2d:45:c6:72:97:0c:5d:0c:36:33:
db:0d:4b:b9:52:46:95:dd:f4:ab:a3:5f:3f:bd:94:
af:f9:38:40:3b:89:88:bc:be:70:18:72:e2:3e:33:
14:d4:49:aa:38:b6:64:00:b2:b6:96:3e:ae:ba:fb:
f4:a3:42:ca:cd:79:c3:8c:66:0e:50:74:12:50:f9:
67:6b:58:e2:7a:90:75:c3:dd:bd:41:37:46:a0:4e:
7c:a4:64:be:47:94:57:97:5d:68:2a:84:e2:6f:73:
70:ed:40:d6:1c:8f:ce:d7:4d:f2:05:21:b5:a6:8e:
b9:eb:89:06:c3:e1:be:3d:99:93:6f:19:c6:a5:83:
97:0c:91:7d:54:ea:6a:30:10:13:b9:af:3c:2c:4d:
0c:ea:a9:2a:0e:2b:8c:95:8f:ec:2d:09:5e:b7:45:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E0:6C:06:02:63:30:00:DB:20:96:3D:C8:ED:41:C8:64:0A:4C:0F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CeBsBgJjMADbIJY9yO1ByGQKTA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.157.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:5a:13:2b:40:c8:54:2d:84:37:76:22:3a:07:ee:9c:81:d9:
ff:dd:92:c3:6c:ba:08:52:c2:b9:59:69:9f:3c:a4:5e:e5:16:
90:78:07:b2:af:d3:99:a3:ad:ae:bb:37:7b:53:25:4c:e2:5b:
ba:f0:ae:ef:22:5d:76:3a:12:2b:21:93:d0:d3:44:12:e4:a8:
b4:72:a5:f2:f3:18:f6:87:f4:3b:42:4d:30:4b:d2:6d:81:d4:
8f:44:92:c0:cf:30:86:fa:d9:16:46:d6:a7:7b:8f:b1:29:f9:
3a:08:db:ae:37:be:5c:26:9d:52:9a:79:a1:21:e5:47:da:c3:
4a:5c:88:de:2f:eb:20:d6:37:c2:42:fb:5d:3d:3d:48:e7:c7:
df:4c:eb:b9:67:7f:4c:b9:4f:e8:42:09:0a:35:55:92:3e:6a:
93:a9:61:bd:06:f5:b0:e9:2c:37:51:ab:c5:81:a7:2e:68:85:
55:37:6b:48:65:25:62:9d:b8:50:80:be:3a:0d:88:d4:01:b4:
bf:af:6b:41:8b:2a:c6:e6:06:15:7c:6d:3f:77:49:a1:ed:0c:
7c:e4:c3:83:64:eb:9f:91:c5:a1:37:da:8d:60:f1:3d:1a:77:
6b:5d:17:c9:41:26:cd:a8:ee:d7:10:77:61:fa:4b:c6:44:47:
92:3b:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:46 2025 by rpki-client