Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dm7O2R-tEesoC1ToD7VTghMyU-w.roa
File: Dm7O2R-tEesoC1ToD7VTghMyU-w.roa (raw, json)
Hash identifier: Zox03IBgcmohs0rx+rv6kjzgF4ryGe8/1AyWuqKxE1A=
Subject key identifier: 0E:6E:CE:D9:1F:AD:11:EB:28:0B:54:E8:0F:B5:53:82:13:32:53:EC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019127A3B27B092C8DA521833A1847B8A8F9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dm7O2R-tEesoC1ToD7VTghMyU-w.roa
Signing time: Tue 06 Aug 2024 12:22:05 +0000
ROA not before: Tue 06 Aug 2024 12:22:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 07:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:a3:b2:7b:09:2c:8d:a5:21:83:3a:18:47:b8:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 12:22:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e6eced91fad11eb280b54e80fb55382133253ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:53:43:0c:d3:92:6b:f4:27:5e:d2:98:f6:20:
bd:9b:78:52:e3:df:c8:f0:52:25:d9:11:3f:2a:da:
65:26:46:c4:1a:f1:e3:76:d8:c0:f4:96:e2:36:5e:
8b:19:79:d3:6e:11:49:f0:47:ca:19:89:85:7b:45:
79:42:6b:51:1a:24:7b:fa:67:9e:a8:92:c5:9f:d2:
05:fe:d2:34:53:72:87:6a:7f:14:79:76:49:03:2b:
ba:d6:69:c9:fb:8b:76:c8:7d:80:70:8f:07:b5:7d:
34:73:98:84:53:dc:12:ee:b3:7a:6e:89:80:fa:49:
27:4e:ab:4a:8e:3a:2d:50:66:7a:a9:84:4d:5e:f9:
d4:8d:bd:96:fd:11:21:78:9a:93:86:ee:a7:96:25:
d5:97:40:4a:f0:fb:ed:58:de:4e:b7:f7:24:1f:45:
5c:7c:eb:e9:37:b0:ce:61:1a:64:45:d0:2c:0c:ff:
ff:d0:cc:57:c7:8d:c8:99:f0:41:ca:5e:77:55:52:
a1:35:26:8b:39:da:5a:de:bf:b6:99:97:84:30:1e:
76:43:06:83:1e:ba:ee:7d:53:6a:bf:da:df:25:cd:
f1:f5:37:27:61:f3:34:fb:1a:ab:14:e7:61:38:14:
6f:ed:5e:3a:a0:f6:34:e9:5c:8c:d9:d4:76:bd:dd:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6E:CE:D9:1F:AD:11:EB:28:0B:54:E8:0F:B5:53:82:13:32:53:EC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Dm7O2R-tEesoC1ToD7VTghMyU-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.211.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
42:57:b3:fc:a9:21:37:2f:f8:7c:2c:16:74:89:8e:ff:0b:58:
8d:0f:2d:af:c4:62:23:3a:2c:95:f0:b0:63:57:16:49:2f:cd:
b8:98:bf:72:92:8b:9c:f2:ca:b0:6c:b3:a5:38:88:7f:2a:a2:
b6:3a:71:9c:17:b8:d1:f9:64:0b:9f:56:bc:0d:f8:c5:93:c9:
33:c4:f7:f3:fd:70:6e:28:b0:01:17:6e:99:30:7e:16:b5:fb:
94:7a:dd:b9:b9:f8:5e:0e:80:79:13:5d:25:13:a5:4d:21:8d:
db:f0:e4:ab:da:4e:05:a1:28:a7:9d:36:3c:1d:91:09:b8:61:
bc:b4:ef:27:ec:03:52:49:04:18:5c:9b:ee:2f:07:53:5c:38:
05:9f:d5:71:6e:8f:77:6b:64:19:b2:35:55:58:82:b1:bd:73:
ca:70:e2:10:fa:07:65:9b:6c:88:d7:8e:69:9c:38:f2:2a:cf:
b5:11:12:85:cb:53:8f:a0:5e:2f:5c:cb:8d:7a:54:34:65:62:
ea:46:67:92:11:6b:61:49:8c:93:42:92:16:8c:7e:55:15:18:
45:13:3d:c0:2e:19:f7:c8:13:af:6a:f4:25:28:c2:cb:30:23:
f0:a7:0d:69:c3:88:53:10:ee:3f:58:23:b5:c2:93:f2:35:d6:
a2:d0:bc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:22:18 2024 by rpki-client on console-fra.rpki-client.org