Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E2AJAZI0SG1yZy_kb9IkFKrUdDE.roa
File: E2AJAZI0SG1yZy_kb9IkFKrUdDE.roa (raw, json)
Hash identifier: szeCkI4nEJEaxG0hcERoClgwkeK/9eViPHNtxZxrIB4=
Subject key identifier: 13:60:09:01:92:34:48:6D:72:67:2F:E4:6F:D2:24:14:AA:D4:74:31
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F33AC6AAA9BC364839F96664B1C1D2D08
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E2AJAZI0SG1yZy_kb9IkFKrUdDE.roa
Signing time: Wed 01 May 2024 10:21:28 +0000
ROA not before: Wed 01 May 2024 10:21:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43289
IP address blocks: 163.5.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:ac:6a:aa:9b:c3:64:83:9f:96:66:4b:1c:1d:2d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 1 10:21:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=136009019234486d72672fe46fd22414aad47431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:81:e7:1a:7b:43:ac:71:11:e0:40:46:24:
6b:24:3c:b1:9c:ac:8e:13:0b:81:e6:1a:d3:a6:74:
a1:03:9a:7b:c8:f8:03:26:83:c2:7f:55:ea:4b:98:
a9:70:e3:a0:c7:09:86:0b:94:04:75:22:45:3f:27:
6c:08:dc:34:09:78:46:d6:4e:5f:a8:56:4e:d8:e0:
af:b2:9f:72:3a:7e:07:d9:ef:ff:15:82:ff:51:98:
bc:56:4f:8c:79:4a:8b:eb:62:f3:eb:ee:7c:46:2c:
80:2e:88:ff:b5:3b:98:37:20:bc:2d:24:91:38:98:
0e:b3:26:c5:71:dd:83:28:59:9e:11:ac:35:1a:92:
36:c4:46:3b:17:6c:6b:4c:c5:b0:36:2d:a3:ad:f9:
e9:6a:90:0c:b8:4d:1b:4a:37:29:81:6b:f0:97:fd:
1e:48:76:d7:a1:91:dc:e9:6f:ed:26:8f:f2:e2:6f:
d8:61:c1:fc:c3:98:00:51:cb:f1:4b:d6:79:22:b5:
6d:cd:c9:ae:2b:dd:21:56:6f:6d:77:6c:b2:d1:cc:
05:e3:91:57:03:4d:9f:a6:d8:bd:7f:b3:5d:60:6f:
1c:b3:75:f1:ec:28:ef:ad:8c:4c:b7:b3:89:7f:a7:
4a:5c:53:e8:24:c9:83:91:d3:bc:6f:0b:c5:ab:77:
07:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:60:09:01:92:34:48:6D:72:67:2F:E4:6F:D2:24:14:AA:D4:74:31
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E2AJAZI0SG1yZy_kb9IkFKrUdDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.51.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b4:6e:e5:6b:ba:b0:8e:23:43:2e:00:50:1e:2f:09:76:bf:
72:2c:91:a8:96:24:77:02:bc:3e:d2:82:8d:85:3e:92:c4:a7:
f7:0d:3b:55:a9:9a:79:40:fc:39:b1:b3:5f:34:aa:0a:13:d9:
61:eb:8f:c0:6d:cf:c8:3c:10:d6:1d:9d:f5:8c:42:f3:b4:b2:
1b:16:a6:d8:15:71:80:07:56:21:eb:8c:37:1c:58:ab:9b:a4:
11:49:44:19:82:8d:33:68:96:df:7c:6f:12:62:80:06:ba:f6:
3c:74:6a:8c:2f:81:49:5e:4e:34:5e:b9:2d:43:4c:8d:65:30:
55:2f:db:fb:87:ec:1b:a9:a6:a2:59:d6:86:4f:30:4f:89:4a:
dd:12:60:7b:25:61:eb:15:b0:31:4d:7d:97:47:e4:c5:88:19:
9d:d0:c9:df:4f:ab:62:db:da:9a:e8:a4:02:8a:1d:46:15:92:
b0:4b:51:64:2e:4a:0e:63:08:d1:0a:15:97:0a:58:db:6b:91:
10:03:ae:73:20:c9:94:39:e0:0f:86:4d:75:d7:2e:2e:f8:7d:
fa:40:62:fa:bb:47:dc:58:27:42:90:4e:35:b0:2c:f9:31:c8:
02:57:10:98:5f:6f:42:2e:1a:9d:b4:70:14:70:ba:75:c0:f3:
fa:b9:2b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:04 2024 by rpki-client on console-fra.rpki-client.org