Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EQ9sFO2aPhkqJ9pgyqVjhEjhVk0.roa
File: EQ9sFO2aPhkqJ9pgyqVjhEjhVk0.roa (raw, json)
Hash identifier: Zb8HkRKEUR5OazIboWHg3TC56WTb0UNYBmCyefXrJe4=
Subject key identifier: 11:0F:6C:14:ED:9A:3E:19:2A:27:DA:60:CA:A5:63:84:48:E1:56:4D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01887224286E2FB9D46DD9E89578AC049E05
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EQ9sFO2aPhkqJ9pgyqVjhEjhVk0.roa
Signing time: Wed 31 May 2023 14:09:12 +0000
ROA not before: Wed 31 May 2023 14:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 11:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:24:28:6e:2f:b9:d4:6d:d9:e8:95:78:ac:04:9e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 31 14:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=110f6c14ed9a3e192a27da60caa5638448e1564d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:a3:cb:c3:91:71:4f:11:af:7c:c3:d2:1c:
e3:3e:7a:de:28:9d:3f:89:28:44:fb:29:53:76:d9:
4c:bc:f9:5b:8c:17:82:24:e7:0c:4b:e4:e0:d7:b8:
30:c2:eb:f8:2d:9f:55:7c:e7:20:39:e4:c6:4f:f5:
ce:2d:d6:aa:09:9c:28:1c:f4:7a:0a:87:f7:f3:3f:
7d:0d:26:fe:a5:79:bb:24:6b:46:99:d2:31:c1:bf:
94:c2:b7:ef:fe:81:13:a4:69:7d:9d:94:8b:4b:31:
9d:ec:ae:bd:44:f5:8f:9c:ed:f8:f1:96:7c:85:3e:
66:c7:cb:4d:f2:8c:48:a1:ec:8e:7f:24:ad:7f:08:
b7:09:fd:03:d6:9b:65:f7:19:a3:9d:72:26:2b:8b:
39:f2:66:5c:24:7c:e1:8b:49:ed:90:24:ee:bc:48:
1c:1f:60:e7:fd:03:4c:20:88:a3:70:e3:88:e6:15:
31:6b:99:ee:86:4d:ff:fb:de:72:94:e6:57:c1:7d:
2c:0a:5d:ad:d3:95:d2:da:5d:f0:b4:2d:c4:63:99:
24:c1:8d:3a:45:cd:1b:be:9e:7f:ad:19:e5:a7:e9:
0d:88:26:4d:31:56:2a:c8:92:ec:bd:87:2c:2c:fe:
a7:9d:46:d3:14:69:17:65:c1:ef:18:ec:42:af:ab:
c2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0F:6C:14:ED:9A:3E:19:2A:27:DA:60:CA:A5:63:84:48:E1:56:4D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/EQ9sFO2aPhkqJ9pgyqVjhEjhVk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.71.0/24
163.5.88.0/24
163.5.93.0/24
163.5.101.0-163.5.102.255
163.5.108.0/23
163.5.116.0/24
163.5.131.0/24
163.5.134.0/24
163.5.171.0/24
163.5.174.0/24
163.5.187.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0/24
163.5.228.0/23
163.5.240.0/24
163.5.246.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
04:94:39:25:69:30:f4:b1:d0:f8:b2:3a:87:a3:f5:a4:ac:6f:
48:bc:9f:73:06:23:79:22:66:a6:d1:6b:da:2c:be:5e:7b:b1:
d7:ef:7b:1b:a5:d3:fb:a2:8b:c5:17:3e:1c:48:fa:b8:f0:33:
b1:4e:a7:7c:3a:cf:75:91:72:21:b4:b4:03:c5:2c:97:87:cd:
72:3c:d4:1d:3f:5f:5d:17:8d:98:16:3d:a3:ef:6f:fc:36:68:
2f:dd:48:0a:75:08:63:fc:34:74:75:3b:c4:09:c6:27:c6:36:
e2:1d:e7:fd:7a:62:18:0e:64:06:e7:54:71:00:2d:5d:f7:d4:
ad:6c:f3:9a:29:32:8b:93:90:bf:f1:4a:06:88:f6:05:61:ed:
de:c3:78:ed:57:70:e7:c9:d2:73:82:0c:6f:32:32:20:3b:04:
f0:05:76:62:09:34:eb:22:f4:00:f2:22:51:52:88:95:6c:62:
4e:ac:9d:ec:20:cc:21:30:ed:d9:69:dd:47:92:2a:f3:c9:a9:
8d:52:fe:df:82:32:5e:87:b9:cc:53:fa:1b:bc:89:3a:91:4f:
9b:c3:7e:70:04:1c:6c:69:db:fa:c5:0c:4d:88:f8:a0:89:db:
4e:bf:ff:88:4f:85:c5:b4:40:92:d2:01:34:38:20:7c:b3:ff:
67:54:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:30 2024 by rpki-client on console-ams.rpki-client.org