Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F84yb6sEAc0a8keQFGbcV8s2qbc.roa
File: F84yb6sEAc0a8keQFGbcV8s2qbc.roa (raw, json)
Hash identifier: kVzO4txlg7AAGDtMe27p7Yd7Wp/zypYKVNKxF2m5LHk=
Subject key identifier: 17:CE:32:6F:AB:04:01:CD:1A:F2:47:90:14:66:DC:57:CB:36:A9:B7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191993CC7F96CD3A23C5CAE24290716A3F1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F84yb6sEAc0a8keQFGbcV8s2qbc.roa
Signing time: Wed 28 Aug 2024 13:46:22 +0000
ROA not before: Wed 28 Aug 2024 13:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:99:3c:c7:f9:6c:d3:a2:3c:5c:ae:24:29:07:16:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 28 13:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17ce326fab0401cd1af247901466dc57cb36a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:49:c6:f1:65:7d:67:e7:c4:38:63:e1:b9:
3c:be:24:86:4c:43:61:8d:fa:5c:c5:1f:b8:bb:63:
4e:1c:c6:e1:8f:e9:ae:00:9e:ee:a9:6a:3b:ff:62:
cf:22:2c:29:82:cd:85:16:ca:d5:73:e1:00:81:da:
d3:34:25:cf:cf:f8:95:71:51:a1:80:4f:da:a1:2e:
c9:b7:f3:95:4c:3f:cb:be:be:39:09:8b:7d:1b:3c:
54:50:99:f8:75:60:e9:e1:40:bc:22:dc:d3:d5:0d:
ef:bb:7b:5b:52:83:ef:d8:65:64:e3:c3:b9:c1:0c:
8d:b6:45:2b:78:68:d6:df:76:2c:c5:e3:a1:1b:62:
19:c2:59:d9:69:ad:f1:32:54:7e:e9:89:ad:19:f8:
86:34:06:df:fc:b0:76:b0:85:cb:1a:69:2f:3e:cd:
c1:97:36:5a:93:f6:5e:80:55:e7:c6:5a:e9:85:6b:
6a:0d:ea:7f:15:28:e5:d2:7d:92:43:98:2b:a2:9d:
36:e1:97:10:fa:cb:b9:74:af:23:bb:36:97:b2:7a:
52:de:a5:2d:09:00:c1:10:57:6c:a1:16:17:ce:3c:
61:94:32:18:e2:38:86:b3:6b:7f:7c:88:1e:08:01:
0e:be:c3:4e:1c:84:8d:5f:e6:66:32:7b:83:db:61:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:32:6F:AB:04:01:CD:1A:F2:47:90:14:66:DC:57:CB:36:A9:B7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F84yb6sEAc0a8keQFGbcV8s2qbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.58.0/24
163.5.211.0/24
163.5.245.0/24
Signature Algorithm: sha256WithRSAEncryption
01:63:24:55:1e:2f:b3:8f:9e:66:de:2c:4a:a2:e1:4c:95:77:
47:a1:af:d4:93:3e:1b:5c:d9:49:72:b5:69:78:6f:02:56:df:
c0:42:fa:a8:14:ca:be:b7:93:f4:d5:3a:18:f0:0f:c3:62:1c:
71:ab:61:fa:cc:71:90:8e:d9:98:94:1e:28:3e:f3:87:4a:5a:
78:ce:8f:c2:03:84:f8:df:15:2c:5b:46:72:e8:99:a7:9b:98:
af:fa:66:5d:f0:bb:10:ad:84:92:c4:25:60:7f:5c:e9:38:77:
2e:67:a6:e0:47:d5:f0:0e:84:d1:b4:aa:ce:44:0f:ca:33:01:
f6:1d:03:25:af:b1:76:8d:68:47:6f:5a:e9:8e:a9:02:c4:c5:
ad:88:f9:24:fe:18:c0:42:39:2a:b0:f8:5e:ac:c2:76:9e:43:
28:90:ac:20:d2:22:58:c3:8d:d7:86:80:f7:13:a9:8e:a5:a9:
3c:9f:ff:0e:dd:8f:c0:7c:17:07:3a:98:56:53:e0:96:50:a5:
28:c6:35:18:92:d3:0d:ee:5c:fe:5e:d2:e0:65:ed:4f:09:e1:
9d:99:d2:ce:fe:5b:f9:28:38:5d:01:b2:e0:c8:81:a5:22:64:
68:8f:4e:d8:ed:8f:6f:26:37:7f:27:c7:f6:ab:b6:d8:38:39:
d1:9b:e5:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZGZPMf5bNOiPFyuJCkHFqPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwODI4MTM0NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2NlMzI2ZmFiMDQwMWNkMWFmMjQ3OTAxNDY2ZGM1N2NiMzZhOWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qRJxvFlfWfnxDhj4bk8viSGTENh
jfpcxR+4u2NOHMbhj+muAJ7uqWo7/2LPIiwpgs2FFsrVc+EAgdrTNCXPz/iVcVGh
gE/aoS7Jt/OVTD/Lvr45CYt9GzxUUJn4dWDp4UC8ItzT1Q3vu3tbUoPv2GVk48O5
wQyNtkUreGjW33YsxeOhG2IZwlnZaa3xMlR+6YmtGfiGNAbf/LB2sIXLGmkvPs3B
lzZak/ZegFXnxlrphWtqDep/FSjl0n2SQ5grop024ZcQ+su5dK8juzaXsnpS3qUt
CQDBEFdsoRYXzjxhlDIY4jiGs2t/fIgeCAEOvsNOHISNX+ZmMnuD22EK3QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFBfOMm+rBAHNGvJHkBRm3FfLNqm3MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRjg0eWI2c0VBYzBhOGtlUUZHYmNWOHMycWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowUiAwQA
owU6AwQAowXTAwQAowX1MA0GCSqGSIb3DQEBCwUAA4IBAQABYyRVHi+zj55m3ixK
ouFMlXdHoa/Ukz4bXNlJcrVpeG8CVt/AQvqoFMq+t5P01ToY8A/DYhxxq2H6zHGQ
jtmYlB4oPvOHSlp4zo/CA4T43xUsW0Zy6Jmnm5iv+mZd8LsQrYSSxCVgf1zpOHcu
Z6bgR9XwDoTRtKrORA/KMwH2HQMlr7F2jWhHb1rpjqkCxMWtiPkk/hjAQjkqsPhe
rMJ2nkMokKwg0iJYw43XhoD3E6mOpak8n/8O3Y/AfBcHOphWU+CWUKUoxjUYktMN
7lz+XtLgZe1PCeGdmdLO/lv5KDhdAbLgyIGlImRoj07Y7Y9vJjd/J8f2q7bYODnR
m+WY
-----END CERTIFICATE-----
Generated at Thu Sep 5 18:20:21 2024 by rpki-client on console-fra.rpki-client.org