Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ff9q9RN_cazJqj3w3H4SgiTGqJo.roa
File: Ff9q9RN_cazJqj3w3H4SgiTGqJo.roa (raw, json)
Hash identifier: pwm9pmv9WANjiZAC7du3sDXo7O5GxR8ZuHbLXPvgkxw=
Subject key identifier: 15:FF:6A:F5:13:7F:71:AC:C9:AA:3D:F0:DC:7E:12:82:24:C6:A8:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01895A91CECD36EC90F080697F2186CCA4DF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ff9q9RN_cazJqj3w3H4SgiTGqJo.roa
Signing time: Sat 15 Jul 2023 17:20:52 +0000
ROA not before: Sat 15 Jul 2023 17:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 163.5.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Oct 2023 11:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:91:ce:cd:36:ec:90:f0:80:69:7f:21:86:cc:a4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 15 17:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15ff6af5137f71acc9aa3df0dc7e128224c6a89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:f5:a6:58:74:ca:4b:6c:ae:ea:b2:05:64:
09:ff:5a:49:21:8e:2c:ba:0d:14:4b:ae:97:a0:8a:
ab:f7:eb:48:55:28:73:d8:d3:b7:65:77:e2:86:0e:
74:fc:28:d2:16:ac:bf:1c:b1:78:02:c5:c4:4f:1f:
c3:00:d9:5d:5a:f7:c3:78:9b:0f:5e:45:68:30:3d:
65:7c:71:13:fa:58:4b:f6:28:5b:19:3d:33:db:06:
10:01:1f:38:27:89:ac:7a:7d:2e:5c:38:14:42:3e:
25:05:7c:56:9b:1f:1b:22:9b:93:8b:49:fd:86:17:
df:e3:19:b6:0a:61:1c:56:14:8c:77:c0:56:ac:78:
5f:8f:36:5f:0e:27:d9:0b:21:1e:c6:88:d7:a2:1d:
88:5b:d3:7c:70:ac:dd:26:af:fc:25:8c:df:1f:ad:
80:72:3b:c7:54:2e:1c:d4:70:2e:fa:94:1c:0e:b4:
20:43:6a:73:b3:b8:bc:b1:f7:f4:dd:6c:f9:3c:7e:
49:56:37:30:58:15:ae:1e:61:46:0c:1a:73:32:f1:
eb:cd:48:64:dc:6b:fc:1d:e5:39:37:27:da:95:51:
42:45:73:dc:c0:4e:1a:d6:d5:66:fb:21:1b:0a:11:
bd:01:6b:80:bd:4f:bc:9f:9a:13:eb:95:2c:9e:31:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FF:6A:F5:13:7F:71:AC:C9:AA:3D:F0:DC:7E:12:82:24:C6:A8:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Ff9q9RN_cazJqj3w3H4SgiTGqJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.222.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:09:0e:2b:df:7d:58:0f:f6:e5:60:54:7b:98:63:b1:1b:ce:
6c:0c:27:7c:8a:d0:fc:20:ce:12:35:4f:dd:5b:5c:07:7e:5a:
a8:22:9a:fd:f9:57:8c:6c:94:2a:22:40:b3:db:2e:2f:ec:db:
04:93:e4:95:3f:59:e1:09:d3:3a:a2:31:ab:22:7d:7f:ec:0c:
3d:4b:94:a5:4d:74:5c:c7:5e:8c:6f:a0:6d:09:b4:58:55:ae:
9c:96:2c:94:64:25:cc:ca:90:b0:52:6f:ca:a2:a0:5f:c3:6f:
4d:82:90:bd:6e:ff:ab:0d:03:39:52:76:6d:a9:ab:cd:c6:35:
f5:23:7a:91:a8:36:73:ef:9f:fa:84:3d:e1:79:06:b9:35:ef:
3f:df:61:65:7a:88:6e:00:1e:ed:c9:88:99:0b:31:16:f0:b9:
9d:43:93:2e:65:5a:ce:c5:1f:f7:0e:a5:3e:1f:34:be:ee:c3:
c1:68:99:ce:f8:17:27:22:df:ab:de:82:44:59:1d:d3:69:16:
dd:14:63:52:c7:c2:e9:1f:a5:31:1f:32:15:82:df:a8:e3:bc:
51:95:a1:6b:d3:02:6b:3a:55:ed:93:8c:ed:f7:e7:ba:01:90:
5b:4f:f8:01:cd:29:02:71:00:78:78:40:a7:32:f5:49:0d:53:
eb:f1:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:04 2024 by rpki-client on console-fra.rpki-client.org