Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FgEEpvA4RnscWe3mDpmlGD6OuyM.roa
File: FgEEpvA4RnscWe3mDpmlGD6OuyM.roa (raw, json)
Hash identifier: pTTUI5xTizJPGyrVI3EOPEO9+J4akGXfT9DSacba8fA=
Subject key identifier: 16:01:04:A6:F0:38:46:7B:1C:59:ED:E6:0E:99:A5:18:3E:8E:BB:23
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01884DEBE3F1BC735FABB8C42CCD4CDDB1DA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FgEEpvA4RnscWe3mDpmlGD6OuyM.roa
Signing time: Wed 24 May 2023 13:21:24 +0000
ROA not before: Wed 24 May 2023 13:21:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397563
IP address blocks: 163.5.208.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 May 2023 11:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:eb:e3:f1:bc:73:5f:ab:b8:c4:2c:cd:4c:dd:b1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 24 13:21:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=160104a6f038467b1c59ede60e99a5183e8ebb23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:fa:98:a2:31:8d:36:8a:d4:f3:ac:ac:dc:
e6:71:cb:4f:be:23:99:d0:9b:2c:bc:9a:cd:28:75:
cc:9d:98:d7:a2:dc:5d:05:23:dd:d8:7a:6d:62:0d:
f5:b6:43:89:c0:dd:c9:d1:54:b3:cf:bf:66:3d:bb:
e3:40:5c:68:a9:51:9c:32:3f:d9:8f:c1:32:bb:c4:
40:d9:de:86:85:39:43:bf:3f:0e:19:e9:24:32:ca:
74:ce:33:6e:f6:84:a4:70:d4:2e:cc:97:59:30:66:
98:b5:2c:19:9c:f8:c5:85:67:47:11:38:f3:2d:bc:
c4:c2:f5:6c:94:b3:60:b3:43:33:f3:0c:fb:70:07:
d1:78:08:78:58:15:a8:9a:2c:c9:dd:fb:91:7f:55:
50:49:6a:83:24:5a:dd:ec:c1:4c:b0:eb:3d:d0:d3:
2a:d2:36:f0:78:51:1c:9f:b6:c2:ac:f1:88:b6:0d:
42:0e:39:e0:06:5b:9d:ce:ca:e7:bb:07:0b:9c:48:
c1:a3:5b:2d:ba:16:1a:5e:85:4f:09:50:5c:7d:ba:
81:01:66:62:b7:7f:0c:e9:8c:bd:c3:86:f9:8b:f2:
57:72:5f:a0:40:3c:6d:ee:d6:3d:0d:26:3d:e5:89:
6a:30:8c:6e:6d:20:a2:85:d6:65:37:b2:f2:f3:11:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:01:04:A6:F0:38:46:7B:1C:59:ED:E6:0E:99:A5:18:3E:8E:BB:23
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FgEEpvA4RnscWe3mDpmlGD6OuyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.123.0/24
163.5.156.0/23
163.5.165.0/24
163.5.208.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0e:89:03:49:a7:20:e4:ef:9a:6b:e7:cd:72:d1:5a:04:19:
a8:f3:be:8e:d7:54:04:d9:82:be:09:2c:2f:4c:b1:c1:eb:e0:
23:a8:34:d0:8f:12:66:02:f3:5e:d5:ed:ef:c3:15:86:15:74:
67:46:dc:5f:13:ea:49:2f:9e:f9:18:2e:de:52:c2:e0:7a:53:
e0:e7:49:33:f0:9f:a6:ef:45:69:4a:5f:ef:3b:20:07:85:a6:
0b:00:ae:c8:62:da:7d:f2:aa:84:20:82:64:91:1e:78:22:8b:
06:ed:40:d6:75:f6:84:5b:5a:03:c4:7d:b8:3b:11:20:8d:31:
8d:02:13:41:b4:16:fd:fa:d4:75:92:76:a2:f7:4a:d8:bd:86:
66:ce:f1:79:73:10:98:e9:2a:57:3c:a0:ce:83:33:91:74:4a:
67:ae:61:8b:bc:4b:11:f2:c3:d0:f1:47:f4:c4:51:da:2f:00:
b1:2f:e1:88:70:41:84:ef:5b:2c:1c:58:48:91:1d:bb:c0:04:
10:28:76:d4:d2:26:2f:c3:15:25:9a:27:d5:9a:5b:9f:3e:c7:
c8:f7:2c:2a:b0:85:a3:cf:c9:0f:fe:9b:8d:24:d8:b5:fc:d1:
2f:56:8a:32:70:6c:4e:b7:6f:1c:c2:d5:1e:37:00:63:ca:bb:
ea:8d:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:04 2024 by rpki-client on console-fra.rpki-client.org