Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fnqfemao70jOqahpPUifrOg8F3o.roa
File: Fnqfemao70jOqahpPUifrOg8F3o.roa (raw, json)
Hash identifier: ebnJUyrM9NRAPUDUTH1sg8pIlltXUW1ZepwYyVIlIdQ=
Subject key identifier: 16:7A:9F:7A:66:A8:EF:48:CE:A9:A8:69:3D:48:9F:AC:E8:3C:17:7A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191731D4259A1A0B7063AD6704E5BCE0908
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fnqfemao70jOqahpPUifrOg8F3o.roa
Signing time: Wed 21 Aug 2024 04:06:22 +0000
ROA not before: Wed 21 Aug 2024 04:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:1d:42:59:a1:a0:b7:06:3a:d6:70:4e:5b:ce:09:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 21 04:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=167a9f7a66a8ef48cea9a8693d489face83c177a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:f9:67:5d:f2:e4:a4:5d:49:99:4c:c2:d4:
41:8e:62:c4:d8:c4:80:b0:7b:97:ed:f7:d7:11:3f:
20:72:1e:31:33:bc:7c:ac:22:28:db:48:3e:c8:fd:
0d:07:9d:1a:35:6a:49:9a:47:5e:42:b1:45:fb:ac:
02:4d:55:fe:ea:b6:08:65:71:21:c5:8a:04:76:c5:
0b:a3:b8:f6:2b:48:b0:e5:e5:b2:b5:93:d0:5d:01:
86:04:c3:7c:2e:40:58:ad:9d:27:77:09:65:4f:fa:
35:df:55:37:d9:67:2f:a6:19:02:86:a8:37:40:50:
29:95:5d:2e:ea:f5:eb:6e:56:1a:c0:e1:bc:30:44:
41:69:a9:9d:67:09:ed:51:86:ff:6c:88:ad:9d:a5:
dc:ed:65:12:99:e2:dc:97:d0:af:27:89:5c:11:2c:
8c:01:e2:40:1c:b3:1c:d0:d0:70:91:ee:85:ff:33:
aa:d6:38:ca:f2:4f:b0:65:58:88:2b:1b:83:07:21:
31:02:10:a8:6c:19:8d:57:9c:01:3f:d6:3a:73:7d:
30:e3:7a:cc:7e:ed:43:0d:e5:83:e4:25:22:7a:ba:
7c:54:27:ae:d6:8e:fe:1d:f5:5c:39:90:f2:89:2b:
5c:79:93:4c:31:97:b9:8c:2f:51:63:9a:c1:af:ed:
b7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7A:9F:7A:66:A8:EF:48:CE:A9:A8:69:3D:48:9F:AC:E8:3C:17:7A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fnqfemao70jOqahpPUifrOg8F3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.56.0/24
163.5.71.0/24
163.5.82.0/24
163.5.87.0/24
163.5.95.0/24
163.5.99.0/24
163.5.124.0/23
163.5.127.0/24
163.5.136.0/24
163.5.138.0/24
163.5.140.0/24
163.5.162.0/24
163.5.202.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
59:62:e0:2d:f5:2a:97:26:2e:11:cc:73:b1:94:c2:17:61:b8:
1e:1f:a2:94:38:00:cd:bb:3d:a0:87:af:86:04:2a:87:42:13:
ee:64:f6:88:fb:fc:fc:77:35:a2:cf:65:41:65:20:dc:05:86:
89:6a:d5:c3:2a:25:b2:86:b1:16:38:af:1b:86:20:8f:a1:01:
1a:f1:3e:93:b6:ca:43:1d:7f:ce:db:6a:04:65:8f:89:17:4d:
c1:91:14:57:43:2e:ea:cd:da:21:97:74:50:ef:2d:b9:2a:20:
18:1e:f1:f1:c7:47:31:a9:40:25:35:fb:ae:f5:1b:0b:07:cf:
90:01:49:46:b0:1e:76:bf:ea:c9:9c:a8:0f:dc:1b:f4:34:b9:
31:56:82:4f:5d:8f:5c:ec:40:a7:a3:70:d9:f8:b7:39:d8:75:
49:e8:d7:5a:8b:2b:49:3a:b0:aa:c1:c5:fb:4a:8e:54:90:cc:
64:41:14:3d:de:24:2f:c5:5a:38:f9:3d:68:99:dd:bc:cb:2b:
07:c0:73:8a:d9:3b:54:b4:91:41:f4:70:14:eb:bd:54:9e:71:
ce:26:66:b4:47:6b:ca:be:68:40:67:d6:6b:c9:1f:ef:19:ad:
e1:e0:46:06:6c:ac:e6:56:fd:3a:19:0b:be:27:d7:50:44:6e:
23:a8:ad:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 18:38:46 2024 by rpki-client on console-ams.rpki-client.org