Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa
File: FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa (raw, json)
Hash identifier: ZygKMWAjuHJipaXbYKAvolll2Tm+V0FOJ0j6UX89u+0=
Subject key identifier: 17:24:2A:3C:56:70:8F:3C:A4:7F:E6:65:99:72:F3:5D:8B:2E:E7:E0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01882E3A0940E1AB6B84E3B6D4D945A9DA27
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa
Signing time: Thu 18 May 2023 09:38:55 +0000
ROA not before: Thu 18 May 2023 09:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 163.5.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 22:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2e:3a:09:40:e1:ab:6b:84:e3:b6:d4:d9:45:a9:da:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 18 09:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17242a3c56708f3ca47fe6659972f35d8b2ee7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:34:b9:38:98:2e:3b:cd:cf:82:24:07:a7:6a:
cf:a1:8e:f4:36:d5:38:74:06:8e:22:fd:69:82:6d:
98:44:84:d8:e0:8a:97:f8:17:1c:47:07:37:75:bf:
2a:e7:34:d6:41:c8:8c:1f:a9:51:cd:4e:e2:38:92:
bc:ab:d5:4c:21:01:ad:15:57:b5:b2:fa:3c:7f:f7:
49:61:83:82:40:a8:00:33:1b:9e:3f:4c:81:6d:6a:
b0:0e:51:bf:4a:97:1f:6d:6e:2a:e9:b4:be:a4:20:
b3:4b:7e:de:d5:d5:ec:13:09:c9:6c:93:55:a9:5f:
67:07:1c:5f:69:ba:e9:73:f7:bc:5d:dd:63:ac:33:
31:51:e1:13:e2:6c:1d:b1:eb:4f:47:60:bd:a9:73:
5b:bf:7a:6c:17:ee:92:7d:d0:4a:f2:71:8b:23:c0:
27:df:7b:18:8c:c6:0e:41:42:8c:c4:5a:f5:0f:7d:
eb:09:f5:2f:d2:e4:cb:54:28:0c:d1:d5:8b:8a:ae:
9a:17:3f:e4:e1:98:47:1a:db:4d:3b:e4:c1:a2:a1:
2d:0a:96:47:6b:2c:8a:fc:82:5f:46:0c:63:9c:7a:
b7:53:cd:83:ce:72:d3:66:28:73:35:d9:db:90:f1:
7e:b5:0b:90:93:58:05:2d:88:88:7a:79:e9:03:1b:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:24:2A:3C:56:70:8F:3C:A4:7F:E6:65:99:72:F3:5D:8B:2E:E7:E0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FyQqPFZwjzykf-ZlmXLzXYsu5-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.207.0/24
Signature Algorithm: sha256WithRSAEncryption
93:d7:02:8e:2b:3b:e5:1f:7d:6a:87:48:d6:b1:5c:d8:00:4c:
78:51:59:23:73:8b:d0:49:9d:a3:f1:a9:49:26:b2:e3:08:e1:
43:2c:90:90:78:d6:e6:c3:c1:43:11:6f:46:6a:62:45:07:3b:
bd:b9:ba:35:c5:5c:f5:95:4e:45:35:0e:1e:62:a3:3c:07:93:
6f:7c:d3:60:28:b9:d0:0b:f4:db:7a:87:fb:07:af:97:69:ff:
41:29:52:62:9f:81:a2:49:e5:3c:ea:49:90:76:b7:0c:27:9c:
16:7f:18:02:00:12:c1:86:74:11:4b:36:72:c0:d3:ce:73:02:
91:40:80:6f:82:82:52:d4:dc:a1:06:f5:6d:d5:2b:95:99:ea:
fb:ea:3a:c8:31:b1:ad:4c:c1:3b:c1:66:9f:87:32:7e:7f:71:
c1:67:08:64:07:39:fb:dc:59:cf:f5:b6:86:e8:62:3f:41:bc:
3a:a8:b9:17:94:f3:bb:da:a5:34:48:64:09:1b:32:e6:12:1a:
95:6c:36:88:30:7a:a6:a8:10:c9:4d:e3:4f:22:f5:9c:a4:c1:
9a:2f:25:85:c5:90:3c:6e:bf:58:89:b4:78:82:74:15:bd:a8:
f3:7c:c2:e6:04:f7:a2:ee:3a:9e:34:bd:60:e3:58:35:d1:22:
70:4d:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:04 2024 by rpki-client on console-fra.rpki-client.org