Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HHPeWH6yX2gjOrJ_khAM1k4pd6U.roa
File: HHPeWH6yX2gjOrJ_khAM1k4pd6U.roa (raw, json)
Hash identifier: mEHOJIJy39no9Dq+WnohSYuEvWxUNzlVajnFimMat/Q=
Subject key identifier: 1C:73:DE:58:7E:B2:5F:68:23:3A:B2:7F:92:10:0C:D6:4E:29:77:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01933F07B6156A9203478071F3BD7BC9FA65
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HHPeWH6yX2gjOrJ_khAM1k4pd6U.roa
Signing time: Mon 18 Nov 2024 11:28:10 +0000
ROA not before: Mon 18 Nov 2024 11:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 20:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:07:b6:15:6a:92:03:47:80:71:f3:bd:7b:c9:fa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 18 11:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c73de587eb25f68233ab27f92100cd64e2977a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d5:f2:aa:5f:98:00:f7:33:31:98:22:ef:bc:
d8:f1:48:68:d9:41:86:4c:15:35:fe:ed:fc:81:4e:
d3:fc:04:0c:ae:d2:2a:31:39:e3:3c:5b:fa:b7:c9:
ae:93:8f:a2:35:51:00:0a:bc:2b:2a:9a:7f:93:1b:
a2:35:7c:dc:3b:5b:89:3b:19:93:34:b1:a1:81:d8:
24:ad:d8:6b:a1:cc:4f:8d:fd:42:1b:1b:5b:fd:ae:
2f:56:f4:59:24:1f:3a:1c:37:64:8f:dc:99:36:77:
d2:cc:4e:f1:66:c2:31:0a:79:85:57:ce:4b:e3:d4:
27:f6:c0:10:70:c3:ad:e3:04:19:32:00:bc:dc:51:
8f:a6:6e:41:4d:d9:a9:a4:de:db:26:8d:68:7d:b0:
99:b0:8c:4b:ea:4d:28:f0:1b:a0:f3:6f:21:f5:44:
d4:b1:73:02:b4:de:be:39:6c:d7:1d:b0:ff:c3:fc:
3f:81:2d:92:44:c5:89:da:8c:88:33:ad:57:12:72:
49:90:51:d5:71:ac:fa:dc:8a:d8:db:63:cd:37:69:
d7:da:a8:13:fc:3a:3e:07:22:a4:7f:fe:dc:91:fa:
ed:58:fc:06:f9:0b:fd:52:13:c7:2a:39:91:b2:98:
04:9d:46:7b:ac:db:12:06:fa:4c:8a:c2:19:03:e3:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:73:DE:58:7E:B2:5F:68:23:3A:B2:7F:92:10:0C:D6:4E:29:77:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HHPeWH6yX2gjOrJ_khAM1k4pd6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.31.0/24
163.5.46.0/24
163.5.62.0/24
163.5.144.0/24
163.5.173.0/24
163.5.179.0/24
163.5.187.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
16:f8:8c:2c:d6:c4:38:b3:c7:e1:2b:15:61:81:84:4e:02:a6:
51:5d:c8:60:34:83:53:9a:c2:aa:23:46:e7:e5:74:3d:11:47:
d1:52:89:90:75:2d:d5:c5:15:5c:fd:d7:22:fd:41:4f:f4:fe:
9a:74:63:86:29:85:2f:9b:0f:ff:e4:41:99:1b:5b:bb:46:7b:
34:c5:f4:51:76:b8:cc:17:eb:28:a5:c2:80:fb:16:b5:b6:0e:
98:67:c2:20:8e:78:20:f4:bd:7b:1e:22:38:3a:0e:da:69:f8:
5d:63:a1:8a:28:52:7a:95:2d:3d:64:f4:c7:1e:db:2c:9b:c6:
da:3c:33:9a:a1:66:29:e0:89:a3:c4:7c:94:31:81:5c:ee:49:
5e:cc:21:16:42:64:43:00:df:fd:4c:67:0c:6f:41:f2:cf:22:
ae:d7:55:08:a8:78:36:58:2c:73:02:fd:d8:34:94:6e:42:d1:
de:47:71:10:18:3f:57:4b:dd:3c:63:5d:53:e6:d5:ee:40:2f:
a6:79:63:cf:c5:2e:49:97:d6:a7:ec:8d:a1:e0:a0:f3:f3:b2:
97:de:84:72:46:84:9c:fd:99:70:fe:44:cb:79:a3:45:f2:47:
5a:a3:09:b5:b1:ec:32:c2:d9:8e:f5:4c:e5:90:8b:4e:24:17:
75:61:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:29 2024 by rpki-client on console-ams.rpki-client.org