Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JLMobgCkYpqf00HuTKjAb1UccjU.roa
File: JLMobgCkYpqf00HuTKjAb1UccjU.roa (raw, json)
Hash identifier: JsAM2o7nHmEyvXPdfMIQHts1mdOihfooMhNbV63tvIc=
Subject key identifier: 24:B3:28:6E:00:A4:62:9A:9F:D3:41:EE:4C:A8:C0:6F:55:1C:72:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190A3C069D02D2267103740B780F727E11A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JLMobgCkYpqf00HuTKjAb1UccjU.roa
Signing time: Thu 11 Jul 2024 21:43:34 +0000
ROA not before: Thu 11 Jul 2024 21:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 07:13:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a3:c0:69:d0:2d:22:67:10:37:40:b7:80:f7:27:e1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 11 21:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24b3286e00a4629a9fd341ee4ca8c06f551c7235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:13:64:00:1d:5b:ce:4d:5f:6f:c5:32:6a:
73:95:15:58:00:75:f4:9c:79:85:50:98:11:be:9a:
cd:f2:54:1a:d7:ab:c4:77:24:24:fb:42:41:38:d1:
5f:bb:23:d0:ef:71:82:aa:ea:21:14:42:ff:81:7c:
61:d0:e0:3e:2c:5c:f4:e5:86:f1:49:93:e3:ab:94:
be:8d:d6:ca:8b:0f:7f:42:85:3a:46:df:56:32:9f:
2c:d5:3b:fc:a2:66:f3:0a:0c:13:4c:1a:48:f4:34:
b7:3a:05:4a:2a:a7:0d:af:10:dc:c9:2c:ea:c5:7b:
fe:cd:01:f8:9c:35:c9:25:23:92:c5:d5:20:3f:1d:
ec:fe:0c:a8:54:da:71:ba:5a:f2:53:30:56:c9:1f:
34:e4:52:5d:db:c5:f4:e8:9c:3d:ae:ce:91:6f:b2:
14:19:4d:10:21:b7:68:82:b5:d3:28:96:23:11:37:
59:b8:2e:ae:ac:91:90:25:21:2c:5a:03:85:54:94:
ec:b7:47:67:2d:a9:93:6e:b6:25:a1:73:11:1d:27:
4a:f3:e2:ca:5b:60:9d:7e:35:39:fb:6c:85:df:3e:
a6:64:98:8a:d2:81:59:8f:20:dc:4c:3a:ae:45:40:
5e:1b:06:d7:75:d7:cf:e5:bd:a3:ed:b6:49:24:39:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B3:28:6E:00:A4:62:9A:9F:D3:41:EE:4C:A8:C0:6F:55:1C:72:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JLMobgCkYpqf00HuTKjAb1UccjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/23
163.5.134.0/24
163.5.136.0/24
163.5.163.0/24
163.5.166.0/24
163.5.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:0a:cd:22:39:ce:4f:52:f6:61:55:77:26:aa:df:44:b3:13:
89:5a:70:6d:4c:6f:75:5a:2a:b2:ac:42:82:3a:1d:f0:aa:15:
9b:3e:10:19:05:64:16:37:5b:3b:08:38:0a:f6:c5:8d:b8:c7:
dd:26:25:e4:21:65:e4:56:3b:3a:4e:00:94:fa:58:75:10:47:
52:72:72:0e:27:17:c3:79:0f:46:e2:a3:ce:65:d3:83:98:3f:
ad:d5:19:d3:ab:4e:78:6a:30:d3:49:df:5a:c2:30:5b:f4:28:
45:5b:d5:ce:52:7d:40:f8:5c:ed:f9:6e:4b:1c:24:c4:87:17:
4f:c9:67:1f:b6:bc:31:a7:16:ab:40:d8:68:f7:c5:97:61:16:
1a:bf:2a:ea:b3:8b:17:00:19:98:f0:25:e6:6d:57:d3:44:0a:
fa:cc:21:ef:85:3e:7c:7d:f2:9c:0c:89:42:f1:2f:a8:06:0a:
5f:ae:bb:36:e8:7f:6c:5a:22:7b:93:76:fd:c6:d1:b4:55:46:
83:f7:b9:78:9a:53:80:d9:58:60:09:51:69:12:c7:e1:bd:36:
68:5f:49:6d:65:0d:67:93:a4:49:88:37:38:e5:d8:bd:61:1e:
34:6c:0c:7f:ba:9e:8a:da:ea:c0:30:2d:1f:63:ae:44:5a:74:
6f:48:83:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 09:18:59 2024 by rpki-client on console-fra.rpki-client.org