Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OhhmjWWor5uM3zZ-r-lgie5A92c.roa
File: OhhmjWWor5uM3zZ-r-lgie5A92c.roa (raw, json)
Hash identifier: KHdiC/ZNtjPe3mc1tEtQw3h+QOkTwkh0SzAO0VX/6uE=
Subject key identifier: 3A:18:66:8D:65:A8:AF:9B:8C:DF:36:7E:AF:E9:60:89:EE:40:F7:67
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018572C26B55EFB59882308E67F0053F02E6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OhhmjWWor5uM3zZ-r-lgie5A92c.roa
Signing time: Mon 02 Jan 2023 13:53:42 +0000
ROA not before: Mon 02 Jan 2023 13:53:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.90.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c2:6b:55:ef:b5:98:82:30:8e:67:f0:05:3f:02:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 13:53:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a18668d65a8af9b8cdf367eafe96089ee40f767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e1:66:bb:e7:81:fc:cb:8d:80:bd:bb:31:77:
e8:fe:2a:aa:d0:41:93:b1:b2:c8:27:d4:d7:05:31:
cf:fe:35:00:d2:70:23:c8:a1:3e:c4:0c:c1:fa:24:
71:41:5e:10:78:e9:ab:0a:bf:ce:f6:a2:98:45:14:
b4:39:0c:93:93:8c:20:57:23:f7:20:85:6b:41:32:
9a:38:9a:e1:e2:06:25:48:a9:08:a2:bd:40:ea:0e:
cb:15:a6:c9:da:c6:a4:b7:f7:23:3a:8e:30:24:10:
ff:f5:19:4b:5f:b3:16:e0:c0:3f:1a:5d:cb:10:c2:
3d:97:0f:fa:30:a1:d1:06:eb:f2:87:d1:ea:0e:10:
2b:61:65:52:63:88:59:57:2e:11:30:52:3d:fc:47:
9f:62:86:64:a2:a8:53:c0:46:e0:5a:ea:e1:6e:f5:
66:52:7a:2f:ec:e4:dd:fd:85:37:00:40:ed:f6:15:
f6:9a:04:06:a2:b8:a8:3c:9e:ee:27:7a:24:1c:05:
ec:7d:57:77:bb:b4:8b:25:05:00:15:31:99:6d:c6:
11:68:b2:7f:29:88:63:20:92:56:6c:50:ea:7b:f9:
ff:d5:44:8e:0e:d3:a6:7f:03:c4:03:90:90:87:b0:
42:f8:77:78:61:35:23:e1:6f:15:c3:eb:07:65:6a:
34:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:18:66:8D:65:A8:AF:9B:8C:DF:36:7E:AF:E9:60:89:EE:40:F7:67
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OhhmjWWor5uM3zZ-r-lgie5A92c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
163.5.140.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:73:c2:ef:28:02:8f:ed:50:e7:34:f6:a7:58:25:ad:22:f4:
56:4f:a0:6e:33:a6:4e:2f:3f:de:6d:fc:3f:c7:7d:e4:92:09:
6a:c8:00:a6:eb:5c:bb:bf:82:85:31:ab:59:14:dd:2e:35:36:
57:80:bd:72:cc:38:f3:99:88:c5:8d:5d:1b:49:22:74:49:f8:
76:1d:15:c6:ed:7c:98:5c:63:a3:2c:c3:0b:c8:3e:b9:91:9f:
e9:38:a8:8f:32:d2:e1:05:f3:51:14:d9:b8:62:42:c6:9e:f4:
57:a0:32:4c:cf:3b:61:88:35:d3:88:e1:66:e1:a2:45:e3:53:
e4:0e:f6:30:18:8c:a2:71:7d:f3:ed:9e:03:97:6a:96:da:f3:
92:ad:53:25:f4:2f:9c:cc:eb:9b:d0:f5:f8:15:64:48:a9:68:
3a:67:79:a3:91:8f:8d:69:bb:9e:17:6f:0c:33:50:36:6c:06:
5a:c8:30:36:38:6e:78:c1:d2:57:5a:c1:fe:c3:58:2c:b1:ef:
a3:bb:25:17:01:56:63:1e:62:20:bc:70:db:7d:fc:d7:e5:66:
88:4c:18:96:d0:b1:5f:f1:ec:0b:6f:54:8c:f0:2d:24:45:62:
3d:a6:d2:b2:57:8a:2c:59:3b:7d:64:27:cf:fb:41:37:3c:fd:
ca:0f:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:05 2024 by rpki-client on console-fra.rpki-client.org