Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QcOWX72GhXz6JSNDWlArmnk4YCg.roa
File: QcOWX72GhXz6JSNDWlArmnk4YCg.roa (raw, json)
Hash identifier: acV//VPkqzpu8ycNCwmF6XZFQ8vSivxuI839lDo0Xpk=
Subject key identifier: 41:C3:96:5F:BD:86:85:7C:FA:25:23:43:5A:50:2B:9A:79:38:60:28
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D3121C03D42C006B6D8617E235D9627E6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QcOWX72GhXz6JSNDWlArmnk4YCg.roa
Signing time: Mon 22 Jan 2024 12:25:11 +0000
ROA not before: Mon 22 Jan 2024 12:25:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.15.0/24 maxlen: 24
163.5.16.0/24 maxlen: 24
163.5.17.0/24 maxlen: 24
163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.22.0/24 maxlen: 24
163.5.25.0/24 maxlen: 24
163.5.26.0/24 maxlen: 24
163.5.27.0/24 maxlen: 24
163.5.28.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.65.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 14:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:21:c0:3d:42:c0:06:b6:d8:61:7e:23:5d:96:27:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 22 12:25:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41c3965fbd86857cfa2523435a502b9a79386028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:2f:42:f5:f9:be:d2:43:05:c0:28:b9:a0:
e1:f2:0d:59:50:d3:54:5b:90:31:ec:fd:81:c6:77:
f8:a2:0b:f6:a0:b3:3b:6d:bc:66:e5:db:cf:78:f5:
3a:cc:77:24:92:6b:a3:64:94:66:78:94:65:fe:22:
2f:22:fc:43:ef:1a:d3:98:64:b3:f6:9e:4f:c2:05:
7b:f8:9b:57:87:18:de:ad:fe:13:ca:27:af:61:5a:
86:f0:07:cf:09:77:bb:ce:ae:c6:ef:0e:c6:bf:db:
2d:46:25:0a:6d:e4:52:d6:ab:28:d2:09:5f:a3:17:
69:37:76:a7:a3:14:12:2b:57:70:21:d8:5f:97:7e:
ef:de:46:0b:eb:e1:6d:91:35:16:f7:d0:94:99:ac:
9f:52:bc:7b:e8:2e:1c:aa:4d:b6:7b:b5:02:6f:da:
64:99:24:55:14:65:19:63:ce:69:10:43:26:fc:96:
1b:5a:25:7c:8a:52:69:15:c2:5b:d1:d8:bc:6e:7b:
ac:d1:2e:81:3d:73:53:17:4b:02:a8:dc:35:bb:63:
79:99:ab:d0:9f:50:95:b3:29:0c:4f:a9:be:91:69:
0f:7d:19:69:a1:a1:24:a2:83:a6:0e:a6:1a:6c:88:
63:6c:0a:54:e1:47:fc:9e:57:03:0c:13:e9:a1:e7:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:96:5F:BD:86:85:7C:FA:25:23:43:5A:50:2B:9A:79:38:60:28
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QcOWX72GhXz6JSNDWlArmnk4YCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/23
163.5.3.0-163.5.4.255
163.5.6.0-163.5.9.255
163.5.13.0-163.5.19.255
163.5.21.0-163.5.22.255
163.5.25.0-163.5.28.255
163.5.51.0/24
163.5.53.0-163.5.54.255
163.5.56.0/24
163.5.65.0/24
163.5.73.0/24
163.5.82.0/24
Signature Algorithm: sha256WithRSAEncryption
69:60:23:ad:69:08:2b:26:a2:e9:b4:e9:ce:4c:68:bc:f2:9a:
26:13:e6:c2:27:6c:bb:a1:66:db:0c:40:d3:d4:bc:15:57:8d:
57:b3:96:4a:1d:25:bc:d1:70:a1:68:f4:28:ce:5f:b3:a4:fa:
c1:f8:a0:12:8c:7a:ad:93:3b:70:e3:32:02:b1:7d:5b:d6:de:
f9:d2:a2:e3:30:6e:ae:77:9c:b7:ff:d9:3a:a4:91:8c:fa:25:
6b:ed:fd:3c:be:48:f1:c9:68:5a:d1:12:70:0f:8e:5e:c6:7e:
b5:e9:08:c2:cd:67:0f:ea:6f:d3:ee:51:fe:c1:09:73:ec:6d:
9e:6b:a4:92:6f:6b:cd:b6:c7:84:f3:29:e1:b1:ac:5e:a7:a1:
29:75:c0:26:a4:1e:2a:c4:06:68:8d:db:95:92:ae:94:83:2a:
eb:c4:41:3a:c8:ae:8d:4c:df:b3:0d:6a:54:88:21:dc:31:d3:
84:31:03:8e:75:23:9d:5b:bc:53:39:83:c2:6d:cf:08:af:f6:
d2:ac:08:05:01:44:e7:a0:77:83:91:4d:47:21:be:e6:9a:65:
ba:2b:c0:ca:8e:3a:63:eb:5f:5e:ad:0c:c6:11:ef:d9:b6:c3:
49:82:4b:d3:ff:ee:60:12:1f:0f:bc:7e:97:03:cc:27:fb:5e:
73:ac:72:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 30 17:11:03 2024 by rpki-client on console-ams.rpki-client.org