Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/R8ER3p3afFkV8ItQktZv0cBLDYg.roa
File: R8ER3p3afFkV8ItQktZv0cBLDYg.roa (raw, json)
Hash identifier: yhIGyV3TbRs8z6Tk76aTHnvrjsRBKlIo2sDis6lv/f8=
Subject key identifier: 47:C1:11:DE:9D:DA:7C:59:15:F0:8B:50:92:D6:6F:D1:C0:4B:0D:88
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255A85257812A4B33BB0E896E9E061
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/R8ER3p3afFkV8ItQktZv0cBLDYg.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61003
IP address blocks: 163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 15:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5a:85:25:78:12:a4:b3:3b:b0:e8:96:e9:e0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47c111de9dda7c5915f08b5092d66fd1c04b0d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:27:6b:86:b3:57:10:d4:0b:2d:18:e4:fd:
ec:69:a4:af:cb:5a:6b:d3:c1:bc:c3:75:55:86:31:
cf:4a:f4:fd:60:eb:2a:99:0b:8c:eb:13:77:e7:30:
72:b6:0b:da:bc:99:b3:09:1c:84:85:62:46:0c:a0:
61:56:6b:09:8b:00:7f:4b:c4:74:62:f9:9a:86:49:
45:04:f2:55:7b:c2:a2:ef:b8:c9:9e:61:1d:ea:c0:
f2:a8:b5:90:8b:37:9f:59:4f:63:8b:b9:1d:01:b4:
70:0a:ea:f3:92:2b:f1:77:a3:53:88:5d:80:de:9b:
d9:20:a9:33:c1:45:21:24:3d:f8:21:42:27:b4:c5:
2d:4a:52:a7:b5:bb:5d:19:a7:19:32:0f:65:95:e0:
1e:37:b0:0f:b4:bb:e7:7b:42:f2:64:7a:3a:db:fc:
1b:e9:9f:f9:7f:c6:b0:68:98:5b:13:e5:d2:9b:c7:
33:95:72:fe:f7:49:d1:1b:23:80:48:ac:c6:3a:36:
11:f3:90:89:f1:5d:96:41:f8:a9:b0:8b:1f:94:34:
ec:15:17:43:51:4b:a7:c0:68:e3:c2:b6:19:30:75:
07:72:dc:e9:2d:e0:67:a1:95:e2:f7:89:5f:e3:99:
b4:5d:35:3c:b6:b3:4a:29:fb:58:d0:0b:70:ff:30:
34:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:11:DE:9D:DA:7C:59:15:F0:8B:50:92:D6:6F:D1:C0:4B:0D:88
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/R8ER3p3afFkV8ItQktZv0cBLDYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.134.0/24
Signature Algorithm: sha256WithRSAEncryption
08:aa:79:b9:87:de:11:d7:01:6c:bf:a3:29:ba:11:3d:78:50:
62:c3:d3:45:10:06:91:86:e6:ad:2c:9f:a7:50:38:04:e0:62:
73:1a:4d:a3:83:c8:ae:c4:5d:ce:22:c7:4d:61:b9:6d:da:39:
1a:eb:b2:d1:ef:26:c7:ac:d8:10:00:30:72:13:ea:cf:91:50:
3c:11:ee:e0:1e:19:ce:cd:56:9e:55:8a:b8:41:cf:37:ae:2b:
d5:1f:de:12:94:67:6b:39:c9:66:d1:a3:26:f5:d2:c1:a5:80:
c5:97:97:0b:d8:47:6a:b3:83:41:23:f0:cd:be:5e:61:e6:38:
de:97:6c:f3:4e:97:80:b0:81:e3:6b:5b:80:8e:6c:86:c7:5d:
d1:51:1e:b4:0d:20:75:e2:5d:d0:94:ff:f6:15:ba:b6:89:f7:
f2:7c:b9:74:44:25:92:c3:27:cc:5b:d4:37:47:8a:10:81:78:
25:bf:29:c1:84:b1:1c:21:3e:41:40:b9:0c:6e:eb:af:f6:b0:
33:aa:03:b5:1c:35:1b:68:3b:cb:50:0f:8e:37:91:6c:ab:33:
be:9c:37:84:53:91:fb:9e:3b:61:e5:83:a1:78:c4:bb:66:93:
54:bf:90:55:47:6c:dc:a5:1f:f8:c3:c2:f6:61:64:82:57:60:
cb:69:36:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:29:19 2024 by rpki-client on console-fra.rpki-client.org