Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RH5gCL6KTWTslUK7rXaAC03Pv8E.roa
File: RH5gCL6KTWTslUK7rXaAC03Pv8E.roa (raw, json)
Hash identifier: dXc7LIZNYsDgzzg9DEozMH1UjSLTaelojGUy443Xlm8=
Subject key identifier: 44:7E:60:08:BE:8A:4D:64:EC:95:42:BB:AD:76:80:0B:4D:CF:BF:C1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FAC46F73846DE7EEA63D8F2ED0F57546D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RH5gCL6KTWTslUK7rXaAC03Pv8E.roa
Signing time: Fri 24 May 2024 20:24:42 +0000
ROA not before: Fri 24 May 2024 20:24:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 01 Jun 2024 14:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ac:46:f7:38:46:de:7e:ea:63:d8:f2:ed:0f:57:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 24 20:24:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=447e6008be8a4d64ec9542bbad76800b4dcfbfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:ac:69:a4:00:df:10:0b:27:37:7f:be:30:
72:17:d2:f9:49:06:fe:bd:f9:c4:86:58:ab:4b:0f:
76:b3:66:f0:23:f0:62:c8:e2:26:52:0e:61:98:3f:
8f:4e:98:c1:65:1e:a6:7e:d6:c5:69:fa:4e:7f:82:
89:65:b4:e8:72:cb:2c:46:fc:46:1f:af:6d:b8:26:
14:59:83:e7:6a:12:52:fc:04:8f:2a:4f:28:ae:1c:
f7:53:83:c4:e1:bd:bf:d5:97:65:35:3a:a9:d5:e4:
76:5d:55:7a:5d:80:9d:8b:9b:ad:47:35:c9:4b:a5:
b2:49:5a:35:53:64:83:e3:5d:6d:3a:11:a2:bc:97:
45:35:05:a2:09:73:06:ef:a4:85:63:fc:e2:a4:8f:
6a:ea:33:01:17:bd:32:32:a4:90:19:75:50:d4:8e:
4f:2c:2c:3b:f5:2a:aa:85:40:42:33:86:f5:83:58:
dc:00:b6:24:0b:a7:46:46:fe:7f:25:cb:1c:2b:1a:
c3:55:ea:16:c4:df:c6:00:9b:43:73:83:3c:4c:69:
b0:24:44:82:b6:76:fb:c4:05:11:52:81:2d:59:0f:
14:a9:77:93:57:a9:0c:04:40:c8:e4:7c:ca:ef:19:
fe:cc:a6:8c:15:d9:c0:cf:c0:fb:f7:b9:be:4c:a8:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7E:60:08:BE:8A:4D:64:EC:95:42:BB:AD:76:80:0B:4D:CF:BF:C1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RH5gCL6KTWTslUK7rXaAC03Pv8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.211.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7f:0f:42:6f:0a:23:53:a1:50:ac:dc:20:fb:17:f4:34:6b:
ab:2f:34:65:cc:d9:1e:9a:6d:7d:c9:8b:53:88:10:df:31:75:
d8:70:ff:a0:f6:c7:a4:a4:dc:9f:ca:81:29:36:dc:a8:da:ff:
0b:a3:6a:9f:46:64:7e:9d:6d:05:59:27:d0:7a:89:c1:0c:08:
88:09:4f:b1:e6:25:41:b3:58:b8:d3:67:9c:96:2d:58:31:93:
ca:b9:eb:c8:b5:56:9c:63:43:88:00:be:f9:ac:04:3c:1c:78:
1d:09:f2:bc:f7:19:1c:34:b8:e6:b5:a5:76:ef:8d:d9:f2:df:
4d:67:b0:91:8b:d7:e2:46:c1:4a:7a:fb:58:65:d6:82:2d:9c:
85:73:d4:fd:37:63:07:34:10:00:fd:88:49:16:f3:87:44:57:
ad:56:55:8c:db:bb:50:43:8d:36:3d:ac:1b:ce:3a:46:c0:fc:
57:a5:22:6e:f0:59:ca:7c:ce:e7:a1:1e:89:95:aa:a1:f1:8a:
a0:12:64:cf:5d:26:00:55:fc:e6:6e:9c:9a:5c:f3:00:c1:d9:
ae:40:f0:42:74:50:8d:68:ff:83:25:b9:dc:ae:be:15:0c:62:
13:63:61:65:e7:5d:54:9a:50:b4:f0:99:ce:ef:52:df:e4:10:
02:a2:3e:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+sRvc4Rt5+6mPY8u0PV1RtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNTI0MjAyNDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDdlNjAwOGJlOGE0ZDY0ZWM5NTQyYmJhZDc2ODAwYjRkY2ZiZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv+saaQA3xALJzd/vjByF9L5SQb+
vfnEhlirSw92s2bwI/BiyOImUg5hmD+PTpjBZR6mftbFafpOf4KJZbTocsssRvxG
H69tuCYUWYPnahJS/ASPKk8orhz3U4PE4b2/1ZdlNTqp1eR2XVV6XYCdi5utRzXJ
S6WySVo1U2SD411tOhGivJdFNQWiCXMG76SFY/zipI9q6jMBF70yMqSQGXVQ1I5P
LCw79SqqhUBCM4b1g1jcALYkC6dGRv5/JcscKxrDVeoWxN/GAJtDc4M8TGmwJESC
tnb7xAURUoEtWQ8UqXeTV6kMBEDI5HzK7xn+zKaMFdnAz8D797m+TKhWQQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFER+YAi+ik1k7JVCu612gAtNz7/BMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUkg1Z0NMNktUV1RzbFVLN3JYYUFDMDNQdjhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowXTAwQA
owXXMA0GCSqGSIb3DQEBCwUAA4IBAQCCfw9CbwojU6FQrNwg+xf0NGurLzRlzNke
mm19yYtTiBDfMXXYcP+g9sekpNyfyoEpNtyo2v8Lo2qfRmR+nW0FWSfQeonBDAiI
CU+x5iVBs1i402ecli1YMZPKuevItVacY0OIAL75rAQ8HHgdCfK89xkcNLjmtaV2
743Z8t9NZ7CRi9fiRsFKevtYZdaCLZyFc9T9N2MHNBAA/YhJFvOHRFetVlWM27tQ
Q402PawbzjpGwPxXpSJu8FnKfM7noR6Jlaqh8YqgEmTPXSYAVfzmbpyaXPMAwdmu
QPBCdFCNaP+DJbncrr4VDGITY2Fl511UmlC08JnO71Lf5BACoj4/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:05 2024 by rpki-client on console-fra.rpki-client.org