Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RPGt4sPvUIvJZlvvKokk1eqSxmE.roa
File: RPGt4sPvUIvJZlvvKokk1eqSxmE.roa (raw, json)
Hash identifier: zgPnxnHeu3HrDegyPQWf44UJgh7GnoOhkGfKQUq4c7c=
Subject key identifier: 44:F1:AD:E2:C3:EF:50:8B:C9:66:5B:EF:2A:89:24:D5:EA:92:C6:61
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019078C0EBFBBA3C9F399FDD2D9E2BD81DC1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RPGt4sPvUIvJZlvvKokk1eqSxmE.roa
Signing time: Wed 03 Jul 2024 13:20:27 +0000
ROA not before: Wed 03 Jul 2024 13:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 07:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:c0:eb:fb:ba:3c:9f:39:9f:dd:2d:9e:2b:d8:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 13:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f1ade2c3ef508bc9665bef2a8924d5ea92c661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:c9:b8:91:a1:da:15:0c:4d:02:49:e8:30:
8d:cb:54:dc:9f:51:00:89:84:ec:63:20:81:1a:c7:
39:d3:63:4c:d9:dc:47:f8:5c:c9:e4:60:4a:3e:9e:
25:58:25:22:df:65:44:80:5a:0c:eb:c6:1f:fb:97:
73:84:36:cd:4c:82:33:e3:94:a0:25:55:1d:7c:70:
82:2d:b2:81:f6:89:b1:8b:68:f3:e0:4e:28:5b:a6:
52:a1:50:55:bb:3f:d6:d9:71:98:4f:3e:a2:a5:e1:
a6:7e:dd:a2:72:f9:e5:ed:df:2f:ed:12:92:69:13:
b5:d0:1e:f9:4c:eb:05:1c:52:e6:a7:09:f9:df:8a:
7f:9a:07:a6:1d:59:89:c3:39:5e:b5:90:5b:9e:83:
a7:f7:01:99:5d:9e:3e:21:1d:d5:2a:d8:83:b0:96:
35:85:3a:a0:cf:e7:4f:87:d0:37:25:23:a0:c9:d7:
c5:25:ad:0f:5b:cb:54:07:e7:94:f7:f4:67:07:fb:
76:8f:be:3e:cb:a3:0a:f0:20:9c:13:54:2d:33:f2:
0d:33:61:84:09:ff:d3:ce:9c:6c:55:c7:41:d1:3e:
c3:a2:10:48:76:77:0e:56:0c:f5:d3:46:de:1c:d3:
34:56:3c:60:7c:9c:88:fc:85:ec:c5:7c:c6:7e:37:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:AD:E2:C3:EF:50:8B:C9:66:5B:EF:2A:89:24:D5:EA:92:C6:61
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RPGt4sPvUIvJZlvvKokk1eqSxmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.211.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b4:82:4b:83:75:4d:d7:6e:79:d4:51:49:fd:45:25:25:ec:
1d:f3:0c:bc:8c:6f:2f:f0:4b:e4:72:44:96:e9:ba:ea:62:f4:
a4:2c:c4:7d:75:00:39:3c:ed:c8:2b:6f:91:60:ca:2e:59:a7:
7e:cf:61:66:93:82:bd:d7:a1:df:09:2b:2d:98:ca:7a:d7:72:
91:98:a5:8f:10:d7:9d:fc:79:4c:46:b3:12:bd:8b:5e:e5:f0:
ce:6e:25:78:c4:eb:b3:7e:24:76:54:11:51:02:b5:32:9c:f1:
ac:a4:dd:ca:07:dc:5a:60:75:65:8a:84:94:35:c7:53:c5:e7:
56:fc:7d:85:f9:ab:07:78:17:3b:12:55:27:3c:6e:11:1e:64:
64:4a:18:e1:17:c1:8f:03:0a:c8:0a:8e:d2:76:58:73:e6:19:
9f:bb:80:9b:38:e5:af:76:33:1e:03:dc:d4:54:9d:dd:99:d4:
5b:37:ad:55:c4:57:fc:4f:c2:fb:ed:99:d1:bf:c2:cc:2a:d5:
41:57:4a:d7:72:93:e5:37:30:e6:22:9e:3b:40:08:68:46:e9:
2b:56:3b:52:a7:48:0e:64:bc:17:16:18:1d:75:8b:8a:1f:c4:
10:11:7a:19:c0:4b:72:92:25:24:c2:2a:30:7d:39:2d:02:57:
12:63:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 10:06:40 2024 by rpki-client on console-ams.rpki-client.org