Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RdaUtoQTepsQuWtttXktArOIXKU.roa
File: RdaUtoQTepsQuWtttXktArOIXKU.roa (raw, json)
Hash identifier: j6ubbc5nJ3KTH7ut3Yl/AGSHFwR4DcvGri/8hLBo9Sk=
Subject key identifier: 45:D6:94:B6:84:13:7A:9B:10:B9:6B:6D:B5:79:2D:02:B3:88:5C:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019290E02839CE66A7FD1B4C77079FF95221
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RdaUtoQTepsQuWtttXktArOIXKU.roa
Signing time: Tue 15 Oct 2024 15:51:02 +0000
ROA not before: Tue 15 Oct 2024 15:51:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 15:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e0:28:39:ce:66:a7:fd:1b:4c:77:07:9f:f9:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 15 15:51:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45d694b684137a9b10b96b6db5792d02b3885ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:dd:50:87:ce:de:c2:d3:f3:d0:39:bf:e5:
88:f7:e2:d6:cb:fc:0c:14:b5:e4:93:c6:c5:db:64:
c5:46:f0:d3:eb:e5:36:50:09:6e:2a:0a:1e:80:f1:
21:a6:e9:ac:cb:0c:e8:cf:84:b4:c1:f5:84:c8:22:
d6:ad:7c:30:44:de:8d:2a:a7:26:cc:55:9d:ab:9e:
a6:2e:a7:4f:a5:07:61:6c:6c:73:a7:16:16:84:88:
45:eb:2a:92:17:6d:f4:ca:da:e2:56:14:5a:26:ec:
11:6a:cc:a2:c2:81:f8:b8:5a:18:77:2d:85:49:56:
1a:b5:9c:bc:59:1f:d3:39:db:84:d4:ec:9b:73:25:
05:ee:12:6e:aa:f6:c0:19:d2:1d:e5:a3:b9:0f:e9:
58:da:38:8b:6c:47:86:19:b5:52:cf:8c:54:fd:c0:
0b:83:81:72:05:00:9c:ac:c5:a8:e6:49:5d:83:bf:
5c:2b:69:73:0d:5d:0d:6d:a5:ea:1e:d4:3c:30:7f:
03:40:da:ee:08:04:4f:e5:6b:aa:38:06:a7:00:40:
ea:56:6d:9d:81:2a:b6:f7:4e:f7:0d:ae:98:d9:32:
84:61:a8:4e:83:bf:a4:93:4f:3c:48:dc:79:27:00:
35:65:53:a9:27:a5:23:f4:a2:9f:11:22:83:83:83:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:94:B6:84:13:7A:9B:10:B9:6B:6D:B5:79:2D:02:B3:88:5C:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RdaUtoQTepsQuWtttXktArOIXKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.46.0/24
163.5.118.0/23
163.5.144.0/24
163.5.158.0/24
163.5.162.0/24
163.5.173.0/24
163.5.179.0/24
163.5.187.0/24
163.5.211.0/24
163.5.221.0/24
163.5.230.0/24
163.5.245.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a7:45:6c:bb:f2:2b:bd:f8:59:69:65:71:8d:3c:4d:84:2a:
f7:cd:dc:76:0e:91:87:1d:5f:dd:9d:42:e7:54:97:e1:79:c5:
23:66:aa:48:52:d8:ee:17:79:36:e1:e1:c7:74:94:ae:d5:7b:
d8:84:6c:c1:c7:5a:2f:1c:4a:30:6e:b2:2f:5a:00:3f:59:8f:
17:46:4e:fc:36:e7:c9:6c:8c:c2:1f:ad:99:8a:57:39:ac:85:
8b:49:8b:6c:d5:72:0b:ce:88:b8:49:00:34:e4:e3:3f:92:52:
46:f4:30:e3:1f:27:db:59:35:02:a2:fe:92:14:17:a2:c2:a8:
a7:24:a4:0b:f2:60:a4:ca:8f:f6:a9:5e:a8:c6:9f:a6:5c:6a:
fe:8c:53:be:7b:fc:32:a5:c8:ee:99:1c:57:46:d2:ac:14:b6:
2b:73:a2:52:0f:0a:2a:50:e2:fb:84:29:5b:78:70:0c:48:5b:
5a:d2:22:22:57:97:2c:94:07:a2:7f:47:ec:be:4e:a0:fa:96:
b9:63:d2:4c:8a:f6:36:8f:b6:5d:ad:23:f5:99:d0:f5:79:67:
c3:21:df:6e:11:9f:13:62:89:05:18:bd:9f:4a:c6:09:80:bb:
da:3d:0e:98:08:08:97:f7:f2:98:1e:9b:71:f2:fd:70:5e:92:
62:13:85:d4
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZKQ4Cg5zman/RtMdwef+VIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMDE1MTU1MTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQ2OTRiNjg0MTM3YTliMTBiOTZiNmRiNTc5MmQwMmIzODg1Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoLdUIfO3sLT89A5v+WI9+LWy/wM
FLXkk8bF22TFRvDT6+U2UAluKgoegPEhpumsywzoz4S0wfWEyCLWrXwwRN6NKqcm
zFWdq56mLqdPpQdhbGxzpxYWhIhF6yqSF230ytriVhRaJuwRasyiwoH4uFoYdy2F
SVYatZy8WR/TOduE1OybcyUF7hJuqvbAGdId5aO5D+lY2jiLbEeGGbVSz4xU/cAL
g4FyBQCcrMWo5kldg79cK2lzDV0NbaXqHtQ8MH8DQNruCARP5WuqOAanAEDqVm2d
gSq29073Da6Y2TKEYahOg7+kk088SNx5JwA1ZVOpJ6Uj9KKfESKDg4N7vQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFEXWlLaEE3qbELlrbbV5LQKziFylMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUmRhVXRvUVRlcHNRdVd0dHRYa3RBck9JWEtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAowUiAwQA
owUuAwQBowV2AwQAowWQAwQAowWeAwQAowWiAwQAowWtAwQAowWzAwQAowW7AwQA
owXTAwQAowXdAwQAowXmAwQAowX1AwQAowX3MA0GCSqGSIb3DQEBCwUAA4IBAQB2
p0Vsu/IrvfhZaWVxjTxNhCr3zdx2DpGHHV/dnULnVJfhecUjZqpIUtjuF3k24eHH
dJSu1XvYhGzBx1ovHEowbrIvWgA/WY8XRk78NufJbIzCH62Zilc5rIWLSYts1XIL
zoi4SQA05OM/klJG9DDjHyfbWTUCov6SFBeiwqinJKQL8mCkyo/2qV6oxp+mXGr+
jFO+e/wypcjumRxXRtKsFLYrc6JSDwoqUOL7hClbeHAMSFta0iIiV5cslAeif0fs
vk6g+pa5Y9JMivY2j7ZdrSP1mdD1eWfDId9uEZ8TYokFGL2fSsYJgLvaPQ6YCAiX
9/KYHptx8v1wXpJiE4XU
-----END CERTIFICATE-----
Generated at Mon Nov 11 19:38:44 2024 by rpki-client on console-fra.rpki-client.org