Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RtXsJdu9XLgFqIaiedjjd6qZEyA.roa
File: RtXsJdu9XLgFqIaiedjjd6qZEyA.roa (raw, json)
Hash identifier: BOMx1mLysBNz7/38eVCgdF79+tTU5uNS4bGGeBuuAGQ=
Subject key identifier: 46:D5:EC:25:DB:BD:5C:B8:05:A8:86:A2:79:D8:E3:77:AA:99:13:20
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191FA8903A347DBE2EF42FB8D2CC11A2F3B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RtXsJdu9XLgFqIaiedjjd6qZEyA.roa
Signing time: Mon 16 Sep 2024 11:12:48 +0000
ROA not before: Mon 16 Sep 2024 11:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 08:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:89:03:a3:47:db:e2:ef:42:fb:8d:2c:c1:1a:2f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 16 11:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46d5ec25dbbd5cb805a886a279d8e377aa991320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:d6:09:c0:fb:f6:ea:a9:98:c7:d3:ac:31:
d1:2f:90:95:02:94:ae:12:4e:a0:b4:9b:81:6f:14:
c0:7e:d2:37:c8:4f:83:d0:60:3d:4e:77:9b:60:ca:
6a:85:49:7e:e4:fa:3e:9d:5d:6c:47:5d:9f:e7:98:
d2:1f:08:c1:87:87:d6:a8:be:24:7f:24:96:56:40:
4f:0f:a6:8d:84:3e:f8:c4:6e:71:e9:f9:d5:c6:d4:
5a:1b:66:70:72:90:2a:c7:42:94:67:e3:9f:da:40:
f0:9b:c0:dd:77:69:7b:6f:b2:00:b2:6a:0c:57:ef:
6f:ec:0a:1d:c4:72:90:8c:07:c7:b6:ec:03:7e:89:
ee:7f:c0:47:a7:cb:f3:86:b8:e2:67:63:25:ee:a3:
ef:d5:85:cb:70:1c:07:5e:81:36:06:36:a9:bf:67:
2b:2f:89:57:9e:70:89:83:2e:2b:fe:73:a6:e2:5b:
1c:0e:0d:dc:9d:1c:98:db:1d:cd:8f:e7:2d:3d:2e:
6b:f4:6a:d4:53:de:eb:57:45:73:5f:ae:67:b9:dd:
3f:f5:c7:72:d0:28:b7:2e:77:9a:9e:4a:d1:a6:ee:
d2:8b:cf:69:56:b5:df:ab:ae:eb:90:4f:88:c7:5a:
b6:cf:d2:55:f2:98:77:ab:e0:f9:68:68:57:9e:4b:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D5:EC:25:DB:BD:5C:B8:05:A8:86:A2:79:D8:E3:77:AA:99:13:20
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RtXsJdu9XLgFqIaiedjjd6qZEyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.56.0/24
163.5.71.0/24
163.5.82.0/24
163.5.87.0/24
163.5.95.0/24
163.5.99.0/24
163.5.124.0/23
163.5.127.0/24
163.5.136.0/24
163.5.138.0/24
163.5.140.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:25:39:4c:6d:54:39:cd:42:f1:98:7c:25:0b:4b:5a:4f:15:
ed:13:36:36:e4:fe:f2:0a:7e:76:eb:4a:90:32:7b:26:7b:a9:
9a:29:92:89:2e:0a:7b:da:0f:91:02:8f:68:7c:eb:b5:a5:95:
39:50:0f:e5:77:0e:4e:6c:dd:ea:1b:0d:c5:c3:b4:0c:05:9a:
ac:ea:26:84:f6:68:a7:18:4b:54:17:4a:17:6f:33:09:b8:a7:
f1:8f:ba:66:77:03:ca:28:c5:b4:ff:1f:6b:98:a0:3c:d8:c7:
75:08:20:5e:30:fb:65:e6:a7:d0:b6:b0:e3:47:5a:6b:ff:0e:
03:5b:49:55:5c:95:97:11:9d:fd:3b:c6:0a:00:e2:eb:8d:28:
df:72:3e:da:a8:55:a7:3a:b6:a5:fe:66:b0:24:24:da:60:a7:
22:a7:c3:21:f3:1f:ab:11:97:d2:40:74:3b:2c:f3:61:5f:be:
0c:d5:56:4a:06:fd:6d:23:56:22:30:a9:f9:a7:4f:c8:ff:0a:
ac:32:fb:92:96:d1:99:e3:24:fc:71:62:c6:a8:13:3b:d2:9c:
b1:21:9c:7a:d5:48:d6:a9:0d:76:9a:15:00:fa:96:19:87:84:
2d:32:11:9a:47:56:76:9a:87:63:a0:27:64:8f:93:18:bf:06:
66:14:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 30 11:06:50 2024 by rpki-client on console-ams.rpki-client.org