Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SBsJVvK_w5oqLY_yBE-J30f9ixk.roa
File: SBsJVvK_w5oqLY_yBE-J30f9ixk.roa (raw, json)
Hash identifier: YKlsPe2q6kzqIvozVi9exk+JH3I5Y3aYFrsA9kbj/ZA=
Subject key identifier: 48:1B:09:56:F2:BF:C3:9A:2A:2D:8F:F2:04:4F:89:DF:47:FD:8B:19
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4256EA8C96502C2E46A0F8E364A783A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SBsJVvK_w5oqLY_yBE-J30f9ixk.roa
Signing time: Mon 01 Jan 2024 08:30:36 +0000
ROA not before: Mon 01 Jan 2024 08:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 163.5.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 10:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6e:a8:c9:65:02:c2:e4:6a:0f:8e:36:4a:78:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=481b0956f2bfc39a2a2d8ff2044f89df47fd8b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fe:71:91:72:d8:96:2e:9a:30:83:dd:27:1f:
a5:91:af:04:4d:c1:9e:28:6f:7b:48:6c:0f:11:95:
3a:84:5e:e5:25:d8:15:23:00:80:f2:00:48:5f:19:
76:bf:d1:ca:63:76:e7:16:60:4b:cc:7c:56:3c:fd:
2f:a7:83:03:30:5e:2b:c1:20:26:4c:c6:e5:76:26:
5e:ad:d0:37:20:50:45:03:73:95:d1:ac:88:05:56:
23:3e:c5:93:4c:7a:3b:3f:2e:37:da:54:78:59:05:
de:b4:8a:e9:42:f1:4d:6e:77:ca:ce:23:96:d3:f8:
8e:e2:cb:92:27:c4:65:c3:5d:55:af:44:3b:fe:5f:
c9:12:42:9d:6f:e8:75:34:11:67:95:e9:19:57:ec:
bd:90:3c:3f:ae:39:9d:53:95:52:f2:68:23:60:f8:
2c:fa:29:97:99:79:6c:4e:53:32:d9:5e:34:c8:06:
3f:c4:b7:93:b5:f3:93:ee:12:35:79:76:c3:23:42:
3f:13:15:88:49:69:64:8b:4d:1f:2f:7b:ab:29:a8:
b7:37:42:87:e7:d8:60:2a:77:33:b0:59:24:21:aa:
33:25:9f:69:89:60:a1:9e:c1:04:76:0b:fb:be:ed:
94:c6:13:51:85:a2:51:d4:cd:7f:81:bb:71:aa:c7:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1B:09:56:F2:BF:C3:9A:2A:2D:8F:F2:04:4F:89:DF:47:FD:8B:19
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SBsJVvK_w5oqLY_yBE-J30f9ixk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
55:37:c5:74:36:8b:93:8b:2d:e4:bb:3f:de:9a:81:34:10:5d:
28:27:9a:f0:e7:4d:73:cf:46:40:13:fc:0d:f8:5c:79:b8:6b:
fe:c1:8e:6a:a2:b1:dc:65:02:9d:f1:d3:28:92:11:18:36:10:
9f:ad:21:e2:df:f3:0a:d2:d1:0c:e2:ec:b3:ce:a2:c0:54:13:
44:47:7c:f3:04:b0:ca:c0:a4:f1:6f:17:0f:dc:90:90:9f:92:
ab:7b:6e:87:1a:5c:f7:75:65:41:eb:e8:08:ba:d5:90:69:89:
86:a4:c4:ea:30:fb:27:a3:56:77:7b:27:b6:47:a6:ce:54:91:
42:65:6a:96:b7:ce:f6:4e:e6:1f:d5:33:d4:2f:f3:32:27:06:
8c:a6:50:ca:09:70:e4:3d:08:e1:f7:9d:b6:fb:6c:22:05:85:
a1:0d:5c:b2:83:53:6e:ac:86:db:57:5f:8d:5a:5c:ce:34:d7:
e8:43:4c:f6:90:f6:08:23:92:93:c2:9e:e1:34:c5:1a:d3:9c:
70:50:f8:21:09:c0:7a:f5:e5:bc:bf:5b:ce:65:89:9f:db:cc:
70:47:06:62:a3:56:23:af:37:27:63:82:50:2a:15:01:cb:0b:
2d:15:d2:49:07:e3:f0:3c:a7:ef:36:28:d5:76:e2:db:61:e4:
34:9e:59:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 13:45:38 2024 by rpki-client on console-ams.rpki-client.org