Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SfpKAH_OFVUg2vhK-c5Q8uqvPfs.roa
File: SfpKAH_OFVUg2vhK-c5Q8uqvPfs.roa (raw, json)
Hash identifier: /qtZmrTIW4YABzr6CvxVNF19mPW+zm3n3AwP17U8vDE=
Subject key identifier: 49:FA:4A:00:7F:CE:15:55:20:DA:F8:4A:F9:CE:50:F2:EA:AF:3D:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D5FB983EAA328D4AD90C2149333E4F9D0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SfpKAH_OFVUg2vhK-c5Q8uqvPfs.roa
Signing time: Wed 31 Jan 2024 13:33:29 +0000
ROA not before: Wed 31 Jan 2024 13:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.15.0/24 maxlen: 24
163.5.16.0/24 maxlen: 24
163.5.17.0/24 maxlen: 24
163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
163.5.21.0/24 maxlen: 24
163.5.22.0/24 maxlen: 24
163.5.25.0/24 maxlen: 24
163.5.26.0/24 maxlen: 24
163.5.27.0/24 maxlen: 24
163.5.28.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 15:34:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:b9:83:ea:a3:28:d4:ad:90:c2:14:93:33:e4:f9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 31 13:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49fa4a007fce155520daf84af9ce50f2eaaf3dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fb:55:d5:a1:11:10:3d:87:63:7b:ed:ac:af:
8b:4e:15:8f:36:af:59:1d:c3:a9:41:70:3b:0d:fd:
fd:0d:2b:89:3c:29:6d:e7:fc:67:d6:26:81:24:c4:
50:ef:19:f9:aa:f3:d1:49:0e:bd:95:7b:23:5a:bf:
98:2a:87:7d:4b:da:a5:10:18:0b:65:c5:24:ec:b5:
4d:61:47:03:a1:8e:8b:60:3b:19:ab:ac:5c:da:8f:
cf:14:a3:28:57:98:93:f5:45:71:00:51:df:08:8d:
de:20:f8:12:f4:d4:87:1f:9c:ad:15:fc:e6:7e:19:
43:9e:b6:e8:b3:fc:94:d0:52:4b:90:f6:cd:b0:99:
23:1d:8b:66:2a:8f:5d:81:c2:f7:2d:b5:cb:d9:33:
61:05:e3:e3:1a:c8:34:f9:f5:ac:0a:c1:d0:8c:ff:
c8:fa:8b:b4:64:63:2e:e6:7d:17:e3:28:82:ff:9d:
c0:86:f4:11:0a:b7:b3:23:08:74:c9:46:d3:e5:34:
24:84:63:11:6f:45:dc:99:f5:96:55:75:28:b2:3b:
e1:ce:76:e5:e0:3a:0b:2f:d4:6f:b7:cc:e9:21:a0:
86:0d:e8:8a:7c:d3:3d:d9:da:a3:3e:e3:d8:fd:89:
79:de:d1:f1:7e:30:23:78:e1:41:80:e1:0a:83:c8:
cb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:FA:4A:00:7F:CE:15:55:20:DA:F8:4A:F9:CE:50:F2:EA:AF:3D:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SfpKAH_OFVUg2vhK-c5Q8uqvPfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/23
163.5.3.0-163.5.4.255
163.5.6.0-163.5.9.255
163.5.13.0-163.5.19.255
163.5.21.0-163.5.22.255
163.5.25.0-163.5.28.255
163.5.51.0/24
163.5.53.0/24
Signature Algorithm: sha256WithRSAEncryption
09:51:d8:88:11:2c:39:0c:02:79:16:5d:f8:08:94:c1:fa:f0:
72:50:78:bc:d4:5d:db:69:50:a3:4e:57:a9:b5:cc:3b:9a:fd:
4e:f1:ef:59:ec:74:9c:e5:61:69:ce:d4:24:33:e2:62:73:54:
f8:90:98:26:07:d8:62:13:6b:a2:ed:54:91:11:52:2b:c1:89:
64:11:4d:59:80:b7:b5:39:5a:a0:13:60:df:3a:dd:73:41:56:
a3:b3:3e:e4:ae:96:db:34:f0:39:a0:bf:7d:2c:52:c0:c0:34:
4e:bf:a8:28:48:90:cc:84:55:12:39:9b:00:c1:0a:da:39:f7:
58:14:c8:f2:f6:ff:a0:8e:a5:b2:b1:ef:34:84:32:73:d4:e5:
aa:8c:5d:fe:71:50:75:43:18:40:0e:56:de:d7:d6:20:f7:e9:
fc:03:1f:f8:df:b0:c8:bd:6a:0e:cc:dc:93:e7:34:0f:22:d8:
32:74:09:59:73:89:02:3f:8b:db:7b:bb:fa:95:09:ff:bc:38:
d1:a4:84:f1:89:2c:eb:97:39:e0:52:f1:6f:d1:5b:13:47:56:
fc:4a:35:b9:a0:3f:59:ee:43:6a:9c:a8:1b:ed:96:5a:bd:ce:
af:03:22:c4:b3:b7:5f:bb:fc:b7:83:05:d8:78:d6:6b:bb:44:
bb:83:2c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 31 20:20:27 2024 by rpki-client on console-fra.rpki-client.org