Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TY4C9leXxS78--sk9GWMxPMBJXw.roa
File: TY4C9leXxS78--sk9GWMxPMBJXw.roa (raw, json)
Hash identifier: tuhF0K/sYXBOYMNVoc/O2++gIqJYH0OPj+mMzhrrTcg=
Subject key identifier: 4D:8E:02:F6:57:97:C5:2E:FC:FB:EB:24:F4:65:8C:C4:F3:01:25:7C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D98CD1E120D23F21D908E02BA4D5DB878
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TY4C9leXxS78--sk9GWMxPMBJXw.roa
Signing time: Sun 11 Feb 2024 15:33:15 +0000
ROA not before: Sun 11 Feb 2024 15:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.199.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 10:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:cd:1e:12:0d:23:f2:1d:90:8e:02:ba:4d:5d:b8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 11 15:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d8e02f65797c52efcfbeb24f4658cc4f301257c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:5c:83:17:06:85:69:01:97:ee:3e:3d:4d:
62:eb:8f:5f:1e:e3:09:44:5d:3e:e9:f5:03:22:77:
ee:f3:01:19:22:53:5b:57:f7:e7:67:e1:d9:15:98:
d5:1d:e6:04:07:c5:2f:99:7a:5e:a7:e0:5d:7f:2f:
7a:15:d2:25:96:73:fc:50:39:c9:ee:ae:87:3d:f5:
c3:f0:be:af:3e:09:e0:a0:16:25:f8:18:2a:bc:73:
31:a7:f8:a5:f0:32:98:9f:8e:5c:7a:be:c3:77:c4:
41:28:dd:84:53:f9:19:d5:60:f3:b6:e9:d7:0c:e6:
aa:5d:65:e5:af:8b:65:2d:cd:19:53:f6:04:e2:aa:
8b:58:85:11:04:0c:d4:c6:49:0f:d3:85:e7:fd:a4:
10:d5:a2:29:55:c3:26:27:ad:40:35:38:6d:32:bf:
8f:f7:2d:4b:3b:c8:13:94:f3:80:e2:35:e0:12:d6:
86:47:8a:8f:2b:96:0c:63:ca:f8:73:e7:8b:eb:25:
ff:ee:df:e6:5a:72:dc:dd:ee:58:98:33:50:5e:64:
59:05:2d:f4:78:76:10:b7:a7:c1:3f:59:41:be:4f:
57:78:ea:de:c2:61:00:83:0b:60:f2:10:20:97:9d:
eb:b7:3b:b3:34:7c:a8:f9:20:35:d4:7c:fb:67:68:
60:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8E:02:F6:57:97:C5:2E:FC:FB:EB:24:F4:65:8C:C4:F3:01:25:7C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TY4C9leXxS78--sk9GWMxPMBJXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.199.0/24
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e2:0b:05:a3:d5:11:a3:1b:1d:d5:60:a3:ea:29:3a:55:ba:
1e:a7:d7:ad:d5:d6:1d:26:0b:62:b1:11:1c:89:58:8b:2b:0d:
71:42:be:e3:40:aa:fb:0e:a9:4c:cb:db:54:4c:e5:38:7b:bf:
fa:58:5f:bd:fd:82:1a:42:a2:da:2f:78:4c:58:ff:91:92:00:
4b:2f:9a:ee:1d:30:98:20:de:9b:1f:61:e2:73:89:a9:11:66:
c8:56:a3:6f:65:f9:47:5f:3e:d6:81:da:5f:aa:8f:8f:6e:46:
b0:fc:cf:54:c4:6a:98:a8:bd:44:45:86:6e:e2:3e:69:0a:21:
4f:19:18:fb:35:56:06:60:bf:a3:c4:8c:4e:c4:af:f8:b6:ef:
41:5d:b8:ce:02:38:41:e0:89:bd:97:1c:29:f7:74:21:b6:e8:
24:de:c7:f8:cd:4e:9a:1b:74:fd:aa:45:e5:b5:67:20:03:fe:
f6:1a:6f:46:71:4c:c1:2f:7c:e4:38:39:a4:da:07:91:ce:da:
93:11:09:ec:63:9f:96:f5:d9:cc:df:dc:7c:4e:e9:c5:13:2e:
8a:51:6d:30:dd:32:70:d4:0c:d1:4c:22:b5:9e:8f:25:19:a1:
17:d0:9f:de:ae:e0:90:d9:96:0d:76:51:3e:86:c0:b7:93:27:
19:c9:e7:ac
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2YzR4SDSPyHZCOArpNXbh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwMjExMTUzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDhlMDJmNjU3OTdjNTJlZmNmYmViMjRmNDY1OGNjNGYzMDEyNTdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxxcgxcGhWkBl+4+PU1i649fHuMJ
RF0+6fUDInfu8wEZIlNbV/fnZ+HZFZjVHeYEB8UvmXpep+Bdfy96FdIllnP8UDnJ
7q6HPfXD8L6vPgngoBYl+BgqvHMxp/il8DKYn45cer7Dd8RBKN2EU/kZ1WDztunX
DOaqXWXlr4tlLc0ZU/YE4qqLWIURBAzUxkkP04Xn/aQQ1aIpVcMmJ61ANThtMr+P
9y1LO8gTlPOA4jXgEtaGR4qPK5YMY8r4c+eL6yX/7t/mWnLc3e5YmDNQXmRZBS30
eHYQt6fBP1lBvk9XeOrewmEAgwtg8hAgl53rtzuzNHyo+SA11Hz7Z2hgJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE2OAvZXl8Uu/PvrJPRljMTzASV8MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVFk0QzlsZVh4Uzc4LS1zazlHV014UE1CSlh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowXHAwQA
owXoMA0GCSqGSIb3DQEBCwUAA4IBAQB54gsFo9URoxsd1WCj6ik6Vboep9et1dYd
JgtisREciViLKw1xQr7jQKr7DqlMy9tUTOU4e7/6WF+9/YIaQqLaL3hMWP+RkgBL
L5ruHTCYIN6bH2Hic4mpEWbIVqNvZflHXz7Wgdpfqo+Pbkaw/M9UxGqYqL1ERYZu
4j5pCiFPGRj7NVYGYL+jxIxOxK/4tu9BXbjOAjhB4Im9lxwp93Qhtugk3sf4zU6a
G3T9qkXltWcgA/72Gm9GcUzBL3zkODmk2geRztqTEQnsY5+W9dnM39x8TunFEy6K
UW0w3TJw1AzRTCK1no8lGaEX0J/eruCQ2ZYNdlE+hsC3kycZyees
-----END CERTIFICATE-----
Generated at Sat Feb 24 13:18:08 2024 by rpki-client on console-fra.rpki-client.org