Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W8rRSF_Dc9PZrTT5xB_khjFM1hQ.roa
File: W8rRSF_Dc9PZrTT5xB_khjFM1hQ.roa (raw, json)
Hash identifier: V4BWH/FoZLY2k2ahFaw8K0wnUxLONL31NYIFrBi98HE=
Subject key identifier: 5B:CA:D1:48:5F:C3:73:D3:D9:AD:34:F9:C4:1F:E4:86:31:4C:D6:14
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192CD18F2011947F294535280F85EDC412F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W8rRSF_Dc9PZrTT5xB_khjFM1hQ.roa
Signing time: Sun 27 Oct 2024 08:30:17 +0000
ROA not before: Sun 27 Oct 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 163.5.185.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 06:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:18:f2:01:19:47:f2:94:53:52:80:f8:5e:dc:41:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bcad1485fc373d3d9ad34f9c41fe486314cd614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:0e:26:98:3d:c5:57:51:d2:7e:c5:9b:3d:
45:ce:23:15:f3:64:54:c0:7f:4a:7b:5e:66:a3:03:
4d:4b:1f:dd:b6:0c:8e:6c:eb:fc:7c:bc:b5:f6:e5:
18:27:90:99:b3:e4:92:f2:34:e9:58:64:56:c8:85:
41:65:d7:4e:11:64:01:fd:15:90:6c:17:55:d1:ac:
36:d3:fc:e1:7f:cd:01:cb:4c:7b:c4:6b:76:b0:b2:
3b:40:22:5a:65:aa:8e:86:2c:d0:6b:6f:71:3a:89:
e6:3e:4d:2c:f6:42:2d:22:07:bb:cd:0e:00:f7:73:
1e:e0:ef:82:69:82:13:9f:9a:58:2c:8d:45:e5:c8:
82:87:36:bd:f4:18:71:23:4c:ea:e6:de:75:35:9f:
f0:08:d7:db:35:66:df:f3:67:a4:93:12:1c:09:b4:
a7:93:e9:32:7c:5c:a9:4d:3d:dd:40:b9:58:d0:9e:
b9:7a:f5:b5:c7:96:97:b9:25:50:0f:39:48:fa:b0:
68:cb:30:0d:01:86:7a:fe:5f:c5:50:0e:85:e2:79:
7a:76:9c:c6:27:df:c8:55:21:bb:b5:52:67:0e:b7:
64:bb:6b:b4:6a:b6:a4:26:e4:3d:ca:f4:69:c8:40:
9d:2f:89:97:fc:1d:1b:b4:be:50:d5:59:ed:ff:5f:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CA:D1:48:5F:C3:73:D3:D9:AD:34:F9:C4:1F:E4:86:31:4C:D6:14
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W8rRSF_Dc9PZrTT5xB_khjFM1hQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.185.0/24
163.5.209.0/24
163.5.223.0/24
Signature Algorithm: sha256WithRSAEncryption
45:72:02:7c:a8:68:bb:3b:ef:e7:f5:30:40:27:5b:37:8c:ad:
86:3d:b1:e5:d4:5b:08:a9:4e:8c:a7:a5:45:30:23:04:7c:17:
da:52:d6:19:7a:d8:d3:48:e5:e6:7a:bd:cf:32:00:8d:a6:5d:
1e:68:e4:35:c8:6e:ef:92:93:7b:7e:5f:4c:a2:8d:87:e6:84:
3d:e2:b8:b2:14:20:23:18:6a:09:78:7a:f1:c6:a2:60:1f:68:
20:83:59:3e:7a:81:f0:7b:8e:f0:3e:95:78:c0:a4:da:d9:e5:
c5:49:20:cf:16:73:5a:2d:6a:34:bf:75:42:3f:8e:de:7f:5b:
a7:48:07:f7:34:48:8b:23:2d:76:7e:2c:30:6c:22:a4:6c:81:
c9:62:88:83:c9:12:8f:c5:32:66:5a:a0:bf:9e:ee:c0:17:1e:
ef:d4:a1:36:4c:19:5f:50:12:39:2d:e7:4c:6d:bf:79:dc:17:
0e:5d:40:28:86:7f:c7:80:17:8d:80:dd:06:6a:18:b0:bf:46:
49:52:12:bd:cc:60:9a:05:dc:28:82:78:ae:61:1e:f3:3c:3a:
bb:a5:91:67:78:b5:57:f0:07:32:ea:79:5b:df:9f:5a:3b:84:
87:e3:6f:75:4e:71:6f:09:1f:37:b0:ba:d1:2d:28:3f:e4:40:
23:b7:2f:da
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZLNGPIBGUfylFNSgPhe3EEvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMDI3MDgzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmNhZDE0ODVmYzM3M2QzZDlhZDM0ZjljNDFmZTQ4NjMxNGNkNjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQEOJpg9xVdR0n7Fmz1FziMV82RU
wH9Ke15mowNNSx/dtgyObOv8fLy19uUYJ5CZs+SS8jTpWGRWyIVBZddOEWQB/RWQ
bBdV0aw20/zhf80By0x7xGt2sLI7QCJaZaqOhizQa29xOonmPk0s9kItIge7zQ4A
93Me4O+CaYITn5pYLI1F5ciChza99BhxI0zq5t51NZ/wCNfbNWbf82ekkxIcCbSn
k+kyfFypTT3dQLlY0J65evW1x5aXuSVQDzlI+rBoyzANAYZ6/l/FUA6F4nl6dpzG
J9/IVSG7tVJnDrdku2u0arakJuQ9yvRpyECdL4mX/B0btL5Q1Vnt/1/1WwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFvK0Uhfw3PT2a00+cQf5IYxTNYUMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVzhyUlNGX0RjOVBaclRUNXhCX2toakZNMWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowW5AwQA
owXRAwQAowXfMA0GCSqGSIb3DQEBCwUAA4IBAQBFcgJ8qGi7O+/n9TBAJ1s3jK2G
PbHl1FsIqU6Mp6VFMCMEfBfaUtYZetjTSOXmer3PMgCNpl0eaOQ1yG7vkpN7fl9M
oo2H5oQ94riyFCAjGGoJeHrxxqJgH2ggg1k+eoHwe47wPpV4wKTa2eXFSSDPFnNa
LWo0v3VCP47ef1unSAf3NEiLIy12fiwwbCKkbIHJYoiDyRKPxTJmWqC/nu7AFx7v
1KE2TBlfUBI5LedMbb953BcOXUAohn/HgBeNgN0Gahiwv0ZJUhK9zGCaBdwogniu
YR7zPDq7pZFneLVX8Acy6nlb359aO4SH4291TnFvCR83sLrRLSg/5EAjty/a
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:17 2025 by rpki-client