Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa
File: WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa (raw, json)
Hash identifier: RUlQmaFzaCnEb1gOlnKyTJx+wOZeQstK9KfMEJUc5u8=
Subject key identifier: 58:BB:84:5C:00:70:9A:23:4E:FF:54:DF:F6:22:0D:B7:66:19:D6:8C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B621B9506039782860BAE363EEA290256
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa
Signing time: Tue 24 Oct 2023 14:34:16 +0000
ROA not before: Tue 24 Oct 2023 14:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Dec 2023 21:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:1b:95:06:03:97:82:86:0b:ae:36:3e:ea:29:02:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 24 14:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58bb845c00709a234eff54dff6220db76619d68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:43:8a:9c:44:a3:46:af:2c:82:2d:bc:7b:97:
da:c9:9e:c5:0e:59:61:2d:8b:78:6e:38:d1:22:bd:
d0:b2:83:56:11:d2:06:66:fb:e6:3a:93:6d:58:0b:
03:df:b8:9a:5a:59:1e:49:4e:e6:c7:0a:fc:c3:03:
d8:9b:20:de:15:ad:2a:57:1f:03:0b:d6:99:80:94:
4c:b3:66:ea:64:50:71:c9:15:83:e8:4c:4f:43:d6:
27:9b:a8:31:ad:9b:0a:ce:dd:ba:35:85:a5:88:35:
90:33:76:05:2f:06:aa:d5:89:a8:26:1c:de:11:0c:
0e:fe:86:a2:0e:8e:88:b8:e6:a7:01:27:cd:5a:bd:
6c:ce:2a:35:ce:84:74:d1:30:7d:b1:e4:d4:3c:89:
12:db:79:91:e8:d3:50:15:54:7a:bb:2a:ea:ef:b5:
f1:92:ec:6d:00:aa:d4:e7:ea:ac:0a:da:76:a4:2c:
10:80:5a:f5:65:b9:da:1f:6a:59:77:9a:56:da:27:
8a:f7:a0:12:56:31:e4:76:b5:ed:c2:f8:3a:a5:73:
3c:2a:74:70:92:7e:78:07:4d:ea:81:7c:6c:ee:1c:
a8:4e:05:e5:4f:90:c8:79:e6:a6:ae:ea:ce:00:fc:
32:2d:d5:6d:d4:6a:57:56:5a:0a:10:d3:0b:45:f9:
75:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BB:84:5C:00:70:9A:23:4E:FF:54:DF:F6:22:0D:B7:66:19:D6:8C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/WLuEXABwmiNO_1Tf9iINt2YZ1ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.95.0/24
163.5.219.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d5:61:52:60:11:f1:f7:eb:be:68:de:20:6e:be:93:99:56:
d1:3f:1c:d3:4a:d8:63:a5:69:89:1c:cc:df:fc:af:dc:23:d3:
ba:98:bc:b2:94:4b:63:f9:3b:c9:18:c2:79:70:b6:60:88:2c:
85:72:c8:fe:70:d1:a9:71:34:42:6b:bb:d1:3b:1b:fd:d5:a0:
5a:5c:df:a4:27:53:1b:36:9f:a6:63:9e:87:ca:04:2f:0a:14:
f3:79:f6:63:dd:51:8e:a3:8e:71:62:41:c9:55:e3:89:6e:f2:
fd:d8:70:75:af:1d:5e:55:5e:86:1e:60:62:b9:59:c3:af:b7:
79:0d:80:ce:02:b9:23:03:d2:6b:9f:b2:b3:2c:49:5c:5b:a4:
03:7e:f1:c2:52:3e:94:df:6e:39:19:7b:29:c8:78:fb:2e:f9:
b8:ad:5b:e4:56:51:8d:ec:cc:1a:37:1c:ae:44:a5:70:a7:35:
35:10:f8:45:d3:0a:0b:0f:a4:55:5a:ac:85:28:09:f1:3c:68:
7f:08:4a:41:ce:17:72:93:1d:ca:63:c9:2d:b5:49:66:df:c2:
6c:34:95:7d:0a:98:fd:ea:b2:70:8b:d9:b6:39:ae:b6:6c:d2:
48:ae:57:73:a2:43:e4:20:1d:26:f9:96:42:97:95:71:4e:76:
c4:7c:a6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:32 2024 by rpki-client on console-ams.rpki-client.org