Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wr5VcxCNrlscB7wH05wKNhWs3Q4.roa
File: Wr5VcxCNrlscB7wH05wKNhWs3Q4.roa (raw, json)
Hash identifier: pDRntvhG6ERIDYQH6OVTgc+8PS6J4AfEnXx2tXXGakk=
Subject key identifier: 5A:BE:55:73:10:8D:AE:5B:1C:07:BC:07:D3:9C:0A:36:15:AC:DD:0E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190374C79358DAAF5D41531B466179165C3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wr5VcxCNrlscB7wH05wKNhWs3Q4.roa
Signing time: Thu 20 Jun 2024 20:17:56 +0000
ROA not before: Thu 20 Jun 2024 20:17:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 163.5.53.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 14:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:4c:79:35:8d:aa:f5:d4:15:31:b4:66:17:91:65:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 20 20:17:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abe5573108dae5b1c07bc07d39c0a3615acdd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:30:4e:b4:a7:7c:00:67:05:bc:d1:53:fb:
f3:4a:a1:60:27:cc:e2:a2:39:ed:48:68:25:e7:19:
b5:11:0c:77:dc:9f:9f:b5:d4:ad:8e:ee:4d:08:70:
af:29:11:4e:b2:ca:d1:d5:3c:70:32:c0:6c:25:8b:
60:43:dc:d1:e9:c0:fa:a4:93:b6:6c:e4:5c:fa:92:
ed:a4:b9:de:0b:ca:5e:4d:27:1b:ab:a7:74:ed:6a:
3a:34:15:a3:75:2f:b4:13:a1:92:21:bd:f1:2f:31:
23:fc:fe:1e:b8:50:bf:1f:49:ee:9b:d1:a4:bf:17:
30:3f:02:31:04:8c:d8:cc:53:cc:11:3b:b2:9c:13:
41:98:53:16:64:0a:cd:73:75:a3:a4:c9:2e:c7:05:
88:38:63:a2:81:a4:cc:92:96:34:97:45:77:06:1e:
97:e3:ed:d3:06:85:12:d8:87:95:5d:ff:ce:c7:ac:
6e:e8:59:cd:d3:96:a4:60:27:e1:ae:56:a4:65:af:
fc:0b:ab:44:90:ef:10:4d:b0:2d:0e:fa:a4:17:b1:
3e:43:2a:af:a3:36:a6:fe:68:1b:09:7c:f0:7e:4b:
18:7c:57:d4:4b:30:a6:90:db:ac:c7:20:9c:6a:78:
61:3f:f7:4f:2f:a0:8a:c3:82:2c:d1:95:ba:ac:1b:
c4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:55:73:10:8D:AE:5B:1C:07:BC:07:D3:9C:0A:36:15:AC:DD:0E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Wr5VcxCNrlscB7wH05wKNhWs3Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.53.0/24
163.5.79.0/24
163.5.161.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c6:af:70:be:c0:7e:9b:19:41:09:d2:ef:ac:65:85:68:66:
88:c3:6d:50:cc:3d:00:a6:85:bd:d6:13:ee:e6:75:4e:2b:9f:
f2:35:1a:04:d1:9a:0c:1c:f1:40:a0:04:66:d3:46:ac:41:24:
e5:eb:4b:47:7c:8b:2f:b0:2e:30:2b:8e:ce:23:5a:b0:6e:09:
45:a1:0c:e6:30:0e:bb:ba:8b:43:eb:72:ff:b8:c8:11:62:e2:
66:39:49:a4:50:3b:87:d8:b3:9d:8c:55:54:1f:74:93:fb:81:
04:b1:f4:ae:ee:83:92:62:ba:be:f0:72:58:83:1a:f8:1b:f1:
f1:5c:b6:3a:a8:c2:bf:af:d9:96:e8:b1:29:42:3b:10:36:76:
dd:35:2b:ca:11:41:41:1c:7d:be:81:c2:e5:34:42:9f:4c:8b:
ec:63:3c:79:17:50:17:ac:7e:8f:55:fe:63:33:15:fa:78:0d:
8e:b9:1e:80:ca:55:a0:0b:5d:53:bf:ad:2e:d0:fb:3b:7b:01:
16:23:4c:97:5a:6c:db:e6:f9:fd:89:ea:11:d6:24:db:27:6d:
aa:b6:58:74:a4:fb:9b:5b:f4:40:24:18:ce:36:fe:6c:48:5c:
6c:2f:cc:63:b8:7e:68:86:4f:91:af:44:19:bd:93:28:2b:88:
47:c8:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:05:27 2024 by rpki-client on console-fra.rpki-client.org