Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aorFGFVtpTeJeGyfdmIH946ZkYg.roa
File: aorFGFVtpTeJeGyfdmIH946ZkYg.roa (raw, json)
Hash identifier: w6mrOSxdaaeJbHwN2qJ9545dNZFmsfzxCFfNlAkndM0=
Subject key identifier: 6A:8A:C5:18:55:6D:A5:37:89:78:6C:9F:76:62:07:F7:8E:99:91:88
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EE86CC56390FE6B86BF7FA3B97DD2298F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aorFGFVtpTeJeGyfdmIH946ZkYg.roa
Signing time: Tue 16 Apr 2024 19:40:26 +0000
ROA not before: Tue 16 Apr 2024 19:40:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e8:6c:c5:63:90:fe:6b:86:bf:7f:a3:b9:7d:d2:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 16 19:40:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a8ac518556da53789786c9f766207f78e999188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:75:18:78:d3:2c:96:0f:b4:a2:3d:59:59:7a:
fd:90:6b:24:f7:df:69:76:c4:df:e8:1e:74:33:44:
15:53:b3:c1:4a:c7:60:78:b1:6b:9e:b3:48:44:a9:
f7:1a:70:56:2c:96:90:70:4f:43:4a:91:6e:11:7c:
ed:b9:c7:89:8e:bf:c4:49:15:51:e4:c3:cb:15:1e:
54:d8:45:d8:68:3f:b5:92:be:8a:e7:f4:aa:8e:27:
8a:e4:75:8d:69:1d:9b:c0:92:52:1b:b7:75:90:d8:
df:83:19:2d:06:c7:b4:c1:fe:9a:57:97:e5:4f:3e:
0a:99:4b:ee:fd:55:64:17:df:75:90:4d:2b:e7:ed:
34:a7:5a:7a:a8:79:fc:c3:b6:21:71:6f:cb:18:81:
23:14:f9:91:1c:54:1a:2a:a8:4d:42:ba:2b:ae:7c:
38:26:9f:83:0f:48:04:22:1c:48:5f:7e:a1:ea:6c:
25:2c:19:d9:32:00:74:0a:bb:3a:13:08:b4:1e:9e:
67:82:13:a1:6b:5f:46:07:7d:ac:10:2d:dc:ef:f9:
8d:48:dd:38:fd:c2:81:18:13:87:d6:74:6f:26:f7:
78:b9:b0:ae:e1:f8:88:13:b4:77:cf:7e:da:47:bd:
b7:1f:05:97:1e:5c:dc:21:66:ae:1e:11:4f:26:03:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8A:C5:18:55:6D:A5:37:89:78:6C:9F:76:62:07:F7:8E:99:91:88
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/aorFGFVtpTeJeGyfdmIH946ZkYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.86.0/24
163.5.97.0/24
163.5.118.0/24
163.5.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:7f:b4:46:dd:18:ee:39:3a:00:56:fc:2c:08:03:81:f4:f0:
89:14:0d:bb:70:b9:89:d4:33:f9:42:3c:a2:15:53:88:c6:4c:
bf:e0:f0:b2:90:a0:93:46:ed:c3:96:c5:33:eb:94:2d:a2:ff:
3a:e3:4a:1e:43:60:ff:9f:7d:7f:1e:14:e3:64:3b:d6:7f:c4:
cc:d4:9b:1d:b1:b1:00:e7:31:30:c1:fb:21:76:41:46:4f:7e:
ea:cc:68:eb:1d:b4:a8:03:5c:ac:d1:49:b8:da:c7:13:d4:b9:
ae:d8:b3:c3:db:89:96:2c:72:cc:49:d6:48:4f:cc:ec:38:f3:
93:1c:7a:9b:ab:b3:2e:4b:e3:95:8c:06:29:f3:75:2b:c2:34:
4e:ba:c5:c9:ac:cf:60:74:60:3a:f0:4a:aa:e5:89:0b:96:4d:
9c:74:01:26:43:09:66:88:1b:44:9a:11:86:60:d1:5b:86:ca:
bd:27:ef:48:b1:f5:6e:76:52:6f:b4:04:08:cd:71:7e:7c:9e:
09:2c:74:b4:73:2f:d5:79:b9:e5:ac:21:01:f1:60:36:da:4b:
09:49:38:71:e5:85:e0:aa:31:01:5f:eb:c8:95:f6:5f:a3:4d:
59:9d:1f:ce:c3:2d:0c:98:6d:23:9e:86:df:4f:66:64:4f:d0:
08:c3:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 00:45:40 2024 by rpki-client on console-ams.rpki-client.org