Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/b42V0r623WpvmEpJre4IhGaKQSc.roa
File: b42V0r623WpvmEpJre4IhGaKQSc.roa (raw, json)
Hash identifier: ue1LYrmQuEwaogRR9JZImgjrVGvfp3kH+fSHlAsGjYc=
Subject key identifier: 6F:8D:95:D2:BE:B6:DD:6A:6F:98:4A:49:AD:EE:08:84:66:8A:41:27
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01904AD9522A9E12843D8E02215445A8EDE7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/b42V0r623WpvmEpJre4IhGaKQSc.roa
Signing time: Mon 24 Jun 2024 15:24:34 +0000
ROA not before: Mon 24 Jun 2024 15:24:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 15:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:d9:52:2a:9e:12:84:3d:8e:02:21:54:45:a8:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 24 15:24:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f8d95d2beb6dd6a6f984a49adee0884668a4127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:30:c8:8e:bf:aa:a3:c0:d7:bc:96:a4:b3:
5c:55:c4:c1:5a:59:83:c4:4b:9b:78:5d:f9:8f:63:
49:3f:9d:06:f5:7c:67:4d:d9:c8:c2:46:cb:39:7e:
58:fc:0c:cb:48:52:92:61:75:82:94:c3:fc:b7:17:
e9:13:83:8b:66:45:91:01:81:d1:c0:15:2d:dc:0a:
25:75:ca:f1:b8:46:56:24:3f:53:9c:52:31:f6:c1:
ae:75:61:1e:2a:8a:79:12:65:96:92:01:b7:fc:4f:
db:ce:bf:5e:ba:bd:96:9e:97:df:88:bc:b1:cc:7f:
b9:cf:8e:91:69:c9:f3:a5:c8:1d:dc:c6:de:0e:41:
f9:2e:79:90:23:c6:95:d3:80:eb:c6:c3:fe:92:ee:
b6:77:2f:51:ed:00:87:e0:fe:e0:71:66:8a:66:bc:
55:12:11:1a:4a:f7:46:db:96:83:9e:71:49:a2:a3:
f6:62:c0:be:ca:dc:f6:df:16:ca:31:76:b6:c9:f3:
48:ba:f2:df:3b:26:39:11:b2:43:c7:02:9f:1b:47:
81:7d:ce:93:37:13:46:2f:12:80:46:94:23:58:f2:
09:2d:d0:6f:9f:18:15:6d:5b:7f:5f:fe:11:5d:bf:
b2:f3:14:f6:c8:ad:5d:96:d1:bb:a1:b9:f4:94:7d:
ec:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:95:D2:BE:B6:DD:6A:6F:98:4A:49:AD:EE:08:84:66:8A:41:27
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/b42V0r623WpvmEpJre4IhGaKQSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:cc:1c:68:09:2d:03:f8:68:a1:65:d3:43:b2:13:4e:b4:ea:
07:52:89:8f:ba:6e:14:ce:bf:9d:6e:29:db:d9:99:56:1e:79:
47:77:e1:82:b7:6f:cd:59:b0:d4:23:d5:71:d8:6d:f9:f5:9c:
45:f8:4c:3b:2c:58:43:8b:cd:08:73:47:5e:b1:46:3e:b4:f5:
aa:f5:40:69:a0:ec:45:e6:4b:2a:85:ed:de:ce:34:75:5e:51:
fd:e2:17:88:62:8a:7a:1d:e2:a4:a2:10:e5:96:62:5b:60:2e:
d8:ca:cd:50:ff:39:4f:6a:f9:00:e2:97:a9:ac:f7:1e:47:d4:
7d:fb:6e:a6:2d:35:e4:a4:b6:5b:50:71:75:f6:83:f4:c8:c9:
d3:ed:d2:de:42:97:f4:ea:f1:21:87:d0:05:00:4d:5d:4e:07:
97:c0:b1:a3:47:61:39:85:f0:a8:7b:64:34:22:72:7d:b0:e8:
c3:e2:47:ad:b7:64:d6:e1:93:02:43:71:d1:c8:8a:48:b6:d1:
7f:01:78:72:c2:07:7f:b6:34:2c:4e:8f:a3:87:10:80:38:82:
6c:24:6a:e9:e8:e6:07:21:ae:a2:f2:9e:e7:f0:ea:b4:c3:91:
45:73:68:cd:ad:1a:e1:19:d9:68:f1:78:25:84:58:30:e3:50:
7c:f9:40:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 17:42:41 2024 by rpki-client on console-fra.rpki-client.org