Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cFWtXuBxDS9gL_nvuK59QMf3lEM.roa
File: cFWtXuBxDS9gL_nvuK59QMf3lEM.roa (raw, json)
Hash identifier: 2WhWql0Ovu0dwLEt4/5Ql1CFZRn16Xidw7ugkObYhqc=
Subject key identifier: 70:55:AD:5E:E0:71:0D:2F:60:2F:F9:EF:B8:AE:7D:40:C7:F7:94:43
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01910A7412E0C8AD31E355E67E0BD827BFD8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cFWtXuBxDS9gL_nvuK59QMf3lEM.roa
Signing time: Wed 31 Jul 2024 20:21:04 +0000
ROA not before: Wed 31 Jul 2024 20:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 12:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0a:74:12:e0:c8:ad:31:e3:55:e6:7e:0b:d8:27:bf:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 31 20:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7055ad5ee0710d2f602ff9efb8ae7d40c7f79443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:37:6f:0d:ef:3a:2a:67:da:9f:ad:5f:aa:
83:87:b0:79:fb:9b:37:d8:f4:19:c3:56:c7:0d:dd:
c7:d7:98:c9:b0:d2:c8:47:e7:dc:87:3e:e5:f4:e9:
d6:4a:3a:99:e2:17:58:4a:fd:e7:1f:03:11:3e:11:
d7:a7:37:76:8d:c1:35:23:12:0d:57:8e:cf:80:e7:
c9:41:7b:95:e7:04:18:46:be:15:ec:60:03:84:da:
74:c0:6d:9f:38:92:f5:b8:0e:9e:74:63:fa:b2:b8:
fa:be:81:39:b3:13:6a:8d:5d:d8:10:10:74:70:a1:
71:54:a7:8c:21:d0:ec:85:95:2d:a5:b6:e6:ff:3e:
d6:3f:f9:6d:e8:46:b8:e8:2b:a1:b0:5a:ae:3e:c4:
1d:0a:da:41:50:08:5e:96:70:be:5d:ee:c7:88:85:
b0:f2:af:85:7e:a3:51:86:9d:ac:cf:ea:fe:65:df:
e3:2a:a4:22:15:d6:40:f1:94:90:60:d7:42:bb:ba:
f2:9a:56:90:c8:3d:78:8a:0f:e2:e9:db:ce:7f:9e:
9c:60:d6:0a:5e:44:6b:06:28:6a:24:31:20:af:8c:
b0:2f:16:c0:9d:45:74:d1:ba:a7:22:4c:47:90:60:
bf:0d:34:43:c2:2b:e3:dd:58:d0:cc:cc:fb:11:00:
c7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:55:AD:5E:E0:71:0D:2F:60:2F:F9:EF:B8:AE:7D:40:C7:F7:94:43
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cFWtXuBxDS9gL_nvuK59QMf3lEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.56.0/24
163.5.82.0/24
163.5.87.0/24
163.5.95.0/24
163.5.99.0/24
163.5.127.0/24
163.5.140.0/24
163.5.202.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
98:e2:da:23:04:95:53:f8:7b:33:54:ba:32:77:d8:f8:24:7a:
92:7c:65:70:68:2e:b3:b0:9f:98:1e:77:f6:5e:2b:11:a5:3d:
93:78:c1:5e:79:7d:32:32:b7:a1:9d:9d:a8:c8:08:13:72:4b:
66:08:2e:64:6b:b1:9f:51:f1:eb:19:b3:9b:60:d2:14:79:49:
4d:04:05:a5:ea:b2:ab:6e:a1:c6:23:7f:e4:15:18:86:7d:45:
e7:7a:75:c7:27:bd:58:6e:84:a2:77:0b:fb:a4:d0:12:af:06:
db:d9:68:3f:0f:e8:49:88:5c:85:7b:e6:86:65:b3:96:a8:2c:
f3:3c:89:46:04:56:16:ea:0e:10:48:0a:84:b2:24:d0:c7:49:
db:78:87:de:be:48:1e:af:6f:6f:08:75:35:f4:80:f8:40:28:
14:a0:2b:83:8c:60:66:2a:06:5e:fd:ae:e3:69:38:ab:6a:ae:
37:32:8e:8a:3e:2d:80:59:8f:2f:4b:b0:1f:fc:4b:d4:6c:e0:
f0:09:ab:1b:3e:f8:11:45:ce:df:3b:c8:79:ad:e3:32:cb:65:
26:74:af:e2:65:7b:49:1b:98:75:52:21:94:fb:46:29:92:9c:
e3:27:32:41:38:00:3b:e1:c5:31:a4:c4:60:d5:45:75:95:58:
c9:0c:fe:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org