Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dSEvIpx5Oy8EV9olRkMt4yHmfAc.roa
File: dSEvIpx5Oy8EV9olRkMt4yHmfAc.roa (raw, json)
Hash identifier: H3Wm4evRZZtoATJmWwEVGGLRtOk5PQ9aN6Qy2SztAmI=
Subject key identifier: 75:21:2F:22:9C:79:3B:2F:04:57:DA:25:46:43:2D:E3:21:E6:7C:07
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193086DD9F4387CCAC136339F972F16A7C2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dSEvIpx5Oy8EV9olRkMt4yHmfAc.roa
Signing time: Thu 07 Nov 2024 21:00:36 +0000
ROA not before: Thu 07 Nov 2024 21:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 18:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:6d:d9:f4:38:7c:ca:c1:36:33:9f:97:2f:16:a7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 7 21:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75212f229c793b2f0457da2546432de321e67c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:b4:c8:d9:c8:7e:c8:48:bf:ff:e3:41:ca:
bc:0c:5e:a8:d4:1d:2b:ac:a8:a0:3d:7b:8c:b6:78:
55:9a:32:92:80:6b:48:95:79:36:2d:37:88:56:db:
8f:53:43:8b:c9:4b:76:7c:05:b7:cf:3f:d6:9d:78:
7a:ce:1a:4f:73:4b:b6:7d:cf:0b:a3:a4:55:b0:44:
7e:d7:18:a0:a8:f8:83:db:87:bc:72:a2:70:ec:3f:
7c:32:f0:72:9d:be:63:81:f7:8f:4d:41:c5:ae:c8:
1c:e9:97:99:b5:1f:e5:6d:81:7c:e4:c7:7c:08:90:
48:37:bf:da:ec:33:9d:c8:89:fa:34:5c:66:37:d2:
9a:ae:d3:3d:32:91:7c:e7:d8:b4:02:d5:85:6f:fc:
fa:7f:12:c3:21:df:3a:c8:20:c7:03:5b:6e:53:1e:
ed:70:7e:02:45:8f:f1:46:fe:6a:ec:d6:69:a6:97:
36:2f:52:6f:12:25:44:e8:c2:d2:2a:6b:04:25:b4:
65:4f:06:43:bc:68:1f:6e:89:ed:99:81:69:54:0b:
96:09:d5:87:c8:f7:7c:df:4c:5e:e2:c3:11:59:3c:
8a:6b:7e:41:b4:c2:d0:ac:00:30:4b:7a:0a:c7:6a:
b8:94:14:5a:93:bb:b8:41:86:45:2b:e1:f5:a4:39:
63:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:21:2F:22:9C:79:3B:2F:04:57:DA:25:46:43:2D:E3:21:E6:7C:07
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dSEvIpx5Oy8EV9olRkMt4yHmfAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.192.0/23
163.5.195.0/24
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
a9:51:f6:89:ac:5b:57:b5:2e:cb:3f:4e:64:6c:e8:a7:9a:f8:
7f:bf:82:25:f6:ac:e0:c3:0b:4c:62:1f:36:be:77:d9:b2:71:
c9:13:4e:15:c3:19:f2:b6:9c:78:00:01:fb:86:82:76:e4:52:
74:41:06:6d:67:8b:7a:f8:41:32:61:51:27:b6:30:da:e6:f0:
b0:55:f5:76:b5:af:13:81:1e:25:4e:fd:d6:ac:c8:77:1b:66:
2a:3f:46:a2:4d:1b:97:a7:89:d0:e0:7b:b7:f2:f9:f6:df:b2:
75:f3:6f:3e:80:a3:54:e6:4a:54:c3:e5:d2:76:e0:1d:78:31:
c2:61:9c:a8:17:77:97:e8:d8:20:34:0e:21:f1:2c:34:5c:d9:
c9:6d:57:33:70:d1:f6:29:d2:e0:53:66:b4:e8:21:fa:df:b5:
0f:5a:00:c6:25:91:c4:7d:50:0d:08:96:37:f5:dc:24:65:fa:
79:93:f2:84:1c:e2:9a:e0:ca:10:8c:2a:b3:b4:1c:c6:d4:96:
1e:31:e4:c7:64:5b:f2:c6:8a:19:3c:06:0e:13:40:a1:61:2a:
1b:94:87:16:03:0e:0f:eb:8a:72:9e:ff:30:6f:f9:ad:20:d3:
b5:60:b6:5b:01:1e:44:12:80:1b:45:56:6e:a4:49:4a:83:43:
2c:a6:88:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:53:16 2024 by rpki-client on console-ams.rpki-client.org