Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e03B-gCQMcoa0hCMxRLVq4NgdsY.roa
File: e03B-gCQMcoa0hCMxRLVq4NgdsY.roa (raw, json)
Hash identifier: XaOwO/4r/FQX+id0RUGaHd8WO5iQ++NMQz5u2PkrUNQ=
Subject key identifier: 7B:4D:C1:FA:00:90:31:CA:1A:D2:10:8C:C5:12:D5:AB:83:60:76:C6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4254F96D007A667507DC5DE1EDDD409
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e03B-gCQMcoa0hCMxRLVq4NgdsY.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5650
IP address blocks: 163.5.211.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jan 2024 15:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4f:96:d0:07:a6:67:50:7d:c5:de:1e:dd:d4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b4dc1fa009031ca1ad2108cc512d5ab836076c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:d9:a4:20:c8:ac:87:83:ed:24:32:6a:64:
e7:8f:11:0c:5e:cd:d6:a0:90:df:d0:45:17:1a:0b:
40:60:84:4a:da:0d:49:aa:05:5c:28:14:c6:32:94:
27:8b:96:6b:ea:b9:d8:96:ab:3d:ea:b7:77:ab:9b:
5b:77:2d:22:e2:98:42:0a:48:41:65:99:63:97:fe:
32:3b:8b:36:3d:dc:d6:fb:0a:11:ab:e0:4f:c3:cc:
eb:fd:94:2a:2f:a9:2c:bc:23:7e:28:24:04:20:f8:
c0:b6:d3:ed:29:10:58:3c:cf:6f:18:6e:f4:8e:c1:
1f:eb:5c:1d:c5:5a:fa:db:dc:f7:57:73:b2:c8:35:
83:0b:d9:91:a5:0f:23:fa:34:ff:f1:30:1b:1a:26:
60:63:00:0e:99:09:ad:a2:4d:d0:35:65:9b:61:4d:
8c:d3:f0:bc:98:e4:2c:44:f5:21:71:25:fb:80:ff:
be:55:68:72:1f:15:27:2a:a7:ce:c7:20:c5:21:2b:
85:73:be:df:99:77:20:85:5b:07:10:24:71:97:b8:
40:be:31:a1:04:c7:3c:8e:50:71:ad:9b:7a:2c:56:
b8:de:10:d7:b5:14:91:ca:06:b1:20:f5:31:cf:4e:
09:a5:80:03:83:c5:93:f4:48:ef:dc:57:8a:1b:41:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4D:C1:FA:00:90:31:CA:1A:D2:10:8C:C5:12:D5:AB:83:60:76:C6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/e03B-gCQMcoa0hCMxRLVq4NgdsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.136.0/24
163.5.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b1:0f:a9:32:1b:76:be:2b:f2:a2:13:59:8d:22:8f:ab:9a:
61:32:63:fe:28:6a:5e:f7:3d:a3:17:55:de:91:7f:ce:0b:25:
f3:29:f1:09:14:9c:21:33:fe:e8:3f:fe:1a:14:f0:61:f2:bb:
16:5e:92:22:86:4f:1b:c3:de:64:e1:c6:c7:af:89:64:94:e6:
ff:60:9b:64:5f:dc:dd:76:af:9a:92:ad:f2:68:34:39:a7:93:
cd:48:2a:94:9b:be:48:c8:ee:b6:c0:47:a2:7b:b9:d1:9b:93:
ea:c0:43:80:ff:5f:ec:d4:c3:6e:fb:60:a6:22:e2:a7:cb:c0:
94:dc:e1:4f:d7:67:60:54:a7:64:b3:b1:8a:3e:bf:e7:98:70:
4f:4c:b9:4c:6e:35:d1:b0:e5:5f:9a:91:d6:04:8a:1d:b9:46:
81:00:ff:2c:37:4d:50:98:c1:77:77:5e:7c:b1:89:30:58:85:
bc:8b:25:b3:10:56:ae:4b:c2:9f:05:9b:61:3e:84:4f:24:28:
65:6d:88:4c:a4:fc:a2:5b:e7:32:05:75:ba:1f:58:7f:4e:5c:
29:d6:3e:91:c0:08:4a:29:a5:d0:e7:93:ec:89:65:a9:cd:1b:
f8:f6:c5:0a:7c:2c:4a:1f:f0:2c:14:42:33:3b:27:6d:b5:33:
81:ff:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 25 20:48:58 2024 by rpki-client on console-fra.rpki-client.org