Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eaYFZHdxQLkjXfY1osCFgokUnXI.roa
File: eaYFZHdxQLkjXfY1osCFgokUnXI.roa (raw, json)
Hash identifier: KdzfWP5eY5ygGVDm1KO16UGG9XJlOXQ4YbMYhWQuk5g=
Subject key identifier: 79:A6:05:64:77:71:40:B9:23:5D:F6:35:A2:C0:85:82:89:14:9D:72
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193A7DC45D65A2679AD4C40C74190338035
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eaYFZHdxQLkjXfY1osCFgokUnXI.roa
Signing time: Sun 08 Dec 2024 20:00:51 +0000
ROA not before: Sun 08 Dec 2024 20:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47741
IP address blocks: 163.5.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 08:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a7:dc:45:d6:5a:26:79:ad:4c:40:c7:41:90:33:80:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 8 20:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79a60564777140b9235df635a2c0858289149d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:23:de:90:a3:f2:87:14:46:89:9b:f5:78:
d6:25:0b:db:56:4a:47:fb:34:d9:82:fe:e3:e6:51:
70:2c:8e:11:fe:12:f2:ae:0a:e8:a4:5b:e1:72:11:
99:b5:86:d6:ea:98:fe:f9:91:a1:9a:1d:23:c4:56:
eb:e4:c7:60:11:30:ca:ef:dc:41:a5:44:b5:63:16:
8a:5f:ef:8b:88:5d:6f:91:50:6b:37:90:52:d1:42:
ec:a4:fa:3f:6e:f0:31:ab:69:aa:9e:e1:b2:e7:1e:
f2:fe:d0:3e:1f:a2:43:bb:24:81:78:34:37:68:25:
d2:d6:75:87:6f:3f:85:f0:83:86:23:72:3e:27:b0:
a4:97:c3:b2:e6:78:49:e4:84:7b:0c:4d:2b:11:54:
05:5b:7a:ff:02:22:2a:3b:7f:92:77:63:e9:c6:de:
f2:42:78:51:7c:0d:ce:48:fd:5f:cc:e5:f6:a1:81:
43:92:45:80:34:b2:33:b0:4c:e6:61:a1:32:a1:a6:
86:9e:53:94:6c:c4:8e:3d:5f:78:b6:76:93:74:41:
50:47:00:3e:94:85:8e:2d:f4:97:16:71:c4:26:ee:
6e:e6:2f:52:fa:51:63:10:27:f3:97:b7:6b:61:ff:
41:56:9e:10:35:c4:19:0f:94:c5:81:82:00:4d:3f:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A6:05:64:77:71:40:B9:23:5D:F6:35:A2:C0:85:82:89:14:9D:72
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eaYFZHdxQLkjXfY1osCFgokUnXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
81:5c:f5:83:52:cf:3e:81:2a:98:ce:93:4b:c7:5f:d7:bf:c7:
c3:56:a8:00:77:94:ff:b4:79:4a:4e:9e:2b:8a:9b:29:de:8b:
97:cb:77:d4:c1:b3:4a:15:92:05:3a:14:30:b3:e7:c9:c1:df:
9f:88:43:f4:54:ea:5e:d7:ae:43:6c:1e:a2:a2:7b:f4:f7:c9:
05:02:ac:3f:af:e0:f7:23:1f:f3:df:0c:1a:65:d0:b2:ac:ea:
9e:79:e2:08:b9:cf:73:a7:e3:3c:79:56:24:4f:93:83:77:e9:
67:39:15:bc:84:4b:04:75:13:6b:c8:a6:5d:65:c6:68:03:ae:
82:97:ac:b0:b4:d5:3f:77:66:1a:45:b7:18:dc:93:9e:90:86:
78:ab:56:e7:43:df:f0:d4:74:dc:93:89:3b:f5:d4:da:1e:9f:
ca:d7:fe:20:f4:f0:eb:c9:c8:69:38:0a:20:d2:b1:9f:22:e7:
63:93:8b:be:2b:6b:8f:65:71:da:f9:ab:c8:28:f9:7d:05:08:
08:81:58:8e:85:2f:39:40:89:25:59:be:41:56:c3:ce:f6:5c:
f6:d9:26:31:c5:5b:43:00:ba:ba:9d:c7:33:b9:e2:24:0d:cb:
9c:e9:ea:9a:fc:af:dd:b0:31:53:2b:bd:4d:2d:76:0a:23:13:
44:f1:ca:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOn3EXWWiZ5rUxAx0GQM4A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMjA4MjAwMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWE2MDU2NDc3NzE0MGI5MjM1ZGY2MzVhMmMwODU4Mjg5MTQ5ZDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSUj3pCj8ocURomb9XjWJQvbVkpH
+zTZgv7j5lFwLI4R/hLyrgropFvhchGZtYbW6pj++ZGhmh0jxFbr5MdgETDK79xB
pUS1YxaKX++LiF1vkVBrN5BS0ULspPo/bvAxq2mqnuGy5x7y/tA+H6JDuySBeDQ3
aCXS1nWHbz+F8IOGI3I+J7Ckl8Oy5nhJ5IR7DE0rEVQFW3r/AiIqO3+Sd2Ppxt7y
QnhRfA3OSP1fzOX2oYFDkkWANLIzsEzmYaEyoaaGnlOUbMSOPV94tnaTdEFQRwA+
lIWOLfSXFnHEJu5u5i9S+lFjECfzl7drYf9BVp4QNcQZD5TFgYIATT86vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmmBWR3cUC5I132NaLAhYKJFJ1yMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZWFZRlpIZHhRTGtqWGZZMW9zQ0Znb2tVblhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowVcMA0G
CSqGSIb3DQEBCwUAA4IBAQCBXPWDUs8+gSqYzpNLx1/Xv8fDVqgAd5T/tHlKTp4r
ipsp3ouXy3fUwbNKFZIFOhQws+fJwd+fiEP0VOpe165DbB6ionv098kFAqw/r+D3
Ix/z3wwaZdCyrOqeeeIIuc9zp+M8eVYkT5ODd+lnORW8hEsEdRNryKZdZcZoA66C
l6ywtNU/d2YaRbcY3JOekIZ4q1bnQ9/w1HTck4k79dTaHp/K1/4g9PDrychpOAog
0rGfIudjk4u+K2uPZXHa+avIKPl9BQgIgViOhS85QIklWb5BVsPO9lz22SYxxVtD
ALq6ncczueIkDcuc6eqa/K/dsDFTK71NLXYKIxNE8cp5
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:39:10 2025 by rpki-client