Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/euFrY0OWloVDIsun6_AR0O8alWs.roa
File: euFrY0OWloVDIsun6_AR0O8alWs.roa (raw, json)
Hash identifier: o8Ld5yNJNDOnIUQM4PKSU8zy/Lg3sb0oO6C1J5B5tug=
Subject key identifier: 7A:E1:6B:63:43:96:96:85:43:22:CB:A7:EB:F0:11:D0:EF:1A:95:6B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01924D7AD7B174D5423DD73C929270325CF0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/euFrY0OWloVDIsun6_AR0O8alWs.roa
Signing time: Wed 02 Oct 2024 13:45:49 +0000
ROA not before: Wed 02 Oct 2024 13:45:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 15:52:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:7a:d7:b1:74:d5:42:3d:d7:3c:92:92:70:32:5c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 2 13:45:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ae16b63439696854322cba7ebf011d0ef1a956b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d8:73:61:3a:d7:8d:3f:b8:6e:6a:46:70:4d:
d0:c6:a4:c8:bc:4e:da:d9:3b:fc:d8:22:84:5b:45:
8a:03:8a:cf:d7:8d:23:e1:5b:b6:02:dd:33:ed:f7:
52:f7:e5:c8:cb:a8:d2:fb:40:20:c0:24:30:3a:eb:
86:34:f7:61:e5:33:ac:82:4c:7b:3d:c2:36:c8:eb:
ca:8e:79:d2:1a:53:99:42:ce:52:93:e5:37:73:8f:
0c:0e:e4:c4:3a:1a:ce:f4:de:16:12:05:28:9a:1a:
e4:40:9a:22:39:61:b8:44:14:20:0c:54:70:da:3c:
5c:13:a8:9a:40:d5:ee:dc:b1:0f:e6:78:4e:b8:e0:
bf:b8:4f:a0:3a:01:34:b0:b0:6e:ce:89:40:77:e6:
f6:14:be:02:4a:f1:6f:87:e7:1b:79:3a:3b:14:2f:
32:6e:ba:30:f2:34:70:2c:46:d4:db:68:f0:0f:7e:
ac:68:0d:9a:88:b7:5f:14:d2:3c:20:31:37:84:13:
c9:2f:1b:d3:62:04:4f:b8:c8:36:e1:8b:9c:64:e9:
3d:a6:4b:de:37:5e:e5:f4:ed:8d:45:70:06:91:3c:
f7:5f:35:62:4f:a2:9e:14:1b:bc:da:88:41:70:4e:
b9:66:02:23:72:21:ec:e7:3d:fe:66:d4:7a:ae:d8:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:6B:63:43:96:96:85:43:22:CB:A7:EB:F0:11:D0:EF:1A:95:6B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/euFrY0OWloVDIsun6_AR0O8alWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.71.0/24
163.5.82.0/24
163.5.87.0/24
163.5.95.0/24
163.5.99.0/24
163.5.124.0/23
163.5.127.0/24
163.5.136.0/24
163.5.138.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4b:83:e8:98:9d:2d:77:9c:99:d5:2c:27:c2:ea:a5:8c:6b:
2d:34:1b:b9:c4:e9:39:90:df:4f:5a:8b:5e:f2:1b:92:87:43:
52:bd:3a:ba:11:bf:50:6f:c5:67:8c:3e:7b:80:ad:62:b8:d0:
c9:48:4d:b6:87:45:bc:08:ee:d5:58:0e:aa:42:cb:8c:4e:9f:
13:f1:9d:e0:5f:7f:62:9a:57:6d:8d:81:d4:df:6a:4e:f8:98:
27:24:fc:04:5b:dd:56:6c:32:c4:45:40:62:56:d4:c1:bc:d0:
04:87:20:2e:01:53:ba:ba:0f:00:fa:7b:18:e7:93:e5:d7:92:
3f:65:77:7f:06:74:5c:16:85:49:d1:e4:7d:96:c5:93:b2:7b:
df:33:2e:90:ea:56:0c:06:b1:06:36:01:fe:53:d7:08:ab:fb:
e3:1a:ca:78:b5:8a:eb:19:77:97:96:89:f8:a6:b3:fe:14:2a:
c9:16:f2:86:a5:62:72:1b:47:bd:3f:bf:e9:29:93:1c:83:34:
07:92:78:38:77:f1:3c:9b:6d:5e:66:22:a6:c8:4b:4c:82:d2:
d9:e1:a2:39:25:44:e5:4c:4b:43:1e:a3:e0:ae:2c:b6:6b:7e:
3f:42:38:09:bc:f5:aa:38:4b:76:e5:47:ed:30:83:23:4e:87:
82:9e:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:11 2024 by rpki-client on console-ams.rpki-client.org