Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fRnv_7Mt9whQsuPbMfZakONSmzw.roa
File: fRnv_7Mt9whQsuPbMfZakONSmzw.roa (raw, json)
Hash identifier: NaClP8JdqpCTtq5fgaQor9wWPqWsHP50wy45+f5yQpI=
Subject key identifier: 7D:19:EF:FF:B3:2D:F7:08:50:B2:E3:DB:31:F6:5A:90:E3:52:9B:3C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FE4E0C8B108A43B92D2AC7574F3F28D08
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fRnv_7Mt9whQsuPbMfZakONSmzw.roa
Signing time: Tue 04 Jun 2024 20:11:27 +0000
ROA not before: Tue 04 Jun 2024 20:11:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.56.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Aug 2024 05:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:e0:c8:b1:08:a4:3b:92:d2:ac:75:74:f3:f2:8d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 4 20:11:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7d19efffb32df70850b2e3db31f65a90e3529b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a6:15:8d:ca:56:2d:4c:90:fc:9c:95:11:90:
2b:dc:77:ff:03:3f:ab:00:4d:18:61:24:ae:95:2e:
19:60:ce:aa:26:48:27:44:b0:4f:11:49:02:73:7d:
02:b0:a1:92:2a:39:69:ac:8e:d1:a3:9b:94:a2:e6:
28:3a:7b:98:92:7a:30:47:13:e0:bd:90:9b:b5:d5:
7d:25:50:7f:c2:62:22:ed:ae:71:ec:14:3f:a6:30:
25:eb:b5:8a:39:b6:28:25:66:5e:0d:b7:c8:36:4b:
86:4c:ff:7a:e9:4a:26:d9:81:42:ba:d7:bf:51:c5:
ed:15:46:6f:c9:df:08:9e:4c:71:a1:e1:77:0e:5e:
64:4a:1c:c2:13:f0:55:3c:2f:a7:1f:8f:94:98:34:
5a:7e:f7:c5:5d:5a:b1:73:20:94:f8:19:c4:2f:93:
8c:a1:29:bc:84:e1:98:fd:a4:1c:49:50:a1:16:7e:
c9:eb:80:8c:1e:8a:94:ca:2e:d2:31:59:2e:9d:25:
33:db:66:db:c5:ef:a2:7f:27:8b:81:98:2f:9f:ee:
52:3a:b9:5d:93:f0:3d:5d:cc:31:b8:d6:2d:bf:c6:
d0:15:5e:f9:36:24:1b:03:52:fb:5f:2a:9c:2c:1c:
c6:44:8a:1e:75:1e:bb:56:d3:6e:83:fa:12:ee:0d:
36:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:19:EF:FF:B3:2D:F7:08:50:B2:E3:DB:31:F6:5A:90:E3:52:9B:3C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fRnv_7Mt9whQsuPbMfZakONSmzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.56.0/24
163.5.82.0/24
163.5.87.0/24
163.5.99.0/24
163.5.127.0/24
163.5.140.0/24
163.5.202.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:54:a9:88:55:c8:72:7b:12:86:0f:15:39:f6:37:31:74:dd:
96:7f:9e:ad:f0:9a:79:aa:78:9b:17:37:b2:0f:f7:87:6c:03:
3f:20:c7:a5:0e:cb:9b:9e:1b:70:a2:ed:b0:73:49:dd:87:a4:
cc:75:bf:b2:e0:47:96:02:bd:95:8c:58:b4:40:50:6d:2b:8e:
35:ae:05:d9:a6:c4:d4:c5:c5:64:3b:a2:6f:9d:89:11:75:86:
25:36:c8:c8:ad:a9:69:ef:fc:07:bb:2d:c7:e5:24:8a:21:25:
b9:a2:62:09:9e:49:8c:82:b1:39:27:d1:88:c5:d3:6c:ed:fb:
0d:85:23:5e:d4:7e:3e:d2:7d:84:bf:2d:aa:52:7f:57:88:c5:
a6:2c:93:66:0b:f4:41:0b:c0:2d:0f:d2:c1:26:b3:50:d1:8b:
c3:fc:b9:2b:8c:1d:14:72:c8:55:c2:db:89:f3:16:c3:5a:7e:
d1:e6:fe:93:e7:12:77:26:92:19:13:46:25:89:72:6c:28:b0:
a4:e5:f6:4f:c9:16:5b:c3:73:7a:43:cd:9f:e2:a8:86:10:38:
48:f0:07:21:27:78:f4:89:bc:4a:fc:db:20:47:8f:60:21:19:
c0:f4:80:61:e3:80:9b:05:cd:07:4c:bb:1f:bf:bf:b2:21:1c:
e3:25:c8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 08:03:27 2024 by rpki-client on console-fra.rpki-client.org