Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fbzfb6SwkuU8CEM3ebYmCrg7SYA.roa
File: fbzfb6SwkuU8CEM3ebYmCrg7SYA.roa (raw, json)
Hash identifier: swuny0WPfmr3ffultfoVnj7dkKEmdGGBmJw6pyxD9Sg=
Subject key identifier: 7D:BC:DF:6F:A4:B0:92:E5:3C:08:43:37:79:B6:26:0A:B8:3B:49:80
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CDFF49E657BA7343D39C6EC4193BF67CC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fbzfb6SwkuU8CEM3ebYmCrg7SYA.roa
Signing time: Sat 06 Jan 2024 18:06:39 +0000
ROA not before: Sat 06 Jan 2024 18:06:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 163.5.199.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 09:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:df:f4:9e:65:7b:a7:34:3d:39:c6:ec:41:93:bf:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 6 18:06:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbcdf6fa4b092e53c08433779b6260ab83b4980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:62:af:d9:df:4a:b3:9a:bb:00:89:67:95:
f6:65:3a:c8:d5:7f:eb:a4:91:af:77:99:e5:9f:77:
27:57:6e:0a:23:b6:59:37:8b:35:85:bc:5f:c6:d1:
0c:c5:f2:ab:a5:4d:04:f0:20:58:3a:17:67:b3:80:
7c:57:99:3d:d1:b3:fb:6c:e2:c3:7d:79:a7:79:19:
da:a1:95:8b:32:6b:a3:4f:52:0d:12:82:78:da:c8:
80:e9:80:ba:02:3d:14:81:5c:0f:20:ce:3b:18:8e:
b3:9c:26:49:fe:09:5f:20:b4:a0:63:66:ae:e8:7a:
f2:c8:b4:68:00:c0:8d:cf:24:2b:e3:0e:8a:76:3f:
75:a2:3d:d9:09:5f:df:47:a1:d7:b8:33:95:bd:75:
6d:56:ae:22:e2:b8:48:83:9e:03:33:99:b3:92:3e:
d5:8d:65:0f:5c:82:5e:c5:f4:59:77:46:b4:1f:5a:
ce:41:bb:41:fb:a7:49:7d:26:88:a4:11:00:20:69:
33:ef:eb:58:ca:c3:33:5d:7b:e6:72:0b:ff:6f:91:
45:eb:79:0a:9a:c3:03:a0:1c:c6:6f:10:dc:b4:41:
43:8f:9d:47:56:9c:48:4d:86:0f:bb:1d:ff:46:1b:
dd:f0:8c:38:41:6f:56:10:88:e8:fb:d2:8b:5b:5b:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:DF:6F:A4:B0:92:E5:3C:08:43:37:79:B6:26:0A:B8:3B:49:80
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fbzfb6SwkuU8CEM3ebYmCrg7SYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.61.0/24
163.5.145.0/24
163.5.199.0/24
163.5.202.0/24
163.5.212.0/24
163.5.219.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9e:88:fb:7b:c6:01:b8:dc:2d:d4:07:cd:df:49:48:cd:e9:
db:50:0d:98:6b:3c:c8:a5:55:ed:48:5f:d4:4a:d5:a7:82:e5:
42:82:e6:85:5e:ec:26:b0:5b:40:b9:0c:d2:80:23:e2:65:0d:
8f:a5:11:fb:37:da:77:f3:21:1c:21:a1:f1:12:dd:8a:a9:89:
a5:ea:c0:95:fc:55:ca:e9:2d:9f:96:87:d6:42:55:7e:88:85:
b6:e8:ad:a7:37:14:49:5c:ee:10:26:52:10:3a:f9:00:b3:af:
38:eb:c2:8c:7b:9a:67:e6:d0:fd:bc:5b:fc:4e:7e:1c:b5:c1:
59:0d:27:b1:47:c1:f8:72:b8:6d:08:f8:cc:8d:41:b3:0c:21:
de:fb:41:51:54:90:d7:f5:db:d1:88:6b:bd:c8:6e:9c:04:9a:
be:b6:f3:69:b1:e5:3c:a8:b6:ec:d6:bc:05:f4:46:3b:9b:18:
61:da:8d:33:4a:70:93:4b:0e:72:5a:1e:82:c5:5c:ec:26:33:
f7:b1:d1:ff:1d:3c:36:3f:20:aa:17:56:09:a8:5a:d3:06:0a:
37:d0:98:f0:35:94:aa:08:75:0a:66:59:7f:e0:b6:5c:70:d2:
48:89:5f:b2:31:bc:9d:dd:fa:20:f1:ff:92:63:50:2f:b0:d3:
7a:b4:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 8 12:45:25 2024 by rpki-client on console-fra.rpki-client.org