Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/frbwIb1F3iIt1C4Sot4No16jHig.roa
File: frbwIb1F3iIt1C4Sot4No16jHig.roa (raw, json)
Hash identifier: OxA+FvEfusqwCFUEhtJAB6UboaC2pDYCR4t7x8Yrspg=
Subject key identifier: 7E:B6:F0:21:BD:45:DE:22:2D:D4:2E:12:A2:DE:0D:A3:5E:A3:1E:28
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D8F0C79C32C6243F54BE6DE3EB7805F44
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/frbwIb1F3iIt1C4Sot4No16jHig.roa
Signing time: Fri 09 Feb 2024 18:06:15 +0000
ROA not before: Fri 09 Feb 2024 18:06:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 163.5.28.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Feb 2024 15:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:0c:79:c3:2c:62:43:f5:4b:e6:de:3e:b7:80:5f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 9 18:06:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eb6f021bd45de222dd42e12a2de0da35ea31e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:50:90:e7:ce:e9:34:07:69:9d:0b:43:a4:d5:
6e:33:f7:f8:cc:af:06:dd:1a:04:9b:24:8f:9f:5c:
ae:81:3c:51:25:8f:61:3c:b5:4c:33:cb:a7:a9:d1:
f9:13:3e:65:5c:6d:3d:ea:9b:4d:ac:2d:63:94:51:
94:f9:e3:54:e8:a3:6e:7f:22:94:76:e5:a4:37:e4:
bd:9f:13:d4:ab:ed:c5:6d:41:16:64:e8:e7:44:86:
7e:1f:b7:9f:c6:94:31:08:ee:12:ff:d6:28:56:85:
9c:08:c3:7a:06:bd:4d:20:c7:7c:7d:b9:8a:70:59:
5d:36:88:da:10:20:c5:9e:2f:76:3e:db:01:39:cc:
89:66:9e:ab:fb:46:c2:8d:60:52:66:f1:22:00:a5:
a4:ec:c0:3a:b8:af:48:1f:c5:dc:46:35:ed:53:7f:
31:7d:bd:f1:51:93:44:7d:97:dc:d0:15:00:81:5c:
75:87:d9:f3:24:c9:ff:db:76:6e:53:86:d3:bf:7c:
ce:03:ae:91:c6:e5:c5:26:22:a4:26:e5:e5:9b:d9:
b7:a0:7f:31:ec:30:fe:bf:d0:f7:d6:92:3d:a5:10:
89:49:58:29:53:5c:e6:96:75:87:a6:10:a2:1e:c7:
b3:db:c1:78:57:5e:03:73:23:03:73:e5:c1:ae:32:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B6:F0:21:BD:45:DE:22:2D:D4:2E:12:A2:DE:0D:A3:5E:A3:1E:28
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/frbwIb1F3iIt1C4Sot4No16jHig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.28.0/24
163.5.180.0/24
163.5.183.0/24
Signature Algorithm: sha256WithRSAEncryption
54:8d:39:d5:ea:71:c7:84:6f:06:88:25:0a:c7:97:3d:64:02:
42:c0:51:3d:6d:92:c3:82:80:6e:29:cd:d1:cb:1f:8e:a5:76:
2d:72:d9:8b:b5:21:f1:65:a3:1e:20:10:37:f6:0a:e0:35:2a:
8e:f0:13:99:a5:ae:07:df:92:95:b6:56:50:83:2c:be:50:06:
cc:4e:01:4c:3c:de:9a:2b:a9:3d:2d:64:cf:50:5f:2f:e2:36:
8f:41:49:8d:08:45:46:f8:fa:88:52:09:72:1a:38:a1:f7:a4:
44:bf:5c:42:10:91:a2:b5:8b:16:da:04:41:7b:3f:0c:97:29:
4f:ea:ce:87:02:6e:ae:da:86:95:d8:85:33:3f:bb:6c:da:56:
98:3f:0e:26:46:00:99:09:58:a3:ba:6f:42:57:15:53:23:a3:
96:b3:f7:51:4b:5b:1d:ec:bd:c9:58:0c:97:85:38:66:6a:37:
e9:57:99:67:95:09:56:97:8e:1d:4a:d8:5f:4e:d4:c8:b7:4d:
d0:92:72:8a:4f:98:ba:76:d6:d9:20:12:65:4b:83:78:fe:35:
dc:ae:70:ac:b4:a7:45:b0:24:99:1d:61:97:2c:8b:cc:cd:13:
57:db:15:50:8d:ad:1d:84:2e:0d:2d:7f:dc:c1:fc:9c:3a:b2:
ca:a8:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 11 18:54:00 2024 by rpki-client on console-ams.rpki-client.org