Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gZsy_UHWDV3FXBsrZC2CsZdZUGk.roa
File: gZsy_UHWDV3FXBsrZC2CsZdZUGk.roa (raw, json)
Hash identifier: HiBDIkAvUBlxKFQhkwxguMVYOh8TGQf6T7VxeMe8Hfo=
Subject key identifier: 81:9B:32:FD:41:D6:0D:5D:C5:5C:1B:2B:64:2D:82:B1:97:59:50:69
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193F98F04DC2DFE87E1B580BFEBDCF1C64B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gZsy_UHWDV3FXBsrZC2CsZdZUGk.roa
Signing time: Tue 24 Dec 2024 16:45:19 +0000
ROA not before: Tue 24 Dec 2024 16:45:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197537
IP address blocks: 163.5.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f9:8f:04:dc:2d:fe:87:e1:b5:80:bf:eb:dc:f1:c6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 24 16:45:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=819b32fd41d60d5dc55c1b2b642d82b197595069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:2b:58:c1:57:03:dc:f4:71:7b:a2:fa:7d:
d3:c5:c1:a0:b2:b9:b0:91:97:56:59:be:da:77:b8:
5c:c5:21:d5:ed:da:4f:3c:28:bf:62:0a:d7:e7:34:
d5:e5:ef:d5:f0:bb:58:d8:f7:49:d2:d4:8f:39:e8:
fe:21:bb:63:86:81:dd:cc:15:4c:f1:2b:5b:18:cd:
27:5a:81:e7:79:cb:e5:f8:52:38:18:d7:a8:33:5b:
dc:a6:44:99:e3:ca:db:1d:79:2a:cb:ac:86:1a:f7:
b5:11:d6:08:df:f0:be:5e:e5:88:71:d8:05:82:43:
03:86:3f:5f:8a:1a:5a:fe:16:0b:25:53:49:8c:e6:
20:8b:e9:87:4a:bf:cf:33:b3:db:5d:21:42:30:bd:
96:28:c7:77:c8:3c:e2:1b:47:ef:1d:34:d6:7f:f3:
f9:f0:d1:8e:79:dc:07:86:60:49:fa:1c:08:cd:bd:
af:7d:49:02:f1:ee:05:4e:e8:51:7f:fb:0f:8c:04:
a9:38:a7:4d:9d:f7:3c:d8:d2:bb:d5:f4:91:61:76:
69:63:e0:38:18:87:62:04:ba:e2:81:9d:65:f4:9f:
73:9f:a9:bb:79:a8:ea:1e:b7:c7:c3:99:4b:bb:5d:
40:b4:5e:85:ee:b8:8a:c4:07:1a:19:83:c7:84:f2:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9B:32:FD:41:D6:0D:5D:C5:5C:1B:2B:64:2D:82:B1:97:59:50:69
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gZsy_UHWDV3FXBsrZC2CsZdZUGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e6:10:c0:ed:51:b3:da:f3:c3:5f:ab:b0:fb:d2:80:53:ed:
27:0d:7c:fe:4f:77:a5:bf:63:3d:23:92:26:ef:ea:db:4d:08:
b4:cc:2e:1f:af:51:c9:76:45:bf:84:78:c2:a7:f9:18:d1:e0:
6f:0d:78:5f:64:d6:95:bd:c1:d6:95:2f:fb:be:83:bb:19:62:
de:94:a6:ec:17:0d:71:e3:e1:fb:68:df:06:69:bb:14:63:fb:
e4:0a:52:7e:19:4f:a2:7a:c6:85:cc:69:8f:f1:d5:ec:23:94:
ba:fc:8e:73:dc:26:93:35:be:be:11:78:71:3e:78:49:a5:b7:
c7:f6:3b:2e:08:90:79:01:87:cb:20:05:c6:81:fb:86:aa:aa:
67:e7:8f:f2:c6:c1:62:ae:5e:a0:43:14:ec:31:c6:e5:a1:06:
72:65:e5:ae:e9:24:eb:c8:79:eb:52:73:59:8b:cb:68:22:08:
3f:38:bf:85:fd:d5:52:8f:93:e1:08:58:72:a5:8a:7a:87:3d:
bf:fe:be:f7:e0:f0:12:2a:eb:07:99:20:54:e6:ba:f5:2e:1a:
96:c8:9b:2d:19:37:91:ec:92:85:40:01:cb:9d:f6:cc:a2:56:
c7:77:3b:0c:25:a2:77:69:57:d6:5b:45:1f:a0:96:2b:bf:78:
f0:5b:e7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:29:39 2025 by rpki-client