Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gp9gXVtQS-2AagtQb64KYTF8ZVc.roa
File: gp9gXVtQS-2AagtQb64KYTF8ZVc.roa (raw, json)
Hash identifier: ZeH1t1+D1ro8jGGWaBPBtU26ydsjTBy1gelB1IYuDa8=
Subject key identifier: 82:9F:60:5D:5B:50:4B:ED:80:6A:0B:50:6F:AE:0A:61:31:7C:65:57
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191CCC0F39E0EEDCE24023CEAD86F4F290E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gp9gXVtQS-2AagtQb64KYTF8ZVc.roa
Signing time: Sat 07 Sep 2024 13:51:22 +0000
ROA not before: Sat 07 Sep 2024 13:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 163.5.51.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cc:c0:f3:9e:0e:ed:ce:24:02:3c:ea:d8:6f:4f:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 7 13:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=829f605d5b504bed806a0b506fae0a61317c6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:7d:ee:61:3d:b4:d6:95:f0:c4:68:e1:b0:
c9:d7:f4:0c:dd:5e:da:8a:23:6e:91:f1:65:fc:67:
8c:53:b4:b6:a1:70:09:fb:f7:c5:b1:ad:0d:e7:44:
3a:ad:c6:3e:8e:e6:67:e4:55:35:49:25:b3:66:ba:
2e:1e:64:66:da:97:13:f2:7e:a6:35:48:73:24:78:
fc:60:a4:60:e7:91:85:f9:bf:cd:47:10:3a:e6:8b:
92:71:24:bd:6e:8f:8e:38:4c:1a:dd:c9:1b:81:e8:
27:10:14:d0:01:be:fb:09:20:dc:a9:0b:26:a5:97:
8b:de:47:4d:2a:af:83:c9:79:7d:87:b6:03:c2:e8:
0a:58:76:65:5f:9a:f9:ea:50:df:3c:83:c9:cd:7c:
aa:4f:28:8d:df:2f:88:08:8a:52:31:e8:fd:99:3c:
02:8c:46:df:95:15:bf:d3:76:e3:52:9e:7c:c6:fa:
1e:b2:94:2c:5b:fb:ae:59:1a:c1:6d:51:01:3b:02:
2f:a2:f8:3b:37:c1:ac:d4:20:24:07:9a:16:1b:83:
58:26:5d:6e:d2:fd:27:6c:b4:26:5c:e2:65:d8:22:
46:99:68:31:b2:b8:03:80:7e:65:14:c5:c1:d5:2a:
ba:99:6c:9a:f5:d5:8b:d2:34:4f:5a:e3:62:8c:75:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9F:60:5D:5B:50:4B:ED:80:6A:0B:50:6F:AE:0A:61:31:7C:65:57
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gp9gXVtQS-2AagtQb64KYTF8ZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.51.0/24
163.5.134.0/24
Signature Algorithm: sha256WithRSAEncryption
50:da:8a:70:b4:71:54:0d:06:e2:79:30:b9:a8:a2:b1:42:f2:
0a:8b:15:ba:b1:80:a0:af:99:87:e4:56:2d:05:8a:2b:ab:de:
ec:44:4e:f3:ef:9b:f6:80:f6:d9:5a:f7:16:03:09:32:03:d0:
64:af:84:55:ec:ec:fc:75:73:fb:95:35:3a:03:6a:1d:42:bc:
97:f5:d5:c7:bc:cb:05:a2:a2:c3:6d:36:0b:e6:38:b0:a5:a0:
03:d5:79:11:20:01:5c:8f:be:05:77:32:37:57:8d:a6:9f:d7:
7c:8d:2f:83:87:fe:02:7e:07:17:0f:67:58:00:22:27:86:be:
a3:40:8b:e7:c4:45:7f:09:3b:b0:c9:9e:b5:34:7b:96:ab:02:
ff:03:ce:97:e3:6f:6c:aa:34:ca:e7:06:1c:ee:36:a0:8e:04:
dc:7a:27:e8:33:b7:73:12:c3:ea:7c:60:43:4c:cd:d2:6c:bd:
ba:60:43:45:0e:f7:9d:da:2f:03:65:76:b8:07:05:f0:d2:30:
84:ff:4e:19:71:93:1e:dc:47:a9:67:80:9f:c1:5d:e8:1d:ab:
90:d8:48:07:ec:15:1a:f1:20:ef:46:67:38:02:bb:f0:93:52:
99:22:62:df:0b:fe:b1:59:04:08:03:ea:69:8e:ad:3a:eb:e7:
26:c6:35:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHMwPOeDu3OJAI86thvTykOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwOTA3MTM1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjlmNjA1ZDViNTA0YmVkODA2YTBiNTA2ZmFlMGE2MTMxN2M2NTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswp97mE9tNaV8MRo4bDJ1/QM3V7a
iiNukfFl/GeMU7S2oXAJ+/fFsa0N50Q6rcY+juZn5FU1SSWzZrouHmRm2pcT8n6m
NUhzJHj8YKRg55GF+b/NRxA65ouScSS9bo+OOEwa3ckbgegnEBTQAb77CSDcqQsm
pZeL3kdNKq+DyXl9h7YDwugKWHZlX5r56lDfPIPJzXyqTyiN3y+ICIpSMej9mTwC
jEbflRW/03bjUp58xvoespQsW/uuWRrBbVEBOwIvovg7N8Gs1CAkB5oWG4NYJl1u
0v0nbLQmXOJl2CJGmWgxsrgDgH5lFMXB1Sq6mWya9dWL0jRPWuNijHW7xwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIKfYF1bUEvtgGoLUG+uCmExfGVXMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZ3A5Z1hWdFFTLTJBYWd0UWI2NEtZVEY4WlZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowUzAwQA
owWGMA0GCSqGSIb3DQEBCwUAA4IBAQBQ2opwtHFUDQbieTC5qKKxQvIKixW6sYCg
r5mH5FYtBYorq97sRE7z75v2gPbZWvcWAwkyA9Bkr4RV7Oz8dXP7lTU6A2odQryX
9dXHvMsFoqLDbTYL5jiwpaAD1XkRIAFcj74FdzI3V42mn9d8jS+Dh/4CfgcXD2dY
ACInhr6jQIvnxEV/CTuwyZ61NHuWqwL/A86X429sqjTK5wYc7jagjgTceifoM7dz
EsPqfGBDTM3SbL26YENFDved2i8DZXa4BwXw0jCE/04ZcZMe3EepZ4CfwV3oHauQ
2EgH7BUa8SDvRmc4Arvwk1KZImLfC/6xWQQIA+ppjq066+cmxjVH
-----END CERTIFICATE-----
Generated at Fri Sep 13 14:17:53 2024 by rpki-client on console-fra.rpki-client.org