Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hBqyuCPFlDFTItqkxtJLqTlOk0c.roa
File: hBqyuCPFlDFTItqkxtJLqTlOk0c.roa (raw, json)
Hash identifier: kkymikSbSs22q0yx3z2W7y5WFeqNzyfN8fvdksRKDTs=
Subject key identifier: 84:1A:B2:B8:23:C5:94:31:53:22:DA:A4:C6:D2:4B:A9:39:4E:93:47
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193086DDB47B229153D3F42EB27E5F52B9A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hBqyuCPFlDFTItqkxtJLqTlOk0c.roa
Signing time: Thu 07 Nov 2024 21:00:37 +0000
ROA not before: Thu 07 Nov 2024 21:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 18:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:6d:db:47:b2:29:15:3d:3f:42:eb:27:e5:f5:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 7 21:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=841ab2b823c594315322daa4c6d24ba9394e9347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:6c:8d:bd:c8:0f:a1:eb:77:93:8e:19:9c:
45:93:05:1f:ee:68:a0:d8:9a:cc:90:88:3b:66:76:
61:3d:51:73:21:33:5c:d9:4e:bf:cf:30:ec:17:7c:
d9:a3:89:99:dd:e1:fb:91:d7:03:e1:27:9e:f0:5a:
4d:93:b4:76:e4:d9:32:6e:eb:68:32:8a:b8:1b:a7:
0e:43:84:bc:08:dc:7c:b7:03:dd:ea:7a:8c:55:d1:
43:4a:a4:ac:cd:51:a0:35:79:ef:93:79:dc:03:47:
fb:e8:b9:c0:cb:64:34:df:98:f9:0c:61:38:bc:86:
63:e5:1c:df:c3:8e:44:b4:43:8e:1f:4a:b4:fd:28:
5b:01:41:d5:78:3d:ad:49:1f:c7:60:95:00:31:83:
ca:03:1b:81:54:79:d3:8f:eb:5c:15:78:02:ca:00:
0f:b2:dd:e8:05:39:4b:68:35:42:1c:75:e6:c8:09:
d7:ee:2a:6f:84:9c:27:f6:aa:20:95:7f:d2:57:0a:
47:0c:21:18:47:8d:3f:f2:0e:c8:d7:6f:93:da:46:
f1:6b:08:bb:88:a7:b8:28:07:ac:ab:6b:c4:4e:c6:
6d:3f:39:4c:f5:9a:3d:da:ad:9f:f2:62:50:f5:fe:
f6:f5:bd:21:ef:89:4d:6f:12:f7:f5:87:34:4d:66:
4d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1A:B2:B8:23:C5:94:31:53:22:DA:A4:C6:D2:4B:A9:39:4E:93:47
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hBqyuCPFlDFTItqkxtJLqTlOk0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.99.0/24
163.5.142.0/23
163.5.192.0/23
163.5.213.0-163.5.214.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
04:cc:10:2f:93:cf:0b:e1:5a:05:e2:a7:ed:5b:19:24:a3:75:
3d:6c:c9:0e:dc:01:20:b7:8f:4f:e3:c1:6d:6b:ef:3d:f0:c3:
b1:72:f9:b4:81:df:36:13:7a:5e:f6:ef:92:68:11:80:55:d2:
5c:a8:7b:0c:de:67:67:0f:a3:37:4e:dc:c6:8f:c0:29:15:1c:
9d:e8:0b:a6:05:47:41:fa:65:6a:55:81:8d:17:e3:e8:2a:d0:
27:c1:2d:45:8e:73:e1:a1:e1:03:2a:4b:a5:be:74:c3:9f:29:
bc:b3:a8:90:ca:c5:92:e1:e6:04:4f:4e:df:e3:b7:4d:e3:5e:
f0:61:f5:ec:f3:01:f9:71:04:4b:79:be:cf:e3:13:d0:4d:4a:
84:5b:39:c0:59:f4:1e:cf:93:24:ed:a4:1d:21:06:ef:62:38:
85:2e:77:25:68:42:91:ff:78:ea:aa:a4:cb:c3:4d:c5:e8:8c:
8e:b6:4d:81:c7:68:8b:4a:22:63:ec:47:75:a7:4e:0c:43:98:
7e:2f:1a:60:30:0f:5c:c6:ce:d3:d3:6d:45:ee:aa:b6:a4:71:
5c:8a:1c:bc:a5:8f:22:7b:31:16:f4:6f:72:53:f2:29:04:05:
88:46:2a:30:cc:c3:41:a1:ec:ad:ca:11:9e:05:ec:9f:5c:92:
70:e8:74:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:53:16 2024 by rpki-client on console-ams.rpki-client.org