Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hLDOACK6n3rkptKF-B9ym0z4vJU.roa
File: hLDOACK6n3rkptKF-B9ym0z4vJU.roa (raw, json)
Hash identifier: n80CMbvcLvt4x2RQs8kY95gTCQdHZOY5Cn9fg9Ax7To=
Subject key identifier: 84:B0:CE:00:22:BA:9F:7A:E4:A6:D2:85:F8:1F:72:9B:4C:F8:BC:95
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42555B593CDB64DA5A469714F03A927
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hLDOACK6n3rkptKF-B9ym0z4vJU.roa
Signing time: Mon 01 Jan 2024 08:30:30 +0000
ROA not before: Mon 01 Jan 2024 08:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 163.5.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:55:b5:93:cd:b6:4d:a5:a4:69:71:4f:03:a9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84b0ce0022ba9f7ae4a6d285f81f729b4cf8bc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:cb:56:50:2f:39:31:41:d9:d0:6b:3e:e6:
89:66:ea:c8:fe:94:1f:81:96:29:c2:4b:f4:36:9d:
1d:58:bb:bc:fb:18:dc:c5:6e:98:32:c4:88:6b:07:
85:66:3f:1c:e3:81:53:ce:ed:52:c0:c3:19:bd:2d:
b2:66:0e:f0:14:e4:8c:33:9d:c7:cb:1b:40:65:0a:
a2:3d:db:dc:d0:81:b1:b9:bc:50:d9:f0:7b:e6:dc:
c2:d3:db:d8:3a:f8:6a:c2:7b:87:6a:b0:58:69:02:
4c:10:f3:a9:1c:aa:e7:d0:ec:fd:eb:8d:bb:ba:72:
e3:6e:81:00:23:d5:ea:2c:04:18:14:17:f5:10:9d:
23:4e:12:be:28:02:32:45:e6:9e:da:59:9b:45:fb:
0f:a7:e6:3c:48:8a:5e:c0:db:51:1e:d5:14:71:92:
1b:95:be:52:74:f8:f5:a4:6b:3a:38:77:ce:bc:09:
77:8d:56:a2:3d:f0:40:ac:dc:8f:5d:fc:5e:0e:8c:
4b:b1:04:5e:f9:7e:8c:66:a3:e8:ca:61:6a:83:e2:
7f:ea:5a:6c:7a:6d:75:00:55:6c:f0:e0:4a:9e:16:
de:fa:1c:9d:77:37:ee:b5:75:a5:73:4f:bc:b0:bb:
14:b3:1a:e3:fd:2f:a0:6d:9a:ce:27:4c:85:3c:f7:
38:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B0:CE:00:22:BA:9F:7A:E4:A6:D2:85:F8:1F:72:9B:4C:F8:BC:95
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hLDOACK6n3rkptKF-B9ym0z4vJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2e:7f:0e:ef:f8:3c:d9:97:36:c0:7c:ce:48:7d:40:72:3f:
64:41:c5:cc:44:97:f8:d2:4f:10:81:06:ce:f6:5b:b9:a5:b9:
e7:17:c1:75:4c:51:89:b7:f9:ca:4b:26:ae:00:14:2e:df:6a:
05:0a:e7:e5:87:7a:67:bc:fc:31:f7:4a:30:6d:ed:32:e1:fe:
4f:48:6d:26:1c:a4:d2:b8:70:b3:09:d2:2e:89:50:bc:cd:b2:
38:f0:85:34:29:45:88:a7:1f:8a:7a:4e:26:67:93:f9:1d:92:
8c:80:8b:a2:d4:4e:f1:1b:4e:f5:5b:4e:9e:8e:4e:64:2f:76:
19:b8:21:fa:07:30:be:5c:4e:a3:02:be:3b:c6:11:84:8c:ca:
1c:ce:84:8c:98:99:49:08:e4:d2:4d:03:5e:c8:e7:7a:02:5d:
89:8b:91:86:3e:81:55:b0:79:8f:43:f1:b8:45:ae:39:18:fc:
29:09:e0:6f:f0:17:aa:15:e4:11:31:e7:96:ec:a4:2d:2e:27:
41:6e:52:1c:9c:6f:bb:7d:95:84:c8:78:26:a9:68:5e:25:3d:
50:c1:3f:b4:0c:dd:21:cd:5e:7b:63:e3:55:fe:0c:37:ab:a5:
41:fe:f4:ed:57:70:cd:fd:bf:c7:d9:2e:86:b2:93:ea:f0:43:
33:67:31:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJVW1k822TaWkaXFPA6knMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwMTAxMDgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NGIwY2UwMDIyYmE5ZjdhZTRhNmQyODVmODFmNzI5YjRjZjhiYzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgbLVlAvOTFB2dBrPuaJZurI/pQf
gZYpwkv0Np0dWLu8+xjcxW6YMsSIaweFZj8c44FTzu1SwMMZvS2yZg7wFOSMM53H
yxtAZQqiPdvc0IGxubxQ2fB75tzC09vYOvhqwnuHarBYaQJMEPOpHKrn0Oz96427
unLjboEAI9XqLAQYFBf1EJ0jThK+KAIyReae2lmbRfsPp+Y8SIpewNtRHtUUcZIb
lb5SdPj1pGs6OHfOvAl3jVaiPfBArNyPXfxeDoxLsQRe+X6MZqPoymFqg+J/6lps
em11AFVs8OBKnhbe+hyddzfutXWlc0+8sLsUsxrj/S+gbZrOJ0yFPPc4bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFISwzgAiup965KbShfgfcptM+LyVMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvaExET0FDSzZuM3JrcHRLRi1COXltMHo0dkpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowW2MA0G
CSqGSIb3DQEBCwUAA4IBAQAeLn8O7/g82Zc2wHzOSH1Acj9kQcXMRJf40k8QgQbO
9lu5pbnnF8F1TFGJt/nKSyauABQu32oFCuflh3pnvPwx90owbe0y4f5PSG0mHKTS
uHCzCdIuiVC8zbI48IU0KUWIpx+Kek4mZ5P5HZKMgIui1E7xG071W06ejk5kL3YZ
uCH6BzC+XE6jAr47xhGEjMoczoSMmJlJCOTSTQNeyOd6Al2Ji5GGPoFVsHmPQ/G4
Ra45GPwpCeBv8BeqFeQRMeeW7KQtLidBblIcnG+7fZWEyHgmqWheJT1QwT+0DN0h
zV57Y+NV/gw3q6VB/vTtV3DN/b/H2S6GspPq8EMzZzGo
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:24 2025 by rpki-client