Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hwWGLS4L3HX3Q5wGX5NIRxlsn4w.roa
File: hwWGLS4L3HX3Q5wGX5NIRxlsn4w.roa (raw, json)
Hash identifier: KJF7ha2uYkrfjcjh8bAsr3jU71sNUxsYw3H+91heIzI=
Subject key identifier: 87:05:86:2D:2E:0B:DC:75:F7:43:9C:06:5F:93:48:47:19:6C:9F:8C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018ACD742BB7AED555F150F601CC1E08F2F7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hwWGLS4L3HX3Q5wGX5NIRxlsn4w.roa
Signing time: Mon 25 Sep 2023 17:47:37 +0000
ROA not before: Mon 25 Sep 2023 17:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 163.5.209.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Sep 2023 20:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:74:2b:b7:ae:d5:55:f1:50:f6:01:cc:1e:08:f2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 25 17:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8705862d2e0bdc75f7439c065f934847196c9f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:6a:26:43:39:7e:fd:81:f4:66:f0:4d:28:
0f:79:74:9f:72:f9:b3:c0:1f:3f:00:fa:4f:ac:22:
83:92:e1:83:2a:f1:08:e2:4c:28:35:db:41:8f:0e:
e0:de:3b:c3:f4:05:f5:d8:44:44:37:3d:7e:c6:c6:
c1:b9:a3:85:82:44:f5:df:25:a2:81:ff:0c:a2:44:
0f:48:b9:35:de:9e:12:ce:64:c0:58:6c:78:f2:ad:
68:72:6f:fe:26:f3:b6:2b:b3:31:33:80:2e:d4:41:
92:ad:5c:de:3f:c6:61:a9:15:17:16:ae:e2:d5:63:
1f:90:7e:74:8e:a4:90:41:c1:a2:06:ed:ce:7c:d4:
97:db:6d:13:13:5c:c6:33:18:ab:0e:0f:33:7e:26:
ba:67:ec:9f:62:31:c9:ed:22:9f:e2:62:12:a0:62:
3f:20:f2:69:02:68:6e:07:08:35:11:2b:79:ad:80:
d0:68:0a:a4:32:0c:3a:ea:98:2b:a1:ca:63:0f:77:
2b:e2:5e:97:86:47:a5:b7:c5:fa:a2:86:f7:fd:27:
05:f6:c8:1b:75:ae:71:04:d7:f9:39:59:93:f7:14:
0e:ff:10:7c:f1:3a:4d:ff:d6:1f:5b:f7:96:6b:a6:
4d:a5:0a:a0:8c:9e:d7:84:1c:0d:65:66:d3:b7:18:
0e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:05:86:2D:2E:0B:DC:75:F7:43:9C:06:5F:93:48:47:19:6C:9F:8C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hwWGLS4L3HX3Q5wGX5NIRxlsn4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.135.0/24
163.5.209.0/24
Signature Algorithm: sha256WithRSAEncryption
36:af:57:67:c6:d6:03:ba:11:67:36:fb:1f:33:c4:6d:10:74:
4c:07:c4:67:e5:b4:11:66:07:0a:29:80:0a:d4:d1:f3:fc:92:
d3:d3:54:60:fe:a7:d3:a7:22:03:4f:c5:63:18:d9:bb:19:2b:
83:cf:15:7e:2a:97:b2:89:68:20:90:2b:23:c9:1a:cb:d5:ea:
75:cd:2a:b1:69:4b:ee:20:26:89:b5:bb:82:c9:14:0c:37:88:
c5:c9:2a:dd:c6:97:3b:b1:d5:ab:6b:24:2a:9b:ef:77:47:88:
4a:c3:2f:a0:52:db:f6:15:7a:c0:df:a6:b5:11:7f:7a:53:19:
78:27:49:07:e0:74:9d:56:35:e1:a7:64:3c:f5:43:ae:20:b2:
53:26:4e:c1:c3:fe:b9:c3:68:cc:a0:0b:58:e9:47:6c:c0:e4:
82:6c:c4:0d:63:51:cd:aa:08:cb:90:95:77:39:24:60:08:50:
ba:3a:e3:71:8a:f4:9b:8b:03:6f:ec:71:ed:24:5b:82:06:47:
bc:f0:eb:34:b9:5d:de:68:4a:f5:31:45:3c:4f:66:9a:08:d4:
c9:3d:2e:31:9d:6d:43:aa:9f:c1:cc:7b:0b:77:e1:74:6f:8f:
28:72:d5:ed:6c:f1:23:6a:98:ae:55:db:bf:19:1f:56:7c:26:
d3:19:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:34 2024 by rpki-client on console-ams.rpki-client.org