Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/imQRqJmh07rasEgm6s3syxwnFa8.roa
File: imQRqJmh07rasEgm6s3syxwnFa8.roa (raw, json)
Hash identifier: tvi9HORGAKmpkiihwggqErT/uE4KuJe7iH4kIMS/yjk=
Subject key identifier: 8A:64:11:A8:99:A1:D3:BA:DA:B0:48:26:EA:CD:EC:CB:1C:27:15:AF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F355029DE2BA90BBAA4EFA899DEC68FBA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/imQRqJmh07rasEgm6s3syxwnFa8.roa
Signing time: Wed 01 May 2024 17:59:56 +0000
ROA not before: Wed 01 May 2024 17:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49434
IP address blocks: 163.5.73.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jul 2024 13:19:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:50:29:de:2b:a9:0b:ba:a4:ef:a8:99:de:c6:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 1 17:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a6411a899a1d3badab04826eacdeccb1c2715af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4c:47:fa:fe:9e:ae:88:ff:d5:f8:b3:b5:5d:
04:ac:30:e6:10:98:80:ad:64:49:3c:8f:d0:1e:04:
b3:48:97:f2:88:54:14:8f:0c:85:6c:59:6b:5b:78:
46:38:6a:e3:04:6d:1c:8e:59:4d:e7:e4:43:7a:f0:
d0:64:0d:a1:c2:74:03:0e:c1:82:59:b7:e3:a2:02:
a3:55:5c:75:05:08:33:bf:81:fa:14:ae:25:79:8c:
c4:67:28:4f:bb:6e:1e:f8:5a:25:81:7b:65:8c:8b:
50:8c:51:e9:c1:4b:66:14:fe:5a:88:1a:ae:47:94:
11:77:c1:d1:16:81:c2:d7:f8:7b:ca:e0:7a:00:92:
14:56:85:c5:9f:02:e7:6a:d6:f0:b3:96:6f:2b:61:
51:d4:92:cb:9a:d8:e6:e7:6c:1d:c9:b9:67:d2:bb:
55:21:cd:97:6b:d9:57:5b:63:61:a7:84:b6:cb:93:
0d:e5:9e:79:89:92:18:41:6b:e6:2d:cd:36:d1:22:
17:e1:ca:53:66:e2:cd:78:e6:1d:17:7d:73:57:f6:
ec:69:b9:bb:7b:37:28:a8:9f:9e:13:67:5b:f1:e9:
2f:c0:34:45:cd:76:30:8e:9a:bf:4e:c4:5f:e4:98:
e7:27:57:d9:92:cf:a1:ea:36:96:f1:b7:52:b8:1c:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:64:11:A8:99:A1:D3:BA:DA:B0:48:26:EA:CD:EC:CB:1C:27:15:AF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/imQRqJmh07rasEgm6s3syxwnFa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.73.0/24
163.5.233.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e7:73:84:55:46:19:50:d4:0a:7a:0d:b1:b8:ff:ba:35:ae:
8c:0c:1f:74:51:65:2f:58:da:4a:ce:0b:e0:82:6a:b7:82:6a:
e6:28:8a:55:76:53:f1:ab:32:d2:86:21:50:d2:26:86:8a:bb:
d9:1b:7c:8e:e5:60:5b:52:1d:37:6a:c0:9a:d9:bf:ca:22:0e:
02:14:b4:1d:3c:94:3d:c9:60:ed:8b:fc:bd:4b:e8:9b:1f:e5:
21:17:96:1a:34:36:cb:5d:b1:4b:af:00:41:a6:b9:e3:38:7a:
46:f6:05:31:c8:84:2f:5d:a6:29:0a:9f:fb:43:ea:28:67:ce:
6c:c3:d0:a2:a3:b7:43:e5:09:52:d1:d4:cf:dc:e0:05:d1:58:
cc:68:7e:5e:8f:23:b8:1a:5d:85:80:c9:30:77:8f:46:8b:75:
51:53:64:25:63:57:ce:f1:69:de:c3:f2:bc:f5:1c:b5:d0:d1:
e9:8e:65:00:c6:a3:bd:4e:d6:fd:e9:a4:1e:f2:7e:83:7d:94:
a2:33:bf:e1:30:4c:66:99:0d:9b:b7:b1:d5:92:f9:a6:39:cb:
b5:8e:27:6b:36:e7:d4:40:7f:0b:9e:c1:d3:01:b0:6c:7c:e0:
8a:a8:1f:33:3c:3f:6e:7a:26:3b:95:7e:81:8d:48:17:cd:95:
51:63:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 15:14:03 2024 by rpki-client on console-fra.rpki-client.org