Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kzjySjJ6Iy6sJ-T4F8UKS92ziDs.roa
File: kzjySjJ6Iy6sJ-T4F8UKS92ziDs.roa (raw, json)
Hash identifier: TC0/uoaTBR4Wef4jwu78HOFnktTA7s2R02e04TpGCQ0=
Subject key identifier: 93:38:F2:4A:32:7A:23:2E:AC:27:E4:F8:17:C5:0A:4B:DD:B3:88:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FB9442942A2D9400AAB85C76FC2EEE745
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kzjySjJ6Iy6sJ-T4F8UKS92ziDs.roa
Signing time: Mon 27 May 2024 08:56:42 +0000
ROA not before: Mon 27 May 2024 08:56:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 163.5.134.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 18:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:44:29:42:a2:d9:40:0a:ab:85:c7:6f:c2:ee:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 27 08:56:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9338f24a327a232eac27e4f817c50a4bddb3883b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:28:7d:0d:c9:03:30:70:d8:35:a0:32:a7:
95:f4:ab:79:30:e4:7b:9f:af:94:1f:51:00:05:ab:
47:0e:26:4e:44:bf:cd:a8:39:f3:e7:e8:54:91:99:
5a:32:b7:d5:61:58:8e:a4:e3:93:a0:b8:2c:c7:3d:
63:ef:4d:e5:37:f5:b3:9b:6c:7c:f8:cc:10:29:44:
fb:77:81:c2:7c:71:f4:23:0e:4b:73:be:6e:48:54:
bb:44:a5:b9:85:7d:98:c9:38:39:92:50:73:4a:29:
ca:86:f2:70:18:21:7b:26:b0:7a:39:1e:24:ff:d5:
a1:b7:d4:59:6e:d8:89:06:28:71:ce:b1:5c:d9:d1:
0a:fb:d2:e9:42:e9:ca:f5:98:85:de:c9:08:40:93:
96:e1:c2:ab:1b:ef:7b:06:8a:03:35:f5:fb:6b:29:
6d:23:19:18:f0:e3:88:fb:56:70:a7:02:25:af:19:
db:96:b7:d7:1d:b2:96:2f:86:e6:4c:80:80:22:19:
14:10:df:6b:02:5e:19:b9:e7:ff:7d:d3:dc:f3:f8:
35:05:56:d7:75:6a:60:52:b6:2a:5e:e7:37:6c:7f:
18:9d:67:24:12:8c:7c:d1:be:d9:6c:af:e5:2f:6f:
55:7c:e9:d9:0c:a2:b7:cb:32:91:78:86:c5:4b:fe:
07:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:38:F2:4A:32:7A:23:2E:AC:27:E4:F8:17:C5:0A:4B:DD:B3:88:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kzjySjJ6Iy6sJ-T4F8UKS92ziDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.134.0/24
163.5.163.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e0:d2:02:ea:ba:b2:dd:60:ff:c5:b0:cc:0c:e7:07:97:c4:
3e:18:7a:2c:d0:5b:89:7c:dd:c6:b5:fe:72:0d:3f:14:ec:53:
64:b8:fb:6c:32:e2:14:c0:ab:fd:a6:6c:31:0f:09:7b:04:dd:
fc:f1:1e:fc:38:41:0c:33:13:c8:4f:06:4a:0f:50:c9:42:96:
dd:a5:d2:82:71:ab:39:04:3c:33:2a:e8:d3:6b:3e:3a:de:34:
e8:a6:16:a6:5b:35:bd:78:d2:a0:85:de:c5:60:f5:2f:c5:42:
74:1b:6f:8b:1a:06:2f:9c:ba:f3:04:fe:70:7a:c4:be:01:19:
c1:d8:51:6f:fe:08:66:56:6b:ef:79:b9:45:55:6b:4c:a7:4b:
bd:1a:c9:02:fa:ba:2e:f6:3d:b9:fd:5d:a1:5f:1e:28:2e:90:
11:16:42:76:47:2c:4d:55:d6:f6:3a:5e:6f:2d:95:58:af:b6:
69:53:09:5c:12:62:ce:45:9f:38:7a:11:1a:7c:b5:0d:4f:b1:
25:a0:c8:b4:d6:1a:e6:ab:70:91:a1:87:ca:21:d0:01:1d:91:
2f:57:5b:b7:a3:1c:6c:b2:6e:db:ff:5c:1a:0e:ba:a3:65:01:
5e:af:92:a9:8a:67:d2:3e:85:40:2c:6b:7e:d5:f7:75:ce:1d:
db:34:7b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 21:13:36 2024 by rpki-client on console-ams.rpki-client.org