Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l3AJqbvmNThMRVMQXNDHoYCgC9k.roa
File: l3AJqbvmNThMRVMQXNDHoYCgC9k.roa (raw, json)
Hash identifier: 49pP6wsPKVWSyK4PpFboZCznmobWDqkwdQisWqujrTQ=
Subject key identifier: 97:70:09:A9:BB:E6:35:38:4C:45:53:10:5C:D0:C7:A1:80:A0:0B:D9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255117C7B817447425CC6C103055BF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l3AJqbvmNThMRVMQXNDHoYCgC9k.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14315
IP address blocks: 163.5.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 16:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:51:17:c7:b8:17:44:74:25:cc:6c:10:30:55:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=977009a9bbe635384c4553105cd0c7a180a00bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:ac:37:78:97:cd:9f:d7:31:80:0c:20:11:
6d:30:cf:78:75:5d:75:a0:71:f0:42:c5:ee:d7:59:
1b:dc:3f:a2:52:cc:f5:ea:27:48:8e:c9:6f:ba:26:
1c:5b:c3:1c:f2:fe:f4:20:90:03:f9:3a:68:ff:09:
39:1e:72:cc:2c:d2:f9:c5:4b:20:88:14:f4:4c:c8:
92:26:05:cb:f0:75:4d:3c:77:8f:64:43:76:ec:c8:
f2:8c:2e:24:07:8f:20:07:f6:d3:80:45:7c:8d:f8:
11:d3:f6:4e:59:1b:81:9a:8a:af:12:8f:61:ce:5f:
48:b7:8c:d5:f4:dd:23:17:a8:f5:ac:22:2e:40:d6:
f2:dc:1c:60:0f:78:e9:7d:1d:a1:27:0c:d7:c0:4d:
ce:fb:42:c9:67:d9:e5:73:76:73:0b:cf:bf:4c:b3:
ab:a4:e7:78:52:fb:f0:fb:86:43:97:c4:be:ef:b0:
c3:46:ab:c8:4c:4e:25:f1:c6:38:3b:9e:fb:87:b3:
6e:ad:bc:33:a8:d3:82:a5:2c:0d:2e:5a:5c:12:59:
31:e2:17:de:3f:ed:95:ba:09:eb:10:d7:7e:b1:6e:
4c:e1:3a:1a:dc:bb:11:53:b5:a8:37:92:95:6f:06:
e6:90:bf:7d:30:e8:25:40:fd:d5:5d:51:33:10:aa:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:70:09:A9:BB:E6:35:38:4C:45:53:10:5C:D0:C7:A1:80:A0:0B:D9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l3AJqbvmNThMRVMQXNDHoYCgC9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.162.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2b:a2:e5:dd:ba:ec:ea:6f:6e:0a:80:02:79:8c:aa:e5:e3:
ba:13:b8:c5:4e:b1:a1:b3:62:d9:73:f9:b8:e8:b5:2a:5e:2a:
53:6e:68:e7:5f:e3:37:32:43:71:92:82:42:5f:a2:b7:db:80:
06:44:f5:f7:dc:41:1b:c5:07:52:20:bb:13:00:07:63:3c:2a:
59:6f:1c:ac:e2:dd:02:41:88:c9:68:7d:8d:7b:07:46:62:40:
d6:1e:58:65:bd:a8:79:fa:ff:54:4c:05:9b:04:67:ff:d6:ff:
a7:99:c3:03:ba:5e:d3:21:db:77:70:8b:c2:40:27:17:ed:ff:
ca:95:e2:cc:ce:38:24:39:b7:12:f0:43:2d:a6:84:65:da:f2:
f3:98:bf:af:de:42:d4:e2:c3:69:e9:b3:cc:de:b5:93:8b:a8:
b0:ba:a5:3c:fe:56:f0:97:63:b8:4a:1d:6c:1b:1c:a9:b8:14:
7c:61:16:7a:b1:b3:3b:ad:03:6d:e3:ce:e4:fc:c9:13:f0:4c:
cd:5e:75:24:1b:6d:25:78:ef:34:0e:61:53:d1:aa:5a:99:4f:
79:ee:23:f8:98:d9:dd:30:e5:ba:e6:ef:3a:d5:4f:89:a0:d3:
91:bb:d9:0a:27:38:83:d4:cd:0e:da:a3:12:47:44:e9:e6:fa:
3b:fe:c9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 19:02:01 2024 by rpki-client on console-fra.rpki-client.org