Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lq_oYPdacwBlVgua0yaEY6ZyZwU.roa
File: lq_oYPdacwBlVgua0yaEY6ZyZwU.roa (raw, json)
Hash identifier: 1GdKLroJkHP2nOMtTA6V36ok6cjs0mpyQK0warGwHIs=
Subject key identifier: 96:AF:E8:60:F7:5A:73:00:65:56:0B:9A:D3:26:84:63:A6:72:67:05
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D9D8121E1AB5D7714D45DB447E79C04EE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lq_oYPdacwBlVgua0yaEY6ZyZwU.roa
Signing time: Mon 12 Feb 2024 13:28:22 +0000
ROA not before: Mon 12 Feb 2024 13:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59432
IP address blocks: 163.5.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 18:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:81:21:e1:ab:5d:77:14:d4:5d:b4:47:e7:9c:04:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 12 13:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96afe860f75a730065560b9ad3268463a6726705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:11:b3:5d:fb:7c:a4:fd:87:46:65:71:25:cf:
5f:40:50:87:52:4b:fe:ef:5e:a5:ae:97:d4:b5:ad:
e5:70:80:11:96:cf:80:40:64:1d:3d:fa:57:e0:34:
c3:5f:38:ec:11:d4:c1:75:76:4f:9e:45:0e:38:30:
4e:44:7b:de:4f:d8:70:6c:50:c2:9a:6b:da:bd:42:
fa:c9:73:60:c5:3a:16:8f:83:a9:e5:f5:ef:a3:4a:
4a:7f:de:b3:62:f4:29:5c:a2:d3:e1:e1:5c:c3:ea:
cf:fd:ea:f1:99:3a:94:3a:51:0c:c9:e5:43:bf:bc:
03:f1:47:f6:e7:09:59:a6:32:c8:09:15:fa:68:33:
fe:22:bf:ed:0b:00:53:c3:a0:be:9b:2a:d6:43:5d:
e4:82:f0:7d:d2:df:67:b2:1c:82:0b:c2:ff:22:ae:
c6:a7:2c:da:00:2e:fd:1d:61:04:48:20:9f:f8:00:
ec:c8:1d:42:0a:fe:c7:8c:58:9e:80:7c:4b:cd:0e:
64:03:b6:5f:fd:cf:40:c6:1c:90:b6:0c:ab:4f:62:
44:3a:f6:13:f7:9e:a7:e3:02:a8:8b:04:e1:b4:8b:
35:c5:a5:07:7d:ae:09:eb:80:9a:48:97:a2:6c:28:
ce:67:fd:82:64:3c:89:c2:e0:48:b7:f1:d5:14:02:
a5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:E8:60:F7:5A:73:00:65:56:0B:9A:D3:26:84:63:A6:72:67:05
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lq_oYPdacwBlVgua0yaEY6ZyZwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
54:dd:d9:77:f4:fc:eb:3e:56:4f:7a:5f:67:dd:e1:51:55:c9:
73:c0:05:6a:09:fd:83:46:ba:ee:93:a7:0e:87:2f:13:aa:8b:
35:69:6d:d4:9c:44:75:70:1d:5d:0a:b1:91:a0:2e:17:77:da:
68:be:85:81:16:54:e5:95:83:83:e8:75:35:6a:3e:84:25:82:
d5:22:a4:92:e2:d8:b4:24:ee:76:1e:e8:43:71:6a:1a:52:4a:
a5:f0:8d:0e:0f:72:45:cf:c7:26:37:bb:a3:87:b0:0e:97:5d:
27:c8:43:b9:eb:86:cb:85:72:5c:be:1b:22:de:0e:a0:d6:86:
60:33:ba:84:13:f8:20:fa:b8:86:06:5b:e3:3d:22:d7:a7:eb:
e1:0e:8a:58:04:6e:5a:06:ed:3c:f5:22:93:cd:d0:e3:a7:fd:
7b:62:57:f6:07:46:a5:45:8c:16:af:d5:d7:9a:ff:01:36:56:
59:fa:9e:a1:4d:14:d6:ec:12:45:1e:79:33:67:db:20:b9:18:
d8:2d:ad:21:36:e2:3f:c6:98:22:e8:e5:2f:37:d4:c5:77:94:
72:c3:ef:d5:e1:ff:f6:18:ac:cf:2e:de:d1:9a:80:0c:b5:a1:
cc:b5:38:ac:72:fa:0f:bd:c2:90:aa:47:b4:94:eb:d2:31:73:
6e:4a:2e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 22:08:37 2024 by rpki-client on console-fra.rpki-client.org