Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/m793yy5fITcV7ckIlQuXGyW6Xgg.roa
File: m793yy5fITcV7ckIlQuXGyW6Xgg.roa (raw, json)
Hash identifier: L21b4RpZKgfvsjnBlrFG1BOKx79ZRh1jf9a4DW29pP4=
Subject key identifier: 9B:BF:77:CB:2E:5F:21:37:15:ED:C9:08:95:0B:97:1B:25:BA:5E:08
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01929AFBA9028BDCED83A8D9CE25DBC1219F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/m793yy5fITcV7ckIlQuXGyW6Xgg.roa
Signing time: Thu 17 Oct 2024 14:57:16 +0000
ROA not before: Thu 17 Oct 2024 14:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 163.5.0.0/24 maxlen: 24
163.5.1.0/24 maxlen: 24
163.5.3.0/24 maxlen: 24
163.5.4.0/24 maxlen: 24
163.5.6.0/24 maxlen: 24
163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.15.0/24 maxlen: 24
163.5.16.0/24 maxlen: 24
163.5.17.0/24 maxlen: 24
163.5.18.0/24 maxlen: 24
163.5.19.0/24 maxlen: 24
163.5.22.0/24 maxlen: 24
163.5.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 10:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:fb:a9:02:8b:dc:ed:83:a8:d9:ce:25:db:c1:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 17 14:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bbf77cb2e5f213715edc908950b971b25ba5e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:c4:5b:ed:2d:08:b8:0f:cd:ab:bd:be:fc:
c6:71:5d:7e:b0:b0:2d:e0:54:15:a2:b8:8e:6f:bb:
72:95:a0:d3:25:f6:30:63:e6:6f:e1:56:5e:3d:36:
cf:d9:2d:27:45:87:8b:b3:6e:8a:71:47:10:3c:8c:
f8:4c:67:4f:1e:74:da:ce:1d:87:76:3e:cd:9d:ce:
be:05:a5:35:06:06:7d:0b:2b:00:1d:87:74:95:1b:
b4:f2:39:a1:59:c5:9a:5a:39:2d:8c:51:37:d1:06:
c9:83:0e:53:d5:c2:b5:02:93:d2:9a:3e:17:4b:90:
00:1f:0c:4a:4c:6a:1e:a1:11:71:31:7f:86:f5:4a:
56:6d:79:20:86:99:37:74:56:0a:6b:5a:a5:26:0d:
d9:32:aa:76:b5:6c:ce:93:55:bc:0e:d8:2d:70:9c:
41:31:4b:10:d5:e2:8f:10:f4:ba:56:15:c1:eb:22:
df:48:91:9d:49:8e:9f:1c:fc:d7:93:90:ca:10:43:
2a:58:63:82:65:fa:57:e8:5c:0b:21:64:22:62:eb:
ca:84:06:35:67:84:79:b0:81:33:9e:53:f6:45:61:
56:b2:bc:d3:65:3d:ed:4b:62:5d:d3:ab:02:01:bc:
e5:54:cd:0c:a7:47:e9:42:72:ed:8d:b3:38:a2:11:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BF:77:CB:2E:5F:21:37:15:ED:C9:08:95:0B:97:1B:25:BA:5E:08
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/m793yy5fITcV7ckIlQuXGyW6Xgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.0.0/23
163.5.3.0-163.5.4.255
163.5.6.0-163.5.9.255
163.5.13.0-163.5.19.255
163.5.22.0/24
163.5.25.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:5c:29:a0:90:8b:2f:8b:10:65:69:7c:5e:41:62:16:53:52:
2f:de:f0:7f:93:fb:39:21:10:68:59:0f:b1:f0:c4:13:ca:2a:
b3:d8:49:7b:b4:51:aa:9c:c7:96:b9:ba:c5:70:34:10:4d:4d:
0c:fe:02:06:cf:ce:79:40:b8:14:a4:1e:08:3b:3e:00:3f:bc:
5a:c4:c1:35:6c:9d:e7:9b:f6:71:9d:6d:94:2c:79:d1:b4:f0:
b7:ac:84:02:3e:53:7d:a2:be:77:97:65:02:e2:4b:bb:c2:dc:
6f:99:93:6d:03:4c:c6:e4:91:ba:b3:2f:95:e1:91:25:b8:53:
17:d0:69:e0:63:67:93:90:4d:c1:3c:7d:8b:c2:0f:b4:94:ae:
99:6b:56:1d:ac:96:b8:53:e1:ae:73:f5:33:99:0a:e2:0d:46:
8f:16:45:68:8c:97:9d:ac:99:10:5e:70:26:7a:e2:13:2b:72:
ed:36:1c:b5:5e:91:49:3a:1f:0c:0d:1e:2a:ee:94:e8:e0:a4:
2b:2a:1e:d1:7b:20:c4:f9:f4:f1:3f:e1:01:e0:8e:79:18:e4:
08:6a:65:89:8b:c8:27:b1:fe:15:4d:d6:b0:87:61:ca:50:8d:
03:1c:b3:fc:da:ea:02:bb:cb:f8:2b:8c:c9:75:f3:62:6d:aa:
1e:82:c4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 13:32:51 2024 by rpki-client on console-ams.rpki-client.org