Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE2sl6MpciuT43EJRugXVIRSFPQ.roa
File: mE2sl6MpciuT43EJRugXVIRSFPQ.roa (raw, json)
Hash identifier: /12IGxoiDCYwbfrtPh+x/bmjmmI56ByKRGIGBYAewdE=
Subject key identifier: 98:4D:AC:97:A3:29:72:2B:93:E3:71:09:46:E8:17:54:84:52:14:F4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191E1ED460711EA00CD04C1F582968E65D6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE2sl6MpciuT43EJRugXVIRSFPQ.roa
Signing time: Wed 11 Sep 2024 16:31:49 +0000
ROA not before: Wed 11 Sep 2024 16:31:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:ed:46:07:11:ea:00:cd:04:c1:f5:82:96:8e:65:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 11 16:31:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984dac97a329722b93e3710946e81754845214f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:40:04:34:f1:74:c4:08:e7:c5:2b:a5:20:40:
e6:38:53:20:96:e4:58:00:b4:ed:e0:43:21:f3:f5:
9c:19:a5:42:69:53:97:59:96:66:b0:9c:06:0b:9a:
19:12:93:e3:e0:16:76:ae:16:62:f2:12:dc:1f:5a:
2b:d8:aa:41:13:f3:c4:f6:9b:06:f0:78:ef:95:52:
07:4f:59:59:e4:25:2c:a8:de:92:fb:81:a1:54:2a:
3d:cf:0d:e6:27:87:82:a9:f3:0c:df:cb:e7:06:fc:
dc:ca:0a:e3:d5:50:ec:f0:97:65:b3:b2:08:9e:58:
7d:e2:68:e0:3d:be:7c:c8:2d:db:4d:aa:64:25:e1:
a0:8a:ab:ea:52:97:0a:e4:f5:1b:55:92:41:00:f4:
ba:b7:0c:98:3a:b2:0b:15:13:9f:82:6c:04:71:50:
76:b5:df:37:0d:30:bd:a7:86:b4:d4:d2:3f:a5:04:
5b:13:ae:b1:2a:3f:5c:77:43:cc:eb:2e:ee:b6:7d:
c0:21:c1:8e:22:da:75:c8:71:28:c1:c5:fa:d7:62:
0f:23:89:9a:26:86:38:a4:fa:3d:95:3c:5a:09:c3:
25:fb:ea:d1:c0:d7:fd:bf:ee:88:a7:8e:ca:75:d2:
4a:ca:ef:e5:33:80:bf:64:74:09:57:43:b4:b0:4f:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4D:AC:97:A3:29:72:2B:93:E3:71:09:46:E8:17:54:84:52:14:F4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE2sl6MpciuT43EJRugXVIRSFPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.62.0/24
163.5.99.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ce:08:b8:44:45:17:03:37:2c:93:7c:54:45:89:2a:a0:b3:
b0:5a:86:cf:9d:92:69:86:50:ef:65:fd:09:ae:6c:b4:55:10:
f9:81:9d:e7:d2:75:d4:ee:f2:86:3e:8d:d8:23:68:b2:39:55:
54:35:15:50:bb:c7:34:48:db:58:6e:16:39:16:3f:17:29:bd:
7f:fc:37:2b:56:4c:85:b7:f9:bb:a4:45:07:3b:62:91:6f:86:
b6:4e:c8:f6:00:29:df:a4:75:92:6c:1b:47:10:4d:d3:93:1c:
18:c6:7b:53:69:a8:0e:ea:d4:52:53:fa:51:7a:b1:a7:4f:cb:
8a:78:f7:f9:7d:0a:08:ec:f9:41:b7:c3:55:52:d3:8e:09:48:
f8:9b:9e:66:b5:31:8a:02:ca:c4:59:c4:42:49:d6:1c:c2:66:
a9:6d:39:11:0f:dc:76:bf:75:f8:f1:a2:74:f1:b4:e0:be:e9:
67:b9:70:6a:f4:cd:61:dc:97:89:ac:86:d9:c3:34:44:8a:7e:
14:30:20:36:89:bc:ee:f6:43:e7:f3:9e:bf:f8:47:33:be:7d:
58:74:b3:d8:31:f3:c3:a6:a3:2e:c7:73:d5:39:6d:78:3a:ec:
1d:5c:b2:bc:99:8e:60:16:c1:17:84:55:05:a0:b6:a1:c6:db:
de:35:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 22:52:09 2024 by rpki-client on console-fra.rpki-client.org