Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mwFKDcS1OodeDzinl7s_IcFv9qA.roa
File: mwFKDcS1OodeDzinl7s_IcFv9qA.roa (raw, json)
Hash identifier: JAjsPadRCfiOVl1GlKPRSRn/C1pIr8n9sHI24M1JjLs=
Subject key identifier: 9B:01:4A:0D:C4:B5:3A:87:5E:0F:38:A7:97:BB:3F:21:C1:6F:F6:A0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC42554269F58F7FB7034BB88AB72CDD4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mwFKDcS1OodeDzinl7s_IcFv9qA.roa
Signing time: Mon 01 Jan 2024 08:30:29 +0000
ROA not before: Mon 01 Jan 2024 08:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29837
IP address blocks: 163.5.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 12:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:54:26:9f:58:f7:fb:70:34:bb:88:ab:72:cd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b014a0dc4b53a875e0f38a797bb3f21c16ff6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:d4:d4:b1:2c:bf:b4:cc:40:6b:5d:6b:1f:
c8:9a:6d:dd:e1:ff:a3:f9:5d:6e:ea:62:66:e7:29:
93:86:19:02:c7:48:45:d2:90:b8:49:e5:ab:b1:65:
b3:a0:94:34:6d:52:8c:2f:ac:e4:93:63:9d:b6:ed:
65:a0:da:1f:30:ce:c4:1d:3a:1e:89:34:15:0d:b0:
85:30:04:01:d4:ea:44:a6:51:f7:4e:b0:50:77:fc:
a4:aa:60:a2:8f:a3:30:66:bc:b9:ea:15:88:99:ac:
bd:30:cc:95:a2:5a:fb:a0:81:82:c0:99:d1:22:2b:
14:08:bc:44:90:08:70:ce:b2:69:e5:85:89:55:bf:
34:0b:15:d6:1a:a4:7c:96:7d:c9:52:39:86:97:57:
c0:3c:7f:b2:48:d2:ce:44:2f:12:3b:7a:ac:a0:03:
bc:fe:e4:94:84:3a:60:9f:fb:cc:ab:6a:c9:12:66:
7d:0d:c7:25:6f:5c:ac:b3:d3:70:df:12:e1:55:bc:
4e:e3:42:b2:19:8e:d6:d3:d5:19:5d:23:86:04:57:
f5:fe:a3:4e:bd:f2:0d:77:6e:f1:e3:d7:61:c9:99:
3f:0f:1a:ed:06:a6:a9:e0:c0:38:cd:4b:41:f1:3c:
99:63:9d:1b:06:86:c3:86:81:53:f4:fb:60:c7:5f:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:01:4A:0D:C4:B5:3A:87:5E:0F:38:A7:97:BB:3F:21:C1:6F:F6:A0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mwFKDcS1OodeDzinl7s_IcFv9qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:39:71:cf:e5:ba:52:84:85:37:a3:26:9c:07:fe:74:fe:45:
b9:02:ce:81:91:04:75:97:09:fa:49:0c:43:87:95:4d:e4:f5:
b9:48:bd:81:46:c3:79:ab:12:9c:0f:b6:11:de:52:11:48:45:
07:63:0c:f8:e7:37:2e:7a:84:2a:74:c6:ba:7d:75:32:7a:6f:
4e:c5:a8:32:b6:35:05:65:2a:de:1e:65:22:00:f2:07:e6:66:
55:c9:3e:7e:a5:ec:9b:53:60:74:13:66:0a:d2:ba:14:07:bc:
4e:45:38:a8:36:e1:a2:a8:77:73:51:a1:ca:33:70:de:bd:ce:
56:67:99:31:23:ba:f5:cf:fb:2d:f4:e5:ac:2a:11:5f:93:78:
3a:4e:fb:87:fb:e1:1d:93:0e:3c:6c:b3:ba:9c:0e:d3:db:03:
a4:ac:74:04:51:a7:03:7d:03:c5:9b:3d:c2:7b:fd:5c:62:96:
db:47:4e:4b:a6:8f:5b:c8:1a:fd:3c:c3:cc:2e:79:ae:09:26:
02:5e:2f:1f:5e:04:10:cf:01:1e:2f:05:c4:a4:89:a4:a3:97:
4f:a1:8a:47:63:a9:bd:36:d4:15:b6:b9:64:1e:27:01:7f:e1:
64:61:94:70:dd:fd:49:43:df:f9:07:6d:14:6a:45:93:ce:1b:
6f:40:20:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 14:36:35 2024 by rpki-client on console-fra.rpki-client.org