Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oF1ra3pyuB5lDJlWCur_3hjQTs4.roa
File: oF1ra3pyuB5lDJlWCur_3hjQTs4.roa (raw, json)
Hash identifier: tQPU0V/cuqvnrXzYx7GqWNuH2PIMb+PHNsZicl1Lh2E=
Subject key identifier: A0:5D:6B:6B:7A:72:B8:1E:65:0C:99:56:0A:EA:FF:DE:18:D0:4E:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01914115F96D09F3C5ABD5414BA9333BA448
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oF1ra3pyuB5lDJlWCur_3hjQTs4.roa
Signing time: Sun 11 Aug 2024 10:57:24 +0000
ROA not before: Sun 11 Aug 2024 10:57:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 21:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:15:f9:6d:09:f3:c5:ab:d5:41:4b:a9:33:3b:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 11 10:57:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a05d6b6b7a72b81e650c99560aeaffde18d04ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e5:33:93:65:05:47:e0:03:1e:6b:79:6b:a2:
03:bc:ea:e5:c6:04:58:f9:f7:de:60:6d:df:14:70:
61:4a:86:97:c9:8a:06:7c:65:f3:9d:cb:75:bb:0b:
0a:10:3e:66:9d:c6:e8:6e:c5:9a:1d:3d:d2:f6:36:
15:4f:65:07:d3:d4:2a:2e:44:c0:ed:7b:80:66:80:
62:51:3f:d0:c6:ac:bd:73:e8:b2:0a:4f:87:3a:cf:
e5:f1:12:b3:00:e1:17:f5:ca:7a:65:30:92:bc:da:
87:af:ba:5e:32:9b:13:5e:5d:ba:ef:04:f4:54:7c:
18:aa:cf:a4:2d:cd:02:fc:6f:25:e8:19:17:99:21:
41:6d:e6:2f:ba:e1:6a:f3:fa:49:b4:42:8d:cb:33:
2c:c2:4d:da:01:ff:a6:ff:fb:7b:3e:e5:52:66:62:
61:b5:c9:ca:c4:ae:0b:01:e1:4c:32:95:26:72:8d:
62:b7:eb:a8:26:40:14:ac:16:1d:15:d6:87:49:c2:
03:9c:a9:74:6f:70:af:30:fd:ec:c6:77:71:0d:78:
38:aa:95:66:21:23:fc:36:f6:77:ec:01:d7:db:98:
29:d0:58:22:f7:5c:8f:93:44:f4:c0:b3:c1:1c:bf:
8b:e2:92:60:e5:df:52:d7:e2:b4:03:8e:8a:26:9e:
30:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5D:6B:6B:7A:72:B8:1E:65:0C:99:56:0A:EA:FF:DE:18:D0:4E:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oF1ra3pyuB5lDJlWCur_3hjQTs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.230.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:81:b4:3f:c8:0b:5a:df:c2:fe:fc:43:f0:59:3a:de:de:d2:
dc:07:35:93:8f:95:9e:41:b2:51:6c:dd:c4:3e:c7:74:04:15:
4a:f9:50:5c:9c:77:f3:b4:8c:09:12:7d:19:cf:0b:fb:66:b2:
0a:f8:21:3c:5b:2c:ec:a6:03:76:68:19:70:6c:a4:4d:d6:57:
47:29:b5:15:91:75:4a:ce:d2:76:84:11:f9:5a:cf:d4:9a:a7:
ea:e9:8e:c1:20:a3:b7:d0:3d:b7:84:35:d3:7f:d4:ec:e6:af:
53:e0:91:e8:37:03:5f:8e:5c:2e:06:30:60:a5:d2:6e:10:3c:
ef:a6:30:2c:99:b6:12:e7:5a:9d:f9:7e:f4:36:b9:57:f1:b3:
67:60:68:1c:69:52:94:32:2d:53:0e:6f:98:b6:1c:30:d1:b1:
1b:cc:2f:eb:41:c3:28:66:e0:eb:f4:59:d7:f7:50:ef:05:42:
cb:65:54:98:43:35:19:fb:2a:af:f8:98:ec:a4:ee:45:41:6a:
f0:c6:bb:6e:4a:54:f9:25:2b:74:6f:11:db:2a:5d:85:f3:3d:
de:2e:c3:21:d6:f9:5a:5a:73:d9:2b:fe:78:08:ea:13:40:e9:
55:18:46:36:b4:31:35:9b:5a:e4:8d:f9:e2:af:b5:53:fb:3a:
0e:90:ce:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 00:24:51 2024 by rpki-client on console-ams.rpki-client.org