Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pX1NEHDggzQM_Je039fBVz1Oz1A.roa
File: pX1NEHDggzQM_Je039fBVz1Oz1A.roa (raw, json)
Hash identifier: auTJl8QHCjHkaszU8wX0VUjVleYwirP1rbzN9sRSNtY=
Subject key identifier: A5:7D:4D:10:70:E0:83:34:0C:FC:97:B4:DF:D7:C1:57:3D:4E:CF:50
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D98CEF35424AB57354DFA2AF1CFB15C23
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pX1NEHDggzQM_Je039fBVz1Oz1A.roa
Signing time: Sun 11 Feb 2024 15:35:15 +0000
ROA not before: Sun 11 Feb 2024 15:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216159
IP address blocks: 163.5.154.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 16:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:ce:f3:54:24:ab:57:35:4d:fa:2a:f1:cf:b1:5c:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 11 15:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a57d4d1070e083340cfc97b4dfd7c1573d4ecf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:61:42:07:66:45:ef:bb:9c:06:51:b5:7e:e6:
5f:3d:b0:68:0e:38:de:25:85:d4:4d:14:80:aa:44:
9e:87:2a:84:61:9c:ba:a3:06:6c:ba:cc:e2:81:3f:
cd:39:db:f1:3f:83:22:ab:06:8b:4e:3f:7a:73:13:
63:9f:04:10:03:05:24:37:7b:02:9e:3a:33:9e:94:
74:a8:4b:96:b4:36:99:ac:ee:d3:d8:9a:18:c6:ef:
c6:b8:c4:d6:fa:c9:b3:d4:e0:68:1c:65:e3:6e:a1:
eb:e1:e7:39:58:c7:3a:57:08:0b:36:df:e3:3e:dc:
11:45:0f:8f:20:19:af:81:9c:1e:73:be:36:47:bd:
c6:55:9a:4d:34:17:74:1b:a4:e5:e1:45:b1:f2:35:
76:8c:50:3d:84:11:0d:27:73:9f:a0:43:51:80:92:
21:7b:3b:be:73:b4:09:af:59:f4:b9:7f:9a:0f:a6:
71:1a:3b:02:f0:36:ef:81:f9:d7:ee:54:45:82:c6:
de:4d:cd:09:b0:9f:42:09:53:30:0d:81:b3:b4:5f:
d3:87:53:97:5e:8c:7c:1f:1b:33:cc:56:ac:3c:f6:
af:9a:56:d9:67:cc:af:fe:49:77:40:b8:71:54:f3:
24:9a:af:31:da:4e:2f:ea:2c:60:45:98:a0:7b:0b:
00:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7D:4D:10:70:E0:83:34:0C:FC:97:B4:DF:D7:C1:57:3D:4E:CF:50
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pX1NEHDggzQM_Je039fBVz1Oz1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.154.0/24
163.5.192.0/23
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
a9:11:9f:f5:f0:e8:d3:f2:35:d8:2b:40:5a:3c:3e:8a:49:33:
8e:b2:94:3f:fd:32:db:cf:24:81:2e:6f:0e:80:c9:2b:75:bd:
b5:87:99:1d:b9:95:52:fc:d1:5a:3c:96:a5:6f:44:99:f6:22:
69:75:ca:72:e5:05:06:32:9e:ef:e7:a0:1b:5c:ba:ee:3d:2f:
2b:b2:a8:56:34:75:14:7e:b6:6c:19:70:75:4c:14:e4:59:b6:
97:c0:7a:0d:df:74:00:48:6d:e4:1c:ff:a5:77:44:7d:65:78:
20:52:a8:52:4f:ba:dc:af:bb:3b:2c:22:b8:48:b9:6b:0b:25:
3e:ed:27:63:74:0b:c2:97:f5:d7:03:f4:a9:6a:32:04:54:15:
30:cb:45:62:67:50:9e:e8:06:4f:39:11:64:3c:f9:11:cf:c0:
0b:5f:82:06:1d:1e:28:f3:e5:40:1c:68:9b:5d:2c:b4:31:cc:
8c:3f:c6:c4:5e:69:78:df:a2:34:c5:ee:7e:3b:d6:bd:66:e5:
49:e4:d4:36:ff:6a:16:bd:60:ac:ad:f8:43:b0:14:0d:ee:39:
88:c0:b9:d8:ec:c6:7e:fe:ab:de:fa:cc:63:35:d2:5a:2b:0a:
82:00:be:d6:e9:51:44:fe:d3:71:9c:49:c8:9a:f1:78:6f:5f:
d2:d0:8d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 17:30:20 2024 by rpki-client on console-ams.rpki-client.org