Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t2MnC7l6LK-BUd3LGn_xPqEFKVs.roa
File: t2MnC7l6LK-BUd3LGn_xPqEFKVs.roa (raw, json)
Hash identifier: mIPUJffsO7lVNfSns1i5d6sxRHBmWyEzD0Iz3bLyUhg=
Subject key identifier: B7:63:27:0B:B9:7A:2C:AF:81:51:DD:CB:1A:7F:F1:3E:A1:05:29:5B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189D4EB040BE6589A1CFD5516D59CBB6AA1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t2MnC7l6LK-BUd3LGn_xPqEFKVs.roa
Signing time: Tue 08 Aug 2023 11:31:58 +0000
ROA not before: Tue 08 Aug 2023 11:31:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 23:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:eb:04:0b:e6:58:9a:1c:fd:55:16:d5:9c:bb:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 11:31:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b763270bb97a2caf8151ddcb1a7ff13ea105295b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:4f:74:21:8a:ff:83:e3:b7:70:7b:a1:35:
c8:3a:9b:0c:7d:a6:ff:03:dc:c1:95:05:30:7f:51:
7a:87:c3:b2:5b:9d:c4:2b:02:9f:5e:11:18:01:7f:
76:3a:c0:26:41:a4:60:9d:30:77:74:31:73:37:93:
6c:11:ee:40:d1:00:29:de:5d:7f:76:9c:18:87:0e:
90:9f:fb:69:e2:99:23:e9:65:2b:dc:17:f4:cf:ee:
8a:8d:a3:b8:a9:58:ea:7f:01:d1:22:cb:9f:9b:3f:
e3:09:b9:d8:fe:95:62:5d:68:27:70:3a:31:e8:1d:
ad:36:3e:f8:0c:e5:5a:a6:c3:c4:db:5d:34:af:4c:
b5:54:0d:2f:22:a0:98:ef:ef:50:21:d9:a5:ca:8a:
87:20:2c:a5:3d:97:46:ae:2f:21:a3:2d:13:cc:90:
f7:84:cb:ad:2c:ce:8b:21:ac:5a:3d:4c:5a:84:03:
4f:2c:43:a4:b8:04:ea:00:a3:40:e2:d1:d8:6a:e7:
e3:02:3b:7b:87:93:ae:f5:60:f4:6d:60:f3:98:7d:
05:f3:0e:8e:c6:83:2a:a2:07:a4:7b:e9:d8:1c:a2:
48:dd:04:8c:e8:73:37:23:67:14:83:80:32:84:f8:
58:a4:2f:54:96:ac:12:4e:74:19:37:c7:4e:f8:33:
2d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:63:27:0B:B9:7A:2C:AF:81:51:DD:CB:1A:7F:F1:3E:A1:05:29:5B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t2MnC7l6LK-BUd3LGn_xPqEFKVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
163.5.154.0/24
163.5.192.0/23
163.5.214.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e8:7c:f2:89:e1:fe:7c:1f:f2:fb:4e:6f:d7:c1:bc:20:12:
39:2c:eb:8e:56:38:6d:00:e8:e7:9d:be:cb:bf:0d:2c:12:a5:
55:4e:93:15:56:d5:87:29:4b:db:24:47:c2:0e:b2:e1:b9:72:
1c:71:4e:8c:be:13:02:11:cd:cb:ca:f1:4c:f0:fd:80:bb:c1:
5c:d3:56:87:bf:8f:2d:60:1a:0a:a3:7d:4c:23:03:6b:01:d9:
95:e1:0b:ef:65:d1:42:e0:e2:b1:7a:60:3c:a6:04:05:05:e4:
ee:34:e1:2e:14:8a:4b:a2:39:af:f4:ef:54:91:a9:ed:ec:ff:
56:0c:d9:f5:fb:a8:4d:df:3c:e5:48:4a:f9:be:bc:3d:92:0f:
af:ce:7c:dc:e7:2a:01:9d:e9:2e:0f:d5:13:96:8c:1b:16:0f:
03:3f:9d:d8:e0:c2:8a:27:db:72:2e:3b:3b:0a:92:88:c6:62:
90:4f:e3:a8:95:75:82:33:8b:c5:97:a2:ee:e6:9f:69:d5:e2:
e9:ed:43:ae:9f:e4:8c:75:19:af:0d:f2:87:25:66:8d:ef:48:
30:5a:c0:f1:65:5d:34:85:d1:b3:2f:c8:5a:76:05:32:20:40:
44:1e:4a:f9:65:e1:f9:fb:da:8b:36:f7:39:81:d7:50:70:72:
de:7d:5d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org