Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/teheZU6LzoWN6x6NWqhounS-aB0.roa
File: teheZU6LzoWN6x6NWqhounS-aB0.roa (raw, json)
Hash identifier: dq4RGDgEy+wBLytuYZLIZm/eLLh1wbPLaPYEQO15ibc=
Subject key identifier: B5:E8:5E:65:4E:8B:CE:85:8D:EB:1E:8D:5A:A8:68:BA:74:BE:68:1D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255D7FE6CF602B33A77C3F54FD274F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/teheZU6LzoWN6x6NWqhounS-aB0.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142111
IP address blocks: 163.5.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 15:54:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5d:7f:e6:cf:60:2b:33:a7:7c:3f:54:fd:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5e85e654e8bce858deb1e8d5aa868ba74be681d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:21:fb:24:36:b0:c2:4f:12:54:14:18:f6:59:
b0:fb:b8:78:e8:92:e1:1f:5b:4d:21:d2:d4:55:b4:
23:b2:98:b1:30:30:b4:be:04:5d:2c:bd:6f:f4:0d:
86:71:3f:d9:99:40:cf:cb:f4:b2:6b:a7:bc:21:87:
b7:64:62:75:17:df:22:00:72:7e:83:e8:08:25:3b:
fd:86:26:e9:43:c2:21:c6:40:59:4c:60:3c:89:6e:
ef:45:4e:b9:d3:dc:d1:7f:7a:95:c9:9a:6b:8b:b9:
b5:ef:92:1b:ce:56:08:f5:a8:85:c6:fd:7c:fc:fb:
60:a1:03:81:a4:39:6d:20:67:3f:e7:c7:a1:39:7b:
13:fb:4d:e1:05:d5:c5:f7:cb:ec:29:15:7c:8c:4c:
3a:d6:9a:d6:26:9f:1a:2a:46:c8:ca:97:a5:e8:90:
f9:f0:c5:ee:3e:7c:22:49:15:32:cd:c2:f7:ee:cf:
22:4b:3c:76:eb:f7:08:06:f1:b8:97:0a:e7:a7:1b:
36:e3:ad:f5:be:5b:a7:e1:04:d4:aa:da:69:0c:ce:
09:5c:94:6e:a0:00:46:60:d5:26:0d:36:8e:37:a6:
1b:2b:ce:5b:14:de:1e:5b:98:70:cf:97:80:8e:45:
3d:bc:fd:b9:9d:82:2e:e8:a1:90:cd:66:10:d3:3c:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:5E:65:4E:8B:CE:85:8D:EB:1E:8D:5A:A8:68:BA:74:BE:68:1D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/teheZU6LzoWN6x6NWqhounS-aB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.79.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ed:72:04:27:70:64:af:36:33:4d:af:2b:e4:9e:4f:ad:d8:
17:f4:25:96:1d:48:65:d4:a1:cb:ca:7d:7b:ac:ad:1d:c3:e7:
d6:d0:57:e1:c9:3b:fb:1f:a7:55:00:0e:19:6e:e8:79:8a:73:
b6:72:73:e6:74:52:67:e5:ee:80:96:45:c9:b5:94:8d:ac:71:
1c:1e:d1:1b:41:05:09:7f:41:dc:e3:61:97:7f:87:1f:e7:51:
e6:7d:e2:23:6d:f8:43:bb:a5:40:19:ce:4a:7f:f1:4d:f5:4d:
ef:8e:f7:29:10:a2:e0:65:2d:fa:d3:0e:c4:b9:44:21:bb:a4:
5c:d2:e9:01:3a:ba:6a:51:82:70:13:be:53:a9:9f:a8:e4:0c:
b5:e7:4c:6d:d6:e2:fc:3b:5f:30:3b:f5:18:30:d6:d7:d2:af:
e8:d6:a7:34:06:eb:fa:ce:02:1f:f7:50:ed:0f:40:1d:6d:30:
c9:37:fc:62:55:cd:08:79:02:23:8c:99:16:cf:80:22:f9:77:
eb:ee:cf:2f:08:aa:2b:96:a0:18:26:ed:02:55:ea:bf:4e:0a:
86:5e:f6:cc:c5:88:08:77:90:9b:b7:0f:0e:8d:54:d2:b9:0f:
72:ea:ae:ea:d9:6a:7b:99:b4:8b:39:0c:bc:55:43:65:d8:9a:
63:ae:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 17:36:15 2024 by rpki-client on console-ams.rpki-client.org