Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ulNvfgn16t91i_77wwwfSsPXaIQ.roa
File: ulNvfgn16t91i_77wwwfSsPXaIQ.roa (raw, json)
Hash identifier: MHktdfGu/jocKw4teELTkYwjWehvvRKITlI5dPytLoM=
Subject key identifier: BA:53:6F:7E:09:F5:EA:DF:75:8B:FE:FB:C3:0C:1F:4A:C3:D7:68:84
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CF8EBEE8EA492FEA13C4E84B5342E5A05
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ulNvfgn16t91i_77wwwfSsPXaIQ.roa
Signing time: Thu 11 Jan 2024 14:27:40 +0000
ROA not before: Thu 11 Jan 2024 14:27:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201575
IP address blocks: 163.5.94.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 16:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:eb:ee:8e:a4:92:fe:a1:3c:4e:84:b5:34:2e:5a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 11 14:27:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba536f7e09f5eadf758bfefbc30c1f4ac3d76884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:4b:b4:c7:99:a7:63:dd:93:bc:1c:c0:5a:
16:2b:cd:af:6b:ee:eb:61:e3:e2:42:db:62:4c:3d:
30:76:18:de:d8:8d:5d:dd:95:ba:30:bf:27:aa:d6:
a6:d2:a6:33:87:67:83:1f:54:1e:39:c1:23:16:06:
44:a8:9d:fa:f8:2c:65:32:eb:ee:3c:87:f6:a7:58:
3c:0e:63:65:17:cb:27:92:40:c6:7f:85:89:97:d6:
47:c0:66:83:c1:8e:1d:80:89:f8:73:68:43:13:7f:
b4:c3:f8:55:78:71:9a:e7:5b:56:6f:1e:56:21:f9:
a0:90:e0:5d:8e:bb:b6:1a:31:84:52:fa:5d:50:9d:
02:65:7a:3d:ab:5b:89:f8:c6:9e:44:ee:91:12:9a:
71:9c:48:4a:f5:78:85:31:33:84:81:c1:5d:53:4d:
94:52:92:cd:a9:21:d3:a3:4f:c1:fb:44:57:5b:3c:
00:60:4a:03:1f:51:6f:6f:2e:a1:36:8a:c6:f4:21:
db:94:fb:79:e9:00:32:85:a3:5b:57:6e:f8:a0:6e:
86:e6:bf:66:13:8d:44:c8:c1:d0:41:e5:e1:68:2a:
32:0f:f1:04:3e:a4:75:93:4f:5b:a3:86:da:e9:7c:
85:9c:8b:2d:25:fa:4c:76:f0:f3:66:2d:28:b5:f3:
45:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:53:6F:7E:09:F5:EA:DF:75:8B:FE:FB:C3:0C:1F:4A:C3:D7:68:84
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ulNvfgn16t91i_77wwwfSsPXaIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/24
163.5.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6b:70:25:e5:73:29:b3:9f:91:2e:7c:40:a5:89:d8:55:4d:
d3:a1:31:90:58:e5:67:1d:17:6a:3a:10:20:b4:f0:e4:16:67:
88:87:a7:2e:fb:37:5c:26:3f:6c:9f:a1:e8:73:b7:8c:3f:81:
0c:8e:61:1f:8f:52:ae:ff:80:53:4f:76:ec:78:08:02:84:06:
f5:b4:f5:21:ce:92:26:42:01:e7:12:e2:c8:7a:f8:df:da:68:
09:0d:8b:d1:f9:4c:1c:d7:0a:9b:aa:47:47:7c:7b:c2:ec:8b:
32:3e:69:7d:f1:85:21:42:4c:55:ef:07:06:16:a0:a5:2d:ea:
14:8f:d3:07:4b:19:f3:a3:b9:a1:2b:96:aa:37:39:ce:da:78:
aa:a0:d5:80:01:ba:22:67:55:3f:4c:8d:8b:16:81:bf:be:eb:
41:6f:5a:4b:2d:4d:f1:88:ae:ce:81:2d:87:61:eb:6b:61:c7:
68:8d:57:58:7c:c2:1a:96:7b:bc:7f:56:70:45:1a:c2:25:8d:
9a:59:3a:50:ce:98:a1:29:25:ca:66:c3:e5:72:12:82:f5:c5:
ac:6e:86:47:8e:f5:b1:cd:23:6d:a2:25:2c:46:36:46:68:4f:
a8:66:60:c9:c8:60:44:50:67:0e:63:44:80:1d:ad:0c:fd:c2:
55:28:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 20:33:30 2024 by rpki-client on console-fra.rpki-client.org