Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/v1y9hE6Slf9eN4YtUfdXKbCCDoA.roa
File: v1y9hE6Slf9eN4YtUfdXKbCCDoA.roa (raw, json)
Hash identifier: pcHTlnEZDXNGTh3BnjmDpoTw2XeDXRlkC338VwomBQE=
Subject key identifier: BF:5C:BD:84:4E:92:95:FF:5E:37:86:2D:51:F7:57:29:B0:82:0E:80
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018FD44F26154835EE09189548F6CE39E660
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/v1y9hE6Slf9eN4YtUfdXKbCCDoA.roa
Signing time: Sat 01 Jun 2024 14:58:27 +0000
ROA not before: Sat 01 Jun 2024 14:58:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 163.5.154.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 10:55:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:4f:26:15:48:35:ee:09:18:95:48:f6:ce:39:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 1 14:58:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf5cbd844e9295ff5e37862d51f75729b0820e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e2:82:b9:ed:1f:b3:5c:56:d2:fd:8e:de:e7:
7a:80:6d:34:52:75:ee:67:ec:64:e1:a4:ec:7f:30:
e8:8a:25:e3:87:33:0d:7d:a8:ef:75:58:b4:67:5d:
74:51:25:8c:ad:5f:f0:b3:c8:e7:1a:79:a9:2b:45:
4c:25:9b:89:26:88:e0:b2:06:d4:e8:85:16:7b:6d:
b1:4e:82:0e:80:98:6e:4e:8f:ab:9a:ed:92:68:28:
9e:20:2b:36:3b:9c:cc:0a:a3:66:29:ad:a9:50:37:
99:89:a6:c5:bd:c3:c1:a4:46:6b:12:ef:b1:d3:92:
d3:98:77:69:eb:5d:f6:53:0e:ba:bc:1c:00:9a:56:
82:e7:a2:95:da:ed:8c:1c:a9:65:84:ef:b0:91:6e:
e7:94:c9:6b:ae:8a:fd:34:19:f8:6d:07:c4:fa:83:
1a:42:45:29:d0:df:cc:3f:d6:20:ea:14:25:81:05:
17:b1:c6:61:77:2e:17:4c:3c:d7:23:00:0e:5d:79:
dc:54:cd:10:dd:ce:d4:1e:72:85:a2:4f:9f:b8:b3:
ac:03:06:9a:b8:2c:f1:12:a8:55:cf:8f:08:bc:f6:
c7:03:a9:2a:57:84:24:bc:e1:b7:b9:14:60:96:96:
ab:19:c1:8c:f7:38:30:8a:b1:b4:69:5d:6c:fb:36:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:BD:84:4E:92:95:FF:5E:37:86:2D:51:F7:57:29:B0:82:0E:80
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/v1y9hE6Slf9eN4YtUfdXKbCCDoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.154.0/24
163.5.211.0/24
163.5.215.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bd:90:9c:9d:cc:a7:7e:f7:f2:da:d1:45:35:33:ff:e8:24:
08:37:0e:85:e8:6f:b4:8d:51:e4:06:88:ec:a3:60:b5:2a:04:
21:8a:37:29:bc:bd:2a:71:55:73:26:7e:70:3e:18:4a:d6:0f:
a3:24:e5:0e:ee:e0:27:2f:1b:06:a2:c4:65:03:68:93:1b:a0:
e1:40:c2:8d:9d:7d:25:8e:eb:ec:0f:18:58:67:bb:6c:ea:45:
b1:3b:88:f4:05:74:6e:97:60:0d:86:ce:80:99:7c:20:4a:43:
93:94:4a:f7:3a:12:f6:6b:6e:70:e3:69:2f:80:c4:97:50:2f:
c8:0a:22:5f:dd:a4:2a:ba:d0:b5:67:3f:f6:fc:47:ec:2d:94:
dc:26:64:f8:e0:d2:2c:4c:cd:18:0e:eb:68:c8:6a:29:61:05:
3b:9f:1c:e9:6d:b2:d9:e1:f0:29:29:f9:85:40:c6:b9:fb:6a:
e3:05:b9:fb:52:37:f9:e9:1f:9a:f6:16:62:2a:37:53:e2:74:
80:2f:d9:32:07:bf:26:c4:41:1a:33:ec:05:6e:8d:04:ab:22:
22:87:2b:91:3d:d4:7e:19:05:0c:c0:0e:8c:ca:29:af:a1:37:
42:9c:9b:d9:b9:8e:37:b5:db:aa:e9:4b:53:0e:e1:6f:34:56:
15:c1:08:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org