Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w_sOoRDUJmP1tW9Qsy7Ni_Zdgz8.roa
File: w_sOoRDUJmP1tW9Qsy7Ni_Zdgz8.roa (raw, json)
Hash identifier: WOnY5NFQWoMZBsL0NLxujF4ywZTuW90+WVaFsEOv8Eg=
Subject key identifier: C3:FB:0E:A1:10:D4:26:63:F5:B5:6F:50:B3:2E:CD:8B:F6:5D:83:3F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193086DDC14BFB47F2911B600AF080A1900
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w_sOoRDUJmP1tW9Qsy7Ni_Zdgz8.roa
Signing time: Thu 07 Nov 2024 21:00:37 +0000
ROA not before: Thu 07 Nov 2024 21:00:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215727
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 18:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:6d:dc:14:bf:b4:7f:29:11:b6:00:af:08:0a:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 7 21:00:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3fb0ea110d42663f5b56f50b32ecd8bf65d833f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:75:7b:fb:0f:3b:35:9e:9b:ab:3f:f4:3f:37:
d5:1f:d4:d3:8a:0f:b3:74:c4:98:4d:c7:93:8a:d1:
e6:4c:93:31:90:d0:f4:b3:0b:db:dc:5c:d4:e2:cb:
4c:56:b5:47:f8:47:bc:6a:10:b5:14:70:f7:f8:fb:
b5:58:4e:f5:34:69:88:b4:fe:fd:01:32:96:b9:b1:
dd:52:a0:bc:60:4b:a1:ca:1f:02:83:13:3c:fd:8d:
17:85:5d:b3:51:a9:f0:6c:84:19:62:93:b9:99:a5:
14:d3:55:b0:b7:18:9b:38:24:a8:bd:69:ff:b8:2e:
34:a0:96:61:71:5b:ae:6e:8c:9b:93:b4:a6:c2:94:
7d:53:8a:69:48:63:48:8c:d4:e4:38:18:5d:ed:1b:
24:d5:81:e1:d1:d7:90:6f:79:32:e3:6a:50:eb:56:
c1:78:cf:3b:ce:fe:2f:35:ec:f3:00:89:bf:1f:45:
ec:ed:d7:1d:19:30:c6:9c:4c:21:99:50:0a:b6:b6:
92:53:3e:81:e0:66:a8:28:89:65:ef:87:7d:19:bc:
7a:56:97:f1:15:d4:a5:9f:e9:0b:1a:86:2f:9b:85:
de:77:15:92:e9:f7:19:00:f9:9a:a0:fc:b2:0b:2d:
8d:f3:2a:f6:8e:48:c3:33:a2:55:76:75:ac:2d:e8:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FB:0E:A1:10:D4:26:63:F5:B5:6F:50:B3:2E:CD:8B:F6:5D:83:3F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w_sOoRDUJmP1tW9Qsy7Ni_Zdgz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.192.0/23
163.5.195.0/24
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
23:55:cb:da:f3:27:0c:7f:df:03:67:a8:46:c2:e9:73:9e:37:
86:0d:05:8f:54:58:f2:dd:f7:70:c3:7b:5e:8c:46:f5:a5:7e:
92:72:53:74:ac:25:8a:b8:c7:94:34:23:d5:23:e0:b3:6f:ad:
79:6f:8c:81:a3:13:f7:d0:0c:57:51:42:2e:ab:4c:a9:92:96:
15:bc:8d:c8:cd:08:02:0c:f3:e5:6e:22:ec:22:2a:a0:81:ef:
4a:aa:5d:a3:f7:d4:2c:11:f8:d3:21:94:90:57:74:68:11:3f:
70:db:30:a0:35:81:df:c3:c6:7b:ad:9f:f2:2e:8e:22:3f:7c:
c9:87:27:1b:22:a4:db:9c:6e:69:3a:04:76:3a:ee:47:4f:21:
7d:e4:a1:ea:c0:a0:4e:1e:c9:6b:dd:8e:5f:10:b4:cd:ae:b7:
b0:04:ea:17:8e:00:db:e9:98:0e:2e:d1:78:02:d5:b5:4f:c9:
ec:8e:3d:b0:b4:61:9a:31:71:28:92:d2:5a:2a:ad:ec:61:e6:
ce:2a:b6:f4:4b:34:9e:ab:8f:12:3b:53:6b:66:86:85:e1:7a:
bd:14:e7:3b:2b:af:d0:f7:2c:9c:0d:07:b8:84:e5:1d:64:26:
cb:e4:c4:b5:68:54:06:a5:fd:bf:58:d5:95:fb:5f:67:c1:08:
63:4f:85:83
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZMIbdwUv7R/KRG2AK8IChkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMTA3MjEwMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2ZiMGVhMTEwZDQyNjYzZjViNTZmNTBiMzJlY2Q4YmY2NWQ4MzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXV7+w87NZ6bqz/0PzfVH9TTig+z
dMSYTceTitHmTJMxkND0swvb3FzU4stMVrVH+Ee8ahC1FHD3+Pu1WE71NGmItP79
ATKWubHdUqC8YEuhyh8CgxM8/Y0XhV2zUanwbIQZYpO5maUU01WwtxibOCSovWn/
uC40oJZhcVuuboybk7SmwpR9U4ppSGNIjNTkOBhd7Rsk1YHh0deQb3ky42pQ61bB
eM87zv4vNezzAIm/H0Xs7dcdGTDGnEwhmVAKtraSUz6B4GaoKIll74d9Gbx6Vpfx
FdSln+kLGoYvm4XedxWS6fcZAPmaoPyyCy2N8yr2jkjDM6JVdnWsLej40wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFMP7DqEQ1CZj9bVvULMuzYv2XYM/MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvd19zT29SRFVKbVAxdFc5UXN5N05pX1pkZ3o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAowUfAwQB
owXAAwQAowXDMAwDBACjBdUDBACjBdYwDQYJKoZIhvcNAQELBQADggEBACNVy9rz
Jwx/3wNnqEbC6XOeN4YNBY9UWPLd93DDe16MRvWlfpJyU3SsJYq4x5Q0I9Uj4LNv
rXlvjIGjE/fQDFdRQi6rTKmSlhW8jcjNCAIM8+VuIuwiKqCB70qqXaP31CwR+NMh
lJBXdGgRP3DbMKA1gd/Dxnutn/IujiI/fMmHJxsipNucbmk6BHY67kdPIX3koerA
oE4eyWvdjl8QtM2ut7AE6heOANvpmA4u0XgC1bVPyeyOPbC0YZoxcSiS0loqrexh
5s4qtvRLNJ6rjxI7U2tmhoXher0U5zsrr9D3LJwNB7iE5R1kJsvkxLVoVAal/b9Y
1ZX7X2fBCGNPhYM=
-----END CERTIFICATE-----
Generated at Sat Nov 9 19:30:01 2024 by rpki-client on console-fra.rpki-client.org