Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/whGkBIM38rcBPVWzftyWPId8SJc.roa
File: whGkBIM38rcBPVWzftyWPId8SJc.roa (raw, json)
Hash identifier: oRS3g4ejKM6LINGxa50gvgHXoDUhxlW1m/ZQsnvZdU0=
Subject key identifier: C2:11:A4:04:83:37:F2:B7:01:3D:55:B3:7E:DC:96:3C:87:7C:48:97
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019127A586C12BA752F853F9C78D6AD7C100
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/whGkBIM38rcBPVWzftyWPId8SJc.roa
Signing time: Tue 06 Aug 2024 12:24:04 +0000
ROA not before: Tue 06 Aug 2024 12:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 163.5.33.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:a5:86:c1:2b:a7:52:f8:53:f9:c7:8d:6a:d7:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 12:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c211a4048337f2b7013d55b37edc963c877c4897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:8f:2d:d5:4b:fe:95:7b:1d:80:8b:70:94:
e7:60:a5:84:3d:15:9e:fa:83:91:c1:9a:b6:08:24:
1a:72:a4:32:32:f8:15:7b:4d:fa:9c:55:1c:ee:63:
c8:83:37:8d:00:35:df:39:3b:65:e2:17:e6:77:79:
f9:b7:0f:c3:f4:6b:03:36:66:0a:19:1a:68:6a:23:
08:c2:2c:33:55:6f:b9:ec:84:b4:02:14:42:4a:5d:
b0:ea:b6:33:0a:ab:e2:25:72:ad:65:26:12:24:81:
91:21:e3:e9:c8:46:30:d5:f7:e8:a5:3f:7a:83:27:
ce:34:90:12:d8:8e:a4:f1:32:17:2f:0c:b8:69:00:
a2:5b:22:30:45:4d:b2:c2:23:5f:97:0b:35:06:73:
30:b8:a2:e2:38:f4:6f:78:14:fa:a5:14:7b:55:4d:
f6:a1:5c:87:f8:26:b0:36:55:12:63:5a:5a:13:d6:
18:27:53:cd:d3:6e:94:4e:7b:0b:c7:fb:c9:c9:93:
55:e6:e7:f4:c1:dd:09:6e:08:19:6d:de:71:22:7c:
be:a6:1b:1b:5d:c9:cb:6b:9e:eb:5c:91:5f:6c:8c:
0a:9f:8c:08:3c:03:07:0a:4b:78:66:59:65:45:a7:
63:5e:d1:a7:6e:03:71:bf:25:0b:1b:35:fa:7d:69:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:11:A4:04:83:37:F2:B7:01:3D:55:B3:7E:DC:96:3C:87:7C:48:97
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/whGkBIM38rcBPVWzftyWPId8SJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.33.0/24
163.5.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:6b:7b:c0:fa:90:05:34:aa:23:5d:7a:61:53:dc:bc:b7:39:
95:bc:09:c3:9b:2f:b8:17:95:c8:43:12:9a:49:fc:5c:b9:20:
18:c3:02:c2:ad:b5:23:95:1c:bf:48:e1:f5:9b:5c:65:07:09:
14:dc:20:4b:b3:fe:8b:bd:8f:fd:c4:20:c7:98:82:72:34:7c:
72:2c:29:84:3e:02:11:e5:95:b6:1c:7e:ee:5e:5b:92:56:5e:
3f:11:d3:71:f6:41:ff:e0:79:28:35:c8:60:f4:57:f5:db:29:
1c:ca:0e:73:74:02:3e:e7:78:81:8f:b8:e9:df:31:fe:a4:54:
4a:10:8d:90:5a:be:19:e7:ab:7a:54:db:58:1c:2a:ec:38:c7:
19:07:eb:59:06:74:00:f2:aa:02:d4:ff:5a:42:6d:c4:a4:15:
16:2d:04:65:62:1d:55:57:3e:4c:eb:27:0c:60:09:87:5c:59:
24:bd:6d:3a:27:c0:0c:db:21:df:ba:5a:c3:24:09:e2:c5:e1:
b1:13:55:ca:bb:8b:f6:b1:b4:a7:f9:09:f1:91:a1:b9:44:83:
ce:8a:7e:6d:5f:18:80:99:e0:6f:b4:6d:92:7e:d9:3f:2e:24:
71:bf:e1:cd:c9:84:39:81:5c:62:31:4b:3e:17:70:fa:81:d0:
af:02:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 18:20:21 2024 by rpki-client on console-fra.rpki-client.org