Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xM-1xadRMp_7Hs_tZGQHh_x6TOw.roa
File: xM-1xadRMp_7Hs_tZGQHh_x6TOw.roa (raw, json)
Hash identifier: 2enKknu86o9CL0yX+2YRIkAY1PcGjd9e+pe+cNVuVdA=
Subject key identifier: C4:CF:B5:C5:A7:51:32:9F:FB:1E:CF:ED:64:64:07:87:FC:7A:4C:EC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190EE830EDC8AAB1D10F3EB6BED07AE7DD4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xM-1xadRMp_7Hs_tZGQHh_x6TOw.roa
Signing time: Fri 26 Jul 2024 10:08:04 +0000
ROA not before: Fri 26 Jul 2024 10:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211975
IP address blocks: 163.5.137.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 06:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:83:0e:dc:8a:ab:1d:10:f3:eb:6b:ed:07:ae:7d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 26 10:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4cfb5c5a751329ffb1ecfed64640787fc7a4cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fb:8e:e5:9b:14:f1:65:96:7d:40:1f:b6:fc:
7b:53:a8:84:a5:71:d9:16:24:2d:cc:86:28:13:ba:
b3:f8:58:a3:b9:a8:a3:b7:35:a0:25:2a:58:6a:b2:
8f:5d:97:71:c2:47:2c:64:77:90:e1:5b:73:79:89:
1a:7b:4b:1e:42:a0:8e:4d:00:b2:ce:ce:31:72:15:
ef:7b:2b:39:da:02:9f:ad:1a:6d:36:0e:37:37:ae:
36:bc:fc:0c:23:e2:aa:49:71:5d:47:50:cc:a3:d7:
cc:b4:0d:98:2e:e6:71:64:17:b2:37:58:47:b4:31:
2e:fb:d3:b7:07:b0:60:12:1d:10:70:33:c4:b0:75:
77:2e:bd:4c:d4:11:df:2d:0c:f3:a6:62:41:0b:fb:
96:5e:27:8c:56:0c:a1:66:c0:f5:dc:01:b1:c3:7e:
47:15:15:63:ef:eb:5e:10:e1:25:ee:e6:ed:62:af:
26:fb:b8:9d:86:f9:a1:6f:4a:ae:e3:81:c0:fe:7a:
b6:e2:1a:f1:cb:10:43:83:c1:ff:30:c2:19:12:92:
89:06:f4:b2:d7:cc:5f:3e:14:87:07:b8:b5:6b:51:
be:7c:35:01:28:24:9d:8a:ce:5e:ae:84:a8:c9:ac:
78:b1:9d:30:85:c4:da:68:90:62:bb:52:93:cf:7c:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CF:B5:C5:A7:51:32:9F:FB:1E:CF:ED:64:64:07:87:FC:7A:4C:EC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xM-1xadRMp_7Hs_tZGQHh_x6TOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.149.0/24
Signature Algorithm: sha256WithRSAEncryption
94:ef:4e:2c:57:87:76:03:a3:84:48:4a:aa:91:da:10:ad:82:
d2:85:ff:4d:45:ab:83:1d:fb:3c:aa:0d:29:a6:68:c2:c5:2e:
43:0c:10:e4:5b:2c:20:b9:99:31:08:03:eb:fd:43:24:e7:c3:
63:73:db:9f:1a:d3:a2:4d:5f:df:20:56:bc:0f:85:50:29:4e:
32:e6:c9:34:f7:f1:b9:4f:cf:3d:74:5b:07:19:4f:69:df:35:
ab:b3:f1:5b:0b:a9:e7:6a:f4:08:6e:f5:b0:e3:22:63:c6:31:
0d:16:e2:81:7d:4a:99:0e:59:16:d3:91:cc:7f:8d:d5:5f:5d:
f0:a0:fe:da:7f:31:ba:84:4e:fc:3e:3c:fd:4d:31:c1:7f:7d:
f5:7d:89:d0:5f:0f:a1:61:fb:30:b7:c4:f1:a9:80:ec:11:4c:
a3:ea:5c:00:87:e7:aa:fe:65:cd:de:04:ea:cd:c5:74:ac:07:
89:a6:bd:df:b5:d2:94:60:d3:aa:0d:09:d7:19:bc:63:52:6d:
a8:7f:57:19:89:f6:77:11:8a:18:8c:0b:f5:ed:e4:13:7d:ed:
f3:0c:a7:46:c3:8b:35:96:bc:02:01:7a:2f:66:3c:8f:cf:6b:
37:e4:ad:19:a6:4b:cf:5c:5f:9d:e1:63:31:0e:5d:2f:4e:56:
bc:f9:fa:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDugw7ciqsdEPPra+0Hrn3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNzI2MTAwODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGNmYjVjNWE3NTEzMjlmZmIxZWNmZWQ2NDY0MDc4N2ZjN2E0Y2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vuO5ZsU8WWWfUAftvx7U6iEpXHZ
FiQtzIYoE7qz+FijuaijtzWgJSpYarKPXZdxwkcsZHeQ4VtzeYkae0seQqCOTQCy
zs4xchXveys52gKfrRptNg43N642vPwMI+KqSXFdR1DMo9fMtA2YLuZxZBeyN1hH
tDEu+9O3B7BgEh0QcDPEsHV3Lr1M1BHfLQzzpmJBC/uWXieMVgyhZsD13AGxw35H
FRVj7+teEOEl7ubtYq8m+7idhvmhb0qu44HA/nq24hrxyxBDg8H/MMIZEpKJBvSy
18xfPhSHB7i1a1G+fDUBKCSdis5eroSoyax4sZ0whcTaaJBiu1KTz3yqNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMTPtcWnUTKf+x7P7WRkB4f8ekzsMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEveE0tMXhhZFJNcF83SHNfdFpHUUhoX3g2VE93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWJAwQA
owWVMA0GCSqGSIb3DQEBCwUAA4IBAQCU704sV4d2A6OESEqqkdoQrYLShf9NRauD
Hfs8qg0ppmjCxS5DDBDkWywguZkxCAPr/UMk58Njc9ufGtOiTV/fIFa8D4VQKU4y
5sk09/G5T889dFsHGU9p3zWrs/FbC6nnavQIbvWw4yJjxjENFuKBfUqZDlkW05HM
f43VX13woP7afzG6hE78Pjz9TTHBf331fYnQXw+hYfswt8TxqYDsEUyj6lwAh+eq
/mXN3gTqzcV0rAeJpr3ftdKUYNOqDQnXGbxjUm2of1cZifZ3EYoYjAv17eQTfe3z
DKdGw4s1lrwCAXovZjyPz2s35K0ZpkvPXF+d4WMxDl0vTla8+foP
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:50:41 2024 by rpki-client on console-ams.rpki-client.org