Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yB5aZi26nI5VQkRI5Cs--MP7E-0.roa
File: yB5aZi26nI5VQkRI5Cs--MP7E-0.roa (raw, json)
Hash identifier: A6AXizMavUkTa1uwe6Lw4qgT/GzFYGtbtuOM7ffNqCc=
Subject key identifier: C8:1E:5A:66:2D:BA:9C:8E:55:42:44:48:E4:2B:3E:F8:C3:FB:13:ED
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01931BEDD09CD76C3B0CFB1A4E2C9CEF3D56
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yB5aZi26nI5VQkRI5Cs--MP7E-0.roa
Signing time: Mon 11 Nov 2024 15:53:10 +0000
ROA not before: Mon 11 Nov 2024 15:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:ed:d0:9c:d7:6c:3b:0c:fb:1a:4e:2c:9c:ef:3d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 11 15:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c81e5a662dba9c8e55424448e42b3ef8c3fb13ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:7d:86:9e:d3:5c:7f:ee:0a:92:5f:7e:be:
8f:d3:f0:f8:5d:13:36:f0:e3:2f:70:9a:b6:22:eb:
f8:63:41:a9:5f:ad:07:c0:bf:d6:51:ba:e6:1b:0a:
1f:42:5f:3e:cf:c8:82:ef:42:09:72:50:33:a2:c0:
c4:1a:ec:b8:4c:2c:a5:74:a0:e6:31:f8:e8:b4:da:
d5:d4:4a:cc:07:0c:88:e1:1d:a8:0d:59:97:86:b3:
08:e8:c1:ce:db:10:36:37:32:5e:ad:f2:1b:47:67:
d1:6d:3a:ca:06:ec:f8:95:2c:21:39:bd:f5:43:b4:
44:22:13:45:3e:d0:03:f5:7d:2c:5f:6e:a8:df:e0:
af:e7:3b:ef:9f:10:e2:f9:66:6d:11:e2:ba:7f:68:
1a:35:ed:ee:15:5e:19:a3:42:8c:83:cb:be:4d:4c:
dc:09:d5:f1:d2:15:fc:37:e4:6a:f6:84:11:c4:45:
7e:76:83:ca:9c:fd:6c:41:e0:73:c5:c2:99:02:2a:
42:e8:fb:85:db:0d:06:55:cb:2d:d1:03:75:4e:d3:
2a:8a:1a:3f:55:83:18:d6:19:2c:8d:ca:14:22:0e:
33:f2:ad:4e:f1:34:a6:01:9b:42:8a:bf:5f:21:d6:
49:e3:fb:18:b0:1a:7d:17:78:c4:84:f8:ac:14:f8:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:5A:66:2D:BA:9C:8E:55:42:44:48:E4:2B:3E:F8:C3:FB:13:ED
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yB5aZi26nI5VQkRI5Cs--MP7E-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.31.0/24
163.5.34.0/24
163.5.46.0/24
163.5.118.0/23
163.5.144.0/24
163.5.158.0/24
163.5.162.0/24
163.5.173.0/24
163.5.179.0/24
163.5.187.0/24
163.5.211.0/24
163.5.221.0/24
163.5.230.0/24
163.5.245.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:d1:7d:66:78:84:13:08:4b:03:fc:68:db:8a:3c:3b:3e:e1:
e9:a5:28:08:73:e4:11:38:83:6a:47:e7:78:94:91:ba:ae:e8:
21:8f:a2:5d:fa:be:f4:f0:4d:1b:cf:fe:dd:b9:9c:c7:8b:a6:
bd:3f:45:f6:63:02:29:3e:e8:bf:b4:b2:a4:20:0c:f8:b3:20:
3b:49:96:b1:37:28:24:2d:ad:29:3e:69:ea:b2:6f:c1:df:5d:
fe:43:75:4d:88:eb:ac:0e:6b:96:80:71:3e:ce:ee:67:21:0f:
af:7e:c2:28:c6:0d:6a:3d:75:77:53:db:a9:38:e6:1e:56:59:
4d:68:32:60:7e:90:cc:30:bd:14:88:ac:2b:17:79:81:4e:fb:
bb:51:92:bd:0c:c6:26:81:9d:92:ff:bb:6b:2a:b5:44:16:f4:
43:fc:e8:93:1d:62:57:a1:81:31:77:8c:a1:b3:b7:35:e3:24:
11:58:c8:5f:52:22:ed:ea:98:9b:6d:62:43:90:ec:e2:19:2d:
2a:4f:01:46:48:24:7c:b0:f7:be:bd:24:bc:22:5b:e5:d7:23:
dc:03:0c:50:df:6e:0f:74:ae:00:ff:98:14:47:da:8a:bc:f9:
31:9d:dc:93:3f:3f:e8:08:f5:30:19:04:7b:55:81:3a:ad:57:
30:3c:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:43:26 2024 by rpki-client on console-ams.rpki-client.org