Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yevVAwsdMH4Z33SZfDTb1ai_m6U.roa
File: yevVAwsdMH4Z33SZfDTb1ai_m6U.roa (raw, json)
Hash identifier: AHSYaK9p5bRynjPYrlsU92UMBKbCdjXojSXf8TN7Q9A=
Subject key identifier: C9:EB:D5:03:0B:1D:30:7E:19:DF:74:99:7C:34:DB:D5:A8:BF:9B:A5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D98CEF252C1CE7E567622D5B3EFA73D3E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yevVAwsdMH4Z33SZfDTb1ai_m6U.roa
Signing time: Sun 11 Feb 2024 15:35:15 +0000
ROA not before: Sun 11 Feb 2024 15:35:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198883
IP address blocks: 163.5.154.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Apr 2024 16:33:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:98:ce:f2:52:c1:ce:7e:56:76:22:d5:b3:ef:a7:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 11 15:35:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9ebd5030b1d307e19df74997c34dbd5a8bf9ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:07:13:9b:1d:99:2b:c1:5f:44:e0:dc:57:
f2:36:c0:eb:3e:48:54:96:e4:6d:a1:2b:21:84:b8:
2d:98:54:fe:a3:92:76:22:57:f0:07:98:da:b5:3c:
20:4b:bc:b9:92:0d:48:f5:90:78:ad:67:ec:ed:75:
76:2c:89:05:5c:48:1b:0b:23:d5:b6:ea:36:d9:6d:
79:fe:94:02:22:fa:ee:33:25:0a:0a:65:f1:a5:cb:
c2:86:15:0b:3f:bb:8d:fd:5b:2e:f4:ac:30:92:66:
3d:8b:95:62:49:10:a6:8b:8c:5c:32:39:c2:98:9c:
49:8a:21:5e:cc:a9:c9:87:bb:11:4b:4b:8e:62:d4:
85:bb:e2:9a:8e:2e:c9:a7:41:a3:3c:c9:51:23:de:
0b:61:05:c6:5a:85:46:6c:12:35:41:03:24:40:35:
c3:a3:88:e1:40:69:6d:ef:7d:f7:ab:a6:a7:1a:2b:
23:8e:92:fd:2a:87:b9:99:56:62:42:d3:3a:7a:24:
24:97:49:1e:82:fc:cf:da:6e:cf:ff:bf:f5:c5:da:
62:69:5d:59:86:2c:f4:c1:6b:12:a9:31:00:ec:27:
f7:12:50:bb:43:6a:c0:42:24:2e:f5:87:0d:d0:46:
f6:8f:f2:e5:bf:27:b9:fa:db:f9:eb:c1:12:54:06:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:D5:03:0B:1D:30:7E:19:DF:74:99:7C:34:DB:D5:A8:BF:9B:A5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yevVAwsdMH4Z33SZfDTb1ai_m6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.154.0/24
163.5.192.0/23
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
49:4f:5c:f1:93:27:9b:7d:a0:e6:3b:ed:4b:68:76:bc:93:59:
d1:31:52:d2:f4:8b:57:67:90:d1:ed:21:16:e3:6d:0c:a4:dd:
aa:73:51:4f:a4:87:ed:71:da:4a:da:b3:29:00:35:84:8c:5e:
87:32:b6:df:d9:5d:4d:7e:a0:3b:ec:05:1a:bb:c0:0a:35:55:
73:55:e5:13:4a:42:61:9b:90:4e:7a:bd:2f:87:d4:a6:ea:1a:
23:c0:1f:31:6e:8e:56:3e:b2:fc:f8:c1:fb:1f:9b:1e:5e:5e:
ed:54:e9:2a:b7:cf:58:62:f3:b9:ef:56:38:ea:07:47:23:98:
5d:ba:56:8e:e7:f1:b4:94:b5:dd:48:22:0b:53:68:00:62:35:
52:d9:2a:6f:1e:c9:a7:b9:a2:c7:57:d7:72:b6:a5:3a:14:33:
5f:d7:73:9f:aa:bf:51:fe:2d:47:bd:bd:c0:a5:dc:e5:37:9d:
e8:fe:1d:39:b6:58:f8:59:cb:c6:46:12:8d:86:5b:6b:2f:d4:
3a:b9:fe:d8:4a:93:61:b7:35:cc:0d:47:47:68:4a:84:2c:14:
4b:fd:be:59:32:4b:7f:ff:74:fd:c2:1b:47:de:35:38:f0:09:
c0:4b:e6:08:dd:7c:95:a5:bb:d7:04:4f:79:d0:ce:66:94:b1:
63:c8:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 17:47:25 2024 by rpki-client on console-fra.rpki-client.org