Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yq9s0Fdm7FPZMY7PxDwrbJC6Wz4.roa
File: yq9s0Fdm7FPZMY7PxDwrbJC6Wz4.roa (raw, json)
Hash identifier: v6HNzC/loFFZR3558ieWAdId2iuG6lRLr5NGX+lDM3s=
Subject key identifier: CA:AF:6C:D0:57:66:EC:53:D9:31:8E:CF:C4:3C:2B:6C:90:BA:5B:3E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193B9FF6605C3EBAA40993E275D22CA5AFB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yq9s0Fdm7FPZMY7PxDwrbJC6Wz4.roa
Signing time: Thu 12 Dec 2024 08:32:22 +0000
ROA not before: Thu 12 Dec 2024 08:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47741
IP address blocks: 163.5.92.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 14:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:ff:66:05:c3:eb:aa:40:99:3e:27:5d:22:ca:5a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 12 08:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caaf6cd05766ec53d9318ecfc43c2b6c90ba5b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:a1:8b:76:5e:95:fd:76:f0:09:99:1a:9e:
5c:41:f0:93:ad:4a:4f:f4:69:f2:58:40:e6:55:c5:
14:64:6c:bb:90:00:3a:d9:e0:b1:b5:fb:af:0a:9c:
5a:ce:0c:e5:b6:e7:f9:1d:6e:c5:73:00:6b:07:bf:
50:c1:30:21:3d:dd:21:bb:78:4a:d7:e4:76:af:59:
ba:71:84:32:7d:b4:9a:d4:0e:09:87:1f:4b:4d:47:
45:5e:db:7d:9f:5a:a6:2d:db:d5:56:31:ac:15:cd:
3d:2e:5a:f7:5e:5e:76:96:e0:a4:d1:1f:12:1f:87:
78:23:06:f1:e1:6e:6c:d9:e9:9e:11:91:bf:4e:2d:
e3:d0:dc:ca:58:51:0a:f0:58:f1:d3:86:57:45:5e:
9d:8e:f5:37:ca:12:1c:52:88:71:b4:59:08:cd:d4:
eb:06:20:77:bf:b6:20:ce:19:84:f9:d3:26:6b:dd:
3f:6f:24:5f:2e:04:29:e0:97:97:9d:03:18:bf:a3:
55:29:f2:cc:e3:22:89:16:d8:bb:23:33:0b:d6:89:
33:da:3f:38:1e:aa:60:7a:6a:37:fe:32:8b:af:97:
30:e5:24:01:e8:d4:1e:ad:0a:f2:be:77:22:58:bc:
15:0b:45:29:46:15:7b:ec:e1:f9:68:3b:07:2d:28:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:6C:D0:57:66:EC:53:D9:31:8E:CF:C4:3C:2B:6C:90:BA:5B:3E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yq9s0Fdm7FPZMY7PxDwrbJC6Wz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
163.5.219.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:97:36:7f:99:8c:4c:05:73:9d:5d:83:67:91:c6:e1:e9:6a:
01:e4:79:bc:69:e1:44:86:88:f3:8d:1c:d7:17:cb:fc:7b:9f:
c5:af:6c:40:63:ff:6f:9b:ef:04:23:4b:54:23:7f:c4:fc:bc:
55:98:33:23:66:c5:e5:65:a6:a7:59:13:35:43:0f:73:9c:10:
93:81:4d:be:e9:70:b6:0c:7e:40:ed:2a:48:6e:9c:3d:6f:6b:
2a:dd:ef:da:2d:14:f2:fc:5a:8a:20:3f:33:7f:31:92:86:91:
2d:d5:73:a2:99:da:68:98:12:2d:e6:ab:63:0c:eb:e6:51:30:
e4:98:c3:0b:1b:f8:06:f8:52:4d:f9:94:03:b6:da:02:72:83:
11:36:27:c2:a2:d4:8b:b1:c0:11:97:a1:a2:2f:3e:24:f3:cc:
22:d9:f7:a8:fd:6f:9e:72:02:85:51:d7:ad:22:06:1b:9e:3e:
f3:58:5c:a5:aa:39:d6:d0:ca:e6:99:5f:01:85:95:a7:44:96:
4d:d6:16:3c:38:c6:57:14:60:ba:43:69:1d:bb:68:94:2a:69:
8c:d8:6b:4f:13:2a:74:fd:4a:92:b1:45:52:83:93:62:36:82:
c9:c1:f1:63:76:b2:ec:be:58:4c:60:46:d3:e4:22:f0:02:f4:
d1:9b:87:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:37 2025 by rpki-client