Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yziJtfH1ZCDZwVm7qFMHM_Vd-f0.roa
File: yziJtfH1ZCDZwVm7qFMHM_Vd-f0.roa (raw, json)
Hash identifier: 8wpvCC3HCn5yC57UXXi7yWunFLn2PNk+k5JSch8krcI=
Subject key identifier: CB:38:89:B5:F1:F5:64:20:D9:C1:59:BB:A8:53:07:33:F5:5D:F9:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018635E951CAC4A412E29B69200C19B100A8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yziJtfH1ZCDZwVm7qFMHM_Vd-f0.roa
Signing time: Thu 09 Feb 2023 11:22:08 +0000
ROA not before: Thu 09 Feb 2023 11:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.67.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Apr 2023 04:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:e9:51:ca:c4:a4:12:e2:9b:69:20:0c:19:b1:00:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 9 11:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3889b5f1f56420d9c159bba8530733f55df9fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:9d:a6:1b:99:57:76:f0:f9:69:0d:2e:d6:
cf:cd:8f:2b:46:ef:31:80:b9:de:f3:34:e6:9c:76:
36:d5:b7:cd:6b:fe:4b:06:3e:41:67:a7:d1:b9:3d:
7f:99:a1:cf:2b:04:4d:e8:3d:b6:5c:cd:e3:f3:8f:
41:08:c4:5b:aa:0e:ab:6d:0a:ec:79:68:f6:87:c7:
41:ab:9d:bb:11:b4:68:ac:fe:9b:19:9e:90:e3:d8:
ab:97:9b:95:3a:fb:d5:d1:55:e7:78:81:e1:38:d5:
7e:88:84:fb:60:2d:4a:97:e0:70:62:d9:bb:d6:a9:
57:00:a3:e5:b5:ee:da:20:a7:6e:e8:30:66:3c:4b:
e5:60:f2:f5:9a:2c:d1:ba:5d:8f:d6:7f:fb:06:9a:
af:4a:35:da:3d:87:06:0c:a5:c3:dc:ec:37:cf:e0:
bf:47:86:cb:ef:25:34:9b:97:9e:48:67:5d:0b:19:
0b:c2:6b:03:44:7d:b0:8b:cd:54:92:90:94:4b:89:
c8:2b:7e:9f:5a:cc:b4:00:7e:b5:43:08:2b:b0:25:
9e:97:6a:d4:09:0e:b1:8f:d6:37:7f:19:f3:f9:83:
7f:6f:f9:bb:fb:7a:da:55:2a:9f:ed:cf:7b:84:66:
53:3d:e8:0c:d7:5c:19:ee:4c:96:07:ba:85:8a:f4:
43:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:38:89:B5:F1:F5:64:20:D9:C1:59:BB:A8:53:07:33:F5:5D:F9:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yziJtfH1ZCDZwVm7qFMHM_Vd-f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.58.0/24
163.5.67.0/24
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.165.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8f:99:5c:16:98:7b:2e:49:83:0e:43:2a:79:99:b6:12:9e:
cc:48:2f:08:67:56:75:bc:1f:d3:59:c7:12:ab:f5:9d:9e:16:
04:6f:75:04:6d:e8:a7:d5:92:20:b3:9b:da:bb:ee:e7:58:c0:
ac:bc:78:34:29:40:ef:f7:bb:80:2b:91:5e:fa:b2:60:77:a7:
00:70:f1:d9:99:4f:c9:3f:e0:fa:df:42:c4:5b:af:e8:25:77:
fc:02:13:c9:5f:5b:29:6a:57:f1:9c:65:fe:44:b8:4f:ab:4b:
7d:31:87:5b:f6:70:80:d5:55:9b:27:5d:13:58:15:b0:3c:45:
cf:f9:94:dd:f5:bc:88:01:0b:f4:fa:28:91:82:a1:ef:9b:71:
90:7b:be:90:23:2a:ef:30:05:6e:2f:38:b1:86:0c:b4:fc:d0:
80:40:f2:be:e5:f0:39:ea:a8:33:34:55:1f:9e:b0:0e:74:57:
1d:ac:9f:4a:fa:17:c8:c3:69:62:56:42:7e:29:9b:88:6e:f4:
89:97:11:10:5e:0a:04:1e:e9:e2:36:bf:a8:5c:7e:97:bc:fb:
cf:1e:ea:dd:fb:64:38:db:38:75:91:2c:57:80:24:0c:1e:a6:
97:f9:b7:ef:eb:c6:2f:ac:9b:90:7b:1a:fc:84:21:68:3c:01:
8e:b7:88:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:09 2024 by rpki-client on console-fra.rpki-client.org