Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/wDxuO8a0_NCnt4WwUY0ie0Gh59g.roa
File: wDxuO8a0_NCnt4WwUY0ie0Gh59g.roa (raw, json)
Hash identifier: 7XQME+FGN2FwJF0KTLDsRjywjLtQwh89b9ExrT7FYSY=
Subject key identifier: C0:3C:6E:3B:C6:B4:FC:D0:A7:B7:85:B0:51:8D:22:7B:41:A1:E7:D8
Certificate issuer: /CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Certificate serial: 019329E231BD8D3936903B77B97F7D0953FD
Authority key identifier: 4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/wDxuO8a0_NCnt4WwUY0ie0Gh59g.roa
Signing time: Thu 14 Nov 2024 08:55:09 +0000
ROA not before: Thu 14 Nov 2024 08:55:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 163.162.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:e2:31:bd:8d:39:36:90:3b:77:b9:7f:7d:09:53:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b4fbfcf5fdc48ab0bfb52854f7a04fc1cff1dbd
Validity
Not Before: Nov 14 08:55:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c03c6e3bc6b4fcd0a7b785b0518d227b41a1e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:1b:a8:09:1d:f6:0c:a4:1c:e0:07:08:ba:
02:58:13:f1:9b:82:42:ca:b4:48:74:13:9e:78:03:
3f:40:b2:84:89:17:57:32:76:6b:22:f6:99:3c:1a:
2f:1a:71:d0:b0:99:b1:0a:40:57:3a:bf:9a:77:fa:
c6:5d:fc:ad:fa:dc:81:2a:58:54:06:13:0f:52:2a:
22:33:eb:9f:87:90:3d:03:06:ec:b5:af:65:e3:d7:
ba:ad:9a:55:54:c7:0a:8f:48:dd:55:eb:af:9b:cb:
23:13:4d:32:48:50:15:d7:c3:19:5b:3a:5b:b4:39:
72:8a:98:d2:0c:5c:58:97:fb:82:7d:b3:4c:b3:a2:
a3:47:07:a2:93:a6:29:b8:24:98:8c:e9:3b:31:7e:
d9:33:a4:dc:e2:08:e9:3c:ba:bb:65:75:b0:12:42:
8d:f2:ba:1a:ed:a5:32:e8:30:bf:50:46:03:a9:8f:
5c:3f:35:7c:ac:84:88:3e:04:d2:50:2a:c8:88:74:
06:3f:07:8e:c8:40:67:e7:c4:dd:a5:7e:d2:c4:70:
46:e8:92:53:ed:44:f5:4a:79:dc:ce:94:87:32:10:
df:88:fa:d9:ab:c4:ad:93:de:63:8a:e9:74:5b:79:
e2:4f:d7:20:2a:02:59:a4:7b:70:46:08:77:b0:26:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:6E:3B:C6:B4:FC:D0:A7:B7:85:B0:51:8D:22:7B:41:A1:E7:D8
X509v3 Authority Key Identifier:
keyid:4B:4F:BF:CF:5F:DC:48:AB:0B:FB:52:85:4F:7A:04:FC:1C:FF:1D:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/wDxuO8a0_NCnt4WwUY0ie0Gh59g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c60b1b-9b42-45eb-a582-92ddec6bd0a2/1/S0-_z1_cSKsL-1KFT3oE_Bz_Hb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.162.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:08:bf:57:66:ae:26:b2:ba:e6:ff:4f:71:1e:73:29:e9:3f:
c5:cc:67:bb:88:fc:8e:da:4c:a0:1d:9a:d5:bd:70:68:a2:b2:
cf:a0:2e:f0:91:5a:31:d9:82:e9:2b:c7:3e:b5:fd:68:e5:85:
0a:e6:e2:80:4d:d1:7b:2b:d9:80:81:24:11:40:a3:a1:bf:61:
7b:56:17:13:a1:7c:46:d5:a6:3c:50:f5:23:d4:12:f6:8d:b0:
81:d6:55:f9:ca:c0:b2:b0:ab:75:f1:9e:4a:26:1e:69:56:1c:
8c:46:2d:bd:91:f8:30:f2:a6:a5:64:12:6e:0a:d0:40:de:8a:
aa:b4:4a:48:69:4a:78:fb:ed:83:05:58:17:b4:39:ed:25:d6:
ed:54:22:3e:a9:ea:d2:86:c5:0b:6e:83:dc:1a:a7:b4:23:62:
61:e6:a4:91:4e:0f:c3:b9:d9:61:fd:97:b6:d9:e3:5b:1d:ae:
3f:da:46:92:6c:c8:cb:a3:d2:61:ab:7e:3a:c7:ab:d4:5c:74:
7b:07:c0:13:9c:0f:84:84:29:a6:bb:42:99:a6:17:78:75:ab:
dc:59:41:03:09:9f:df:df:61:c0:ab:39:51:cb:c1:14:2e:8f:
1b:bd:f7:b4:54:5f:ec:f9:f4:cc:36:ab:2a:5c:4d:17:07:41:
e8:35:6e:7a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZMp4jG9jTk2kDt3uX99CVP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNGZiZmNmNWZkYzQ4YWIwYmZiNTI4NTRmN2EwNGZjMWNm
ZjFkYmQwHhcNMjQxMTE0MDg1NTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDNjNmUzYmM2YjRmY2QwYTdiNzg1YjA1MThkMjI3YjQxYTFlN2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z4bqAkd9gykHOAHCLoCWBPxm4JC
yrRIdBOeeAM/QLKEiRdXMnZrIvaZPBovGnHQsJmxCkBXOr+ad/rGXfyt+tyBKlhU
BhMPUioiM+ufh5A9Awbsta9l49e6rZpVVMcKj0jdVeuvm8sjE00ySFAV18MZWzpb
tDlyipjSDFxYl/uCfbNMs6KjRweik6YpuCSYjOk7MX7ZM6Tc4gjpPLq7ZXWwEkKN
8roa7aUy6DC/UEYDqY9cPzV8rISIPgTSUCrIiHQGPweOyEBn58TdpX7SxHBG6JJT
7UT1SnnczpSHMhDfiPrZq8Stk95jiul0W3niT9cgKgJZpHtwRgh3sCaSvwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMA8bjvGtPzQp7eFsFGNIntBoefYMB8GA1UdIwQY
MBaAFEtPv89f3EirC/tShU96BPwc/x29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODIt
OTJkZGVjNmJkMGEyLzEvd0R4dU84YTBfTkNudDRXd1VZMGllMEdoNTlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9jNjBiMWItOWI0Mi00NWViLWE1ODItOTJkZGVjNmJkMGEy
LzEvUzAtX3oxX2NTS3NMLTFLRlQzb0VfQnpfSGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAo6IwDQYJ
KoZIhvcNAQELBQADggEBACsIv1dmriayuub/T3EecynpP8XMZ7uI/I7aTKAdmtW9
cGiiss+gLvCRWjHZgukrxz61/WjlhQrm4oBN0Xsr2YCBJBFAo6G/YXtWFxOhfEbV
pjxQ9SPUEvaNsIHWVfnKwLKwq3XxnkomHmlWHIxGLb2R+DDypqVkEm4K0EDeiqq0
SkhpSnj77YMFWBe0Oe0l1u1UIj6p6tKGxQtug9wap7QjYmHmpJFOD8O52WH9l7bZ
41sdrj/aRpJsyMuj0mGrfjrHq9RcdHsHwBOcD4SEKaa7QpmmF3h1q9xZQQMJn9/f
YcCrOVHLwRQujxu997RUX+z59Mw2qypcTRcHQeg1bno=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:38 2025 by rpki-client