Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BCYi95PSNRZTtnzBcycYNpP-7uw.roa
File: BCYi95PSNRZTtnzBcycYNpP-7uw.roa (raw, json)
Hash identifier: srj5Xv8QmqxMDdt2RFhbtKnjgYs1gey8S2yfY0ULc/E=
Subject key identifier: 04:26:22:F7:93:D2:35:16:53:B6:7C:C1:73:27:18:36:93:FE:EE:EC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01939D1C1104354A368F1CFAC27977846550
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BCYi95PSNRZTtnzBcycYNpP-7uw.roa
Signing time: Fri 06 Dec 2024 17:54:42 +0000
ROA not before: Fri 06 Dec 2024 17:54:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202888
IP address blocks: 163.5.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:1c:11:04:35:4a:36:8f:1c:fa:c2:79:77:84:65:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 6 17:54:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=042622f793d2351653b67cc17327183693feeeec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:ae:79:ae:1f:ba:a4:eb:ff:34:c5:5d:b7:
17:0e:58:4a:82:e8:06:6f:e8:6d:da:db:36:b3:20:
07:0d:a5:4c:12:f3:05:e3:e7:03:02:f4:59:0d:8a:
74:93:2c:15:00:86:30:c0:0b:c4:73:7a:75:96:a2:
36:82:9e:81:74:57:8a:79:fd:c3:65:ba:5a:7e:76:
93:da:8d:4b:01:a6:5c:d5:d9:cc:8e:0a:81:81:99:
d1:52:85:e8:22:7e:82:e8:6c:0f:3c:61:7a:98:0c:
43:da:4f:55:ae:e5:26:d3:5e:f4:1a:03:e4:9e:8d:
a1:a3:fd:e9:9c:4e:ce:2a:5d:8f:5f:05:00:77:cf:
a1:d4:84:b5:3a:08:18:1a:05:56:15:3e:f3:30:c6:
f3:54:16:68:2a:d0:9e:f9:94:0e:a7:c0:45:18:37:
79:46:0c:5b:63:40:b1:ac:e6:d9:2d:f7:25:7f:a8:
b6:63:b2:8f:b1:e7:bb:f5:78:f2:6c:f6:3f:bb:f8:
97:ee:78:a0:a9:c3:61:72:aa:6f:45:70:c1:46:a5:
71:f5:9b:c0:ae:94:79:ba:b6:ab:c8:98:21:0d:cd:
28:50:aa:be:ff:23:c3:42:16:32:7f:5e:31:ba:0c:
1b:49:45:1f:de:c8:f4:eb:d9:56:be:35:88:fb:21:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:26:22:F7:93:D2:35:16:53:B6:7C:C1:73:27:18:36:93:FE:EE:EC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BCYi95PSNRZTtnzBcycYNpP-7uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.92.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9e:dc:ea:22:bb:24:3e:08:65:a8:45:64:4d:c5:64:f6:35:
6e:dd:47:b3:0e:d5:b0:2c:42:af:b5:0a:41:2d:24:e8:71:da:
fc:48:6d:4f:f5:02:6e:35:2c:34:e8:53:78:bf:11:62:79:6a:
40:ae:6e:4e:82:4c:66:08:4c:34:d5:03:ab:b9:ee:75:81:9e:
99:99:98:63:92:b8:62:05:04:49:9c:4d:bb:d6:2a:8d:49:db:
bc:57:d2:bb:f9:71:c4:41:b2:bc:1e:b6:cc:39:d6:2c:30:f8:
ec:89:fd:f0:58:bb:34:a4:85:ce:4c:fd:c9:47:ed:8f:2b:f5:
8a:be:ed:dc:f2:56:f3:1d:d3:b1:84:3f:91:73:d4:c9:de:e1:
04:5a:3f:99:77:e9:b5:85:c8:27:d9:c8:ce:74:df:30:fe:91:
2d:5b:37:3e:a1:40:5a:62:a6:ad:9f:e7:a2:8e:71:23:fc:4a:
c3:a4:b5:99:85:9e:00:e4:3a:76:65:2b:12:73:af:af:94:98:
8a:57:ee:43:dd:24:50:8d:ed:c8:cc:ba:4f:9a:6f:8a:8a:3c:
4f:c7:ee:6f:12:54:3a:37:6b:a0:58:53:22:6a:8e:32:56:30:
d8:6b:a1:c6:59:b6:77:e2:62:03:b7:cd:cc:b4:92:95:63:d5:
25:d8:8e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:29 2025 by rpki-client