Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BTVMNAfkttWA8g-3eDn6zlfSudM.roa
File: BTVMNAfkttWA8g-3eDn6zlfSudM.roa (raw, json)
Hash identifier: 1COGZdylGkoJoMDnjN4aYjO2eVvdThYldwTlRiq1rA4=
Subject key identifier: 05:35:4C:34:07:E4:B6:D5:80:F2:0F:B7:78:39:FA:CE:57:D2:B9:D3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019376A08115B231C027A1F6A19B789ADE7E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BTVMNAfkttWA8g-3eDn6zlfSudM.roa
Signing time: Fri 29 Nov 2024 06:34:10 +0000
ROA not before: Fri 29 Nov 2024 06:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 163.5.7.0/24 maxlen: 24
163.5.8.0/24 maxlen: 24
163.5.9.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:a0:81:15:b2:31:c0:27:a1:f6:a1:9b:78:9a:de:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 29 06:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05354c3407e4b6d580f20fb77839face57d2b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:ce:bb:ba:22:12:e4:50:ef:50:89:56:51:
22:06:8a:a4:86:c3:02:b4:fd:11:b0:76:a6:ce:8e:
de:c6:6c:64:72:9b:76:74:5b:1c:b8:81:ef:66:e9:
1e:2e:3f:21:4a:e2:d7:85:f0:89:eb:1c:3f:c1:0f:
77:93:83:12:82:20:fd:91:dd:0c:67:e4:bf:e8:76:
97:a5:10:f1:07:76:ef:9d:54:5d:03:4c:5d:71:f0:
0e:55:31:96:66:08:25:de:2d:f1:c0:a9:df:59:c2:
08:55:5d:fb:e4:d7:c1:8f:31:7f:c2:9f:a5:72:11:
a1:74:59:62:2a:a4:04:5c:30:14:35:bd:04:b1:cd:
f2:1e:e4:af:94:95:5c:62:e5:af:9e:11:0c:0b:8b:
85:2c:40:87:24:1e:9c:50:88:57:e1:44:c7:31:c3:
e7:57:f1:f9:2b:ff:fb:53:9a:31:54:fd:5a:89:40:
d0:3b:e7:d5:ac:f9:76:15:c7:cb:e1:13:9f:c3:a0:
bf:1a:11:2e:12:6a:3c:a8:21:ac:ea:3e:81:e2:66:
c9:50:be:28:d4:3b:9d:83:11:55:e1:21:05:cf:5d:
a2:67:a9:30:cb:36:43:4c:22:03:07:73:df:af:30:
b6:8a:38:d5:85:d2:84:da:fa:e1:cd:e7:0b:09:82:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:4C:34:07:E4:B6:D5:80:F2:0F:B7:78:39:FA:CE:57:D2:B9:D3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BTVMNAfkttWA8g-3eDn6zlfSudM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.7.0-163.5.9.255
163.5.13.0/24
Signature Algorithm: sha256WithRSAEncryption
69:6a:30:d0:ec:c1:d7:70:69:d6:a5:f2:c3:7c:29:9c:09:cb:
02:6d:51:93:db:d6:2d:5d:70:d8:80:43:e6:df:4e:a7:4c:b3:
a1:d4:11:f6:45:0c:85:ed:87:f8:f6:f2:3d:8e:00:48:9f:57:
6a:29:12:47:50:43:da:f2:24:2c:73:99:a1:c5:1b:83:40:43:
52:18:9d:bd:db:af:89:b7:fa:73:28:4c:cc:fa:0d:94:82:7f:
e5:55:9a:c3:bc:28:5a:7c:48:cb:fe:53:19:ef:4e:1d:f2:f1:
08:20:31:f3:00:9d:04:a8:cf:75:45:ba:9b:69:2e:73:c8:03:
07:3d:5c:22:02:e9:08:21:47:9f:49:88:2f:73:ac:52:e5:a3:
02:22:64:ee:86:65:ba:ae:14:f6:fa:7c:87:de:02:3f:ab:0a:
92:7d:27:fc:f3:bf:f7:e2:67:a5:84:1c:67:71:89:0f:bb:73:
2b:20:e4:d3:a7:1f:14:74:ed:9d:cc:e4:57:e5:29:dd:c3:cc:
4b:ed:f8:9c:ba:99:e6:a3:09:63:54:9a:63:09:9b:68:85:bd:
e5:d1:90:63:7d:0e:f1:45:cc:6a:69:a9:f6:d5:f0:eb:71:73:
56:16:b9:7e:cd:2f:be:95:3d:53:86:28:c7:bf:85:fc:07:b3:
e5:0d:40:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:59:56 2025 by rpki-client