Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BWqCs2HQ4bsttdKayxNcHf_MbS0.roa
File: BWqCs2HQ4bsttdKayxNcHf_MbS0.roa (raw, json)
Hash identifier: /FKlKtSKs+PnWG/gFjuuP0xMmFJpIILYFrMHPN9m0JM=
Subject key identifier: 05:6A:82:B3:61:D0:E1:BB:2D:B5:D2:9A:CB:13:5C:1D:FF:CC:6D:2D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185E7997B97AAE13641B2151467FDC422DB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BWqCs2HQ4bsttdKayxNcHf_MbS0.roa
Signing time: Wed 25 Jan 2023 06:24:33 +0000
ROA not before: Wed 25 Jan 2023 06:24:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.233.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:99:7b:97:aa:e1:36:41:b2:15:14:67:fd:c4:22:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 25 06:24:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=056a82b361d0e1bb2db5d29acb135c1dffcc6d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:2b:33:07:db:03:c2:86:e8:67:6a:2b:8d:
e2:08:e8:5a:68:12:80:2c:3d:c4:b0:76:b6:b9:27:
8c:f7:9e:c4:98:d6:c7:45:c2:e2:27:ae:ee:ff:d1:
20:93:4f:1f:51:83:dc:e2:fb:f0:96:d8:8c:35:9a:
63:63:aa:3d:e0:23:00:62:44:cb:8b:03:83:5a:fa:
2d:08:d2:3a:7c:61:16:15:ae:96:71:d0:f2:b8:52:
74:86:51:f9:d5:b9:1d:4f:57:b5:d3:ec:50:c7:28:
ad:c0:54:a0:11:1a:de:84:1a:04:dc:6a:3c:aa:8a:
b8:8e:1f:2a:b8:f3:0b:02:c1:e1:aa:ad:fe:24:0b:
52:e3:7a:1a:82:d4:e3:91:12:7d:d9:3f:4d:bf:30:
12:38:66:d1:1c:27:10:04:fa:d4:20:53:63:8c:2c:
50:3c:c7:f5:f4:cb:ad:d9:bc:18:e2:cd:9e:01:97:
ea:6e:58:e9:9f:73:67:c7:5c:8a:bc:18:a8:c8:db:
ce:b9:00:6a:33:48:32:1f:b3:7c:77:7e:4f:b6:eb:
28:7c:76:82:10:54:40:f5:1a:c8:5a:55:00:87:92:
80:19:34:2e:ef:05:73:e1:9c:f7:d9:c0:9c:a3:d4:
20:72:fd:82:a8:c9:ee:36:61:01:3c:0d:3f:55:b3:
9a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6A:82:B3:61:D0:E1:BB:2D:B5:D2:9A:CB:13:5C:1D:FF:CC:6D:2D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BWqCs2HQ4bsttdKayxNcHf_MbS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.99.0-163.5.100.255
163.5.107.0/24
163.5.117.0/24
163.5.127.0/24
163.5.130.0/24
163.5.132.0/23
163.5.136.0/24
163.5.138.0/24
163.5.145.0/24
163.5.149.0/24
163.5.158.0/24
163.5.161.0/24
163.5.166.0/24
163.5.198.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/23
163.5.230.0/24
163.5.233.0/24
163.5.239.0-163.5.241.255
163.5.244.0/24
163.5.246.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d4:13:05:5d:35:dc:71:e7:f1:30:2d:83:21:c5:a3:b7:9e:
58:bd:93:78:6d:fd:42:1b:6c:5d:f5:7a:24:9f:26:36:36:57:
e8:6a:72:00:ae:2f:09:d3:18:b1:7b:8c:2e:5e:8f:77:7d:b8:
ef:58:14:ed:d4:1b:01:77:db:a9:4c:46:39:43:ab:5a:7c:51:
36:2a:24:42:36:a1:ec:65:f3:4f:ab:d7:82:56:7e:04:4a:b3:
96:9c:40:67:a5:be:a4:6e:7c:a4:45:6f:54:bf:18:94:8d:fa:
ea:76:fd:27:c7:a1:14:d9:c8:fb:50:bb:b9:69:c2:fc:e9:46:
08:53:f4:31:bf:5f:f2:a3:45:a0:4c:b8:63:12:4e:e1:32:6e:
ec:b8:1a:17:c8:87:4a:f2:76:0f:53:e4:66:c1:f5:44:39:5d:
d4:16:a2:bd:7c:41:ca:79:75:f5:5f:43:e6:ec:79:5f:8f:0c:
21:11:8f:78:bf:38:b7:84:67:51:70:e2:4d:b0:d0:57:67:e7:
50:f0:34:c2:bc:6f:ce:e7:04:fd:35:79:02:14:50:a2:e8:ae:
58:2a:3a:2d:ea:6e:78:c3:17:05:f3:dd:6b:23:89:68:1a:d0:
33:64:12:62:21:63:78:5a:5b:ee:0f:34:fa:4f:69:75:97:48:
20:f0:a2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org