Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BcaHEoFCHgNSVW_IhhqqWJI0Zgc.roa
File: BcaHEoFCHgNSVW_IhhqqWJI0Zgc.roa (raw, json)
Hash identifier: 1X1GQ+fhMM+psNcFLxJWr/mWz0dI7P5Lo4xGFAbToms=
Subject key identifier: 05:C6:87:12:81:42:1E:03:52:55:6F:C8:86:1A:AA:58:92:34:66:07
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01859B090B356C1F0A793AC6E1E79D944409
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BcaHEoFCHgNSVW_IhhqqWJI0Zgc.roa
Signing time: Tue 10 Jan 2023 09:35:39 +0000
ROA not before: Tue 10 Jan 2023 09:35:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 163.5.71.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9b:09:0b:35:6c:1f:0a:79:3a:c6:e1:e7:9d:94:44:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 10 09:35:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05c6871281421e0352556fc8861aaa5892346607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:cb:06:12:d0:75:ac:01:2b:9a:18:6d:81:
84:db:63:fe:ed:a5:8c:88:a1:8b:41:16:58:fd:83:
98:fa:42:fa:bb:fc:a3:42:49:5e:13:b6:66:18:2d:
a7:3a:85:6f:66:b6:5b:b3:81:40:1e:bb:07:92:c4:
dc:3c:9b:f9:de:b7:5b:3f:b4:a2:4c:38:06:32:d9:
9b:4f:17:58:f1:00:54:c8:f5:e7:54:b0:90:30:6a:
61:d5:82:ff:e2:f8:ee:bd:d4:23:0d:00:ef:91:9b:
ad:e4:1f:b1:3c:c9:e0:e5:61:21:16:8a:b5:9b:07:
36:69:33:f3:ee:a3:d6:53:8f:68:15:a2:77:55:8c:
bc:35:aa:a5:15:36:c6:4d:2f:b6:b9:65:01:18:e6:
73:f4:3e:9d:b8:39:4a:0d:1e:32:5b:9c:3d:ea:2c:
6c:fb:88:9b:6d:1c:29:44:a1:d6:86:6a:d1:fa:f9:
ca:0a:4b:fe:44:54:3d:60:0e:16:ed:a2:cd:79:58:
6f:62:1a:ba:45:25:30:10:c7:b6:29:73:76:f7:07:
de:39:b4:b4:b3:7c:59:e3:c1:60:cc:7e:ea:c5:0b:
ee:b2:50:af:8b:63:bd:9c:75:c5:70:e7:59:b7:3c:
c6:14:54:97:47:8c:e5:41:41:e2:92:26:c1:47:16:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C6:87:12:81:42:1E:03:52:55:6F:C8:86:1A:AA:58:92:34:66:07
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BcaHEoFCHgNSVW_IhhqqWJI0Zgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.71.0/24
163.5.188.0/24
Signature Algorithm: sha256WithRSAEncryption
74:b0:12:ae:2d:23:81:c8:2b:fa:54:ce:eb:9e:94:9c:da:37:
05:2e:c6:98:18:3f:09:8e:d0:78:1d:0d:e3:ae:1a:2a:16:54:
b4:3b:a8:f2:8f:b0:d4:e6:3a:b4:a9:de:26:9b:42:38:9c:77:
7a:a5:14:83:f4:cb:b6:91:e5:70:82:b2:2b:8b:21:b7:96:dd:
bd:11:f2:26:ab:a3:17:ca:0b:df:41:da:f4:f2:3e:75:f5:71:
e2:4a:2e:b9:7e:b0:09:c7:05:89:4b:57:fc:fe:9b:25:bf:3e:
13:ae:6d:9d:6d:9f:42:68:c3:b9:b5:e9:40:dd:cf:a4:ef:6e:
e8:16:67:2e:94:c2:23:e1:f0:1a:12:ca:24:8c:db:5d:df:e5:
73:40:a8:af:b8:ea:68:b2:c8:9e:b3:7b:42:96:2a:a7:64:c8:
db:cc:f2:f0:cf:db:99:5d:2b:b5:1d:87:5d:32:cd:6a:50:8e:
d5:a1:ce:f8:76:e8:25:5e:c5:01:87:62:c3:1d:cb:3a:57:1b:
66:05:02:4a:32:d4:e6:ca:9b:9f:4b:7d:0d:9c:4e:96:8c:f6:
da:cf:5a:3c:c8:65:33:ea:1f:52:6c:41:3a:cd:c5:ef:8a:85:
a8:f5:8e:d8:07:a7:30:1b:d6:5d:2c:9b:70:93:aa:1e:f5:fa:
50:41:4f:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWbCQs1bB8KeTrG4eedlEQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTEwMDkzNTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWM2ODcxMjgxNDIxZTAzNTI1NTZmYzg4NjFhYWE1ODkyMzQ2NjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsvLBhLQdawBK5oYbYGE22P+7aWM
iKGLQRZY/YOY+kL6u/yjQkleE7ZmGC2nOoVvZrZbs4FAHrsHksTcPJv53rdbP7Si
TDgGMtmbTxdY8QBUyPXnVLCQMGph1YL/4vjuvdQjDQDvkZut5B+xPMng5WEhFoq1
mwc2aTPz7qPWU49oFaJ3VYy8NaqlFTbGTS+2uWUBGOZz9D6duDlKDR4yW5w96ixs
+4ibbRwpRKHWhmrR+vnKCkv+RFQ9YA4W7aLNeVhvYhq6RSUwEMe2KXN29wfeObS0
s3xZ48FgzH7qxQvuslCvi2O9nHXFcOdZtzzGFFSXR4zlQUHikibBRxb64QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAXGhxKBQh4DUlVvyIYaqliSNGYHMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQmNhSEVvRkNIZ05TVldfSWhocXFXSkkwWmdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowVHAwQA
owW8MA0GCSqGSIb3DQEBCwUAA4IBAQB0sBKuLSOByCv6VM7rnpSc2jcFLsaYGD8J
jtB4HQ3jrhoqFlS0O6jyj7DU5jq0qd4mm0I4nHd6pRSD9Mu2keVwgrIriyG3lt29
EfImq6MXygvfQdr08j519XHiSi65frAJxwWJS1f8/pslvz4Trm2dbZ9CaMO5telA
3c+k727oFmculMIj4fAaEsokjNtd3+VzQKivuOpossies3tCliqnZMjbzPLwz9uZ
XSu1HYddMs1qUI7Voc74duglXsUBh2LDHcs6VxtmBQJKMtTmypufS30NnE6WjPba
z1o8yGUz6h9SbEE6zcXvioWo9Y7YB6cwG9ZdLJtwk6oe9fpQQU87
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org