Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BlvA1PKBRvTwd7A3DLIrP4w1z2U.roa
File: BlvA1PKBRvTwd7A3DLIrP4w1z2U.roa (raw, json)
Hash identifier: 2yX2DRTEJzrkL5FbmQOfnmkwOz5C6QVKvgk8na1P6qI=
Subject key identifier: 06:5B:C0:D4:F2:81:46:F4:F0:77:B0:37:0C:B2:2B:3F:8C:35:CF:65
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B022ED0D5D47BB5BBCD10C959B0EB5F4C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BlvA1PKBRvTwd7A3DLIrP4w1z2U.roa
Signing time: Thu 05 Oct 2023 23:31:44 +0000
ROA not before: Thu 05 Oct 2023 23:31:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:02:2e:d0:d5:d4:7b:b5:bb:cd:10:c9:59:b0:eb:5f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 5 23:31:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=065bc0d4f28146f4f077b0370cb22b3f8c35cf65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:6a:4c:04:ed:dc:58:31:05:76:42:11:c6:
f1:d5:88:5b:91:8d:cf:3b:6d:5a:eb:92:14:b1:36:
0c:2e:84:3b:38:6e:d7:1a:de:45:84:11:59:49:14:
e7:29:19:8a:c6:b7:51:2f:4f:4e:a8:22:5e:6e:7a:
b7:f9:35:d6:77:15:22:f5:35:b0:58:13:3e:16:17:
02:67:5c:36:5b:fc:80:cd:91:05:1e:8b:6d:08:96:
66:33:d9:14:f6:46:d3:52:a8:1f:89:ca:82:8f:44:
da:a6:f8:c3:0e:be:43:a4:7d:40:c3:88:07:25:e1:
a9:8a:3b:16:e9:34:36:a8:e9:f1:3f:29:68:a3:a9:
35:31:28:2a:c5:95:43:be:f0:a6:fd:bc:8e:0f:90:
e4:fc:1d:02:86:fe:79:44:44:fc:08:b3:49:9d:a4:
a5:23:ed:c5:70:88:6f:51:56:71:c7:89:2a:c3:7c:
e8:dd:8d:8d:de:df:92:a2:b2:7d:b8:2b:58:0e:85:
ac:71:5d:69:0d:48:e1:c4:22:ab:db:a0:b6:dd:2e:
d6:f6:24:ed:62:38:90:9a:2c:13:16:6f:56:7e:48:
b2:6b:07:7d:9e:7d:3e:dd:73:57:bc:8f:d2:33:1c:
dd:a2:9f:96:ba:ff:58:fd:4c:2e:79:a7:eb:82:b9:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:C0:D4:F2:81:46:F4:F0:77:B0:37:0C:B2:2B:3F:8C:35:CF:65
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BlvA1PKBRvTwd7A3DLIrP4w1z2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.144.0/24
163.5.154.0/24
163.5.192.0/23
163.5.213.0-163.5.214.255
Signature Algorithm: sha256WithRSAEncryption
20:8b:43:fe:92:01:cb:06:37:65:08:4e:54:a6:6b:12:ae:f6:
43:68:00:51:d3:1f:ec:8e:b5:62:82:91:f1:23:d7:8b:ed:89:
18:30:ab:a3:3f:b5:3b:3e:f8:de:53:45:84:45:9b:18:ee:c0:
15:98:0d:8f:61:12:00:81:19:d4:a3:65:a5:e8:1b:11:eb:88:
4b:6b:44:89:d5:b4:3b:24:54:a3:74:c4:3d:f0:d7:48:3d:95:
73:f3:50:d7:cd:7d:2c:54:36:a0:47:21:3c:05:3f:83:3b:94:
d9:93:8f:e9:17:b5:bb:60:61:0d:8f:7a:cf:a7:5f:27:bf:85:
9d:eb:69:9a:8f:d2:a8:d2:3b:bd:fb:e2:7e:bc:98:11:4c:18:
75:ff:e1:cc:aa:86:e6:70:78:2b:50:3d:a8:4c:08:56:71:bf:
e5:34:5c:8b:32:a5:25:9c:28:1c:f1:b5:9f:e2:e5:96:dd:82:
ee:93:ea:8b:ba:7f:a3:33:dc:e2:06:71:5a:2a:aa:77:54:87:
05:4f:8c:7c:e2:85:6e:ff:88:05:75:5d:c8:9d:f1:f3:5e:4e:
c1:49:10:af:1e:1f:87:5a:6f:f8:2b:b4:b2:9e:91:a6:2c:d8:
f6:28:8d:b4:83:c4:ea:2c:91:77:f3:90:07:29:1a:aa:48:ed:
69:ab:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:32 2024 by rpki-client on console-ams.rpki-client.org