Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bm3UKnX8yIzeSCihnAjPSjPSklQ.roa
File: Bm3UKnX8yIzeSCihnAjPSjPSklQ.roa (raw, json)
Hash identifier: mpJxWJtRHwUaEfZdqSPwuVdZNOOvxAPerCNGl5Ecs44=
Subject key identifier: 06:6D:D4:2A:75:FC:C8:8C:DE:48:28:A1:9C:08:CF:4A:33:D2:92:54
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01926CD4B4671D063458CC977A4914C1A89D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bm3UKnX8yIzeSCihnAjPSjPSklQ.roa
Signing time: Tue 08 Oct 2024 15:52:12 +0000
ROA not before: Tue 08 Oct 2024 15:52:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 163.5.36.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6c:d4:b4:67:1d:06:34:58:cc:97:7a:49:14:c1:a8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 8 15:52:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=066dd42a75fcc88cde4828a19c08cf4a33d29254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:7f:29:c4:22:ac:18:bd:a5:e0:5f:6f:c7:
94:bf:4b:8c:9d:79:1a:d9:73:45:61:44:d4:41:ca:
c4:c3:a9:3e:3c:72:32:0a:60:cd:d2:f2:58:42:6b:
aa:82:48:48:3b:1c:93:4d:d1:f8:9e:60:e8:f6:01:
2c:ef:7c:a6:31:a2:8b:b6:72:39:1e:a8:ea:1a:61:
e1:d0:7d:cd:47:45:df:a6:eb:87:c4:7a:a4:80:b9:
af:b8:6f:0c:bd:2a:ba:f9:d8:80:df:2e:04:39:f6:
1f:0b:b3:a6:21:41:b1:1a:c8:5f:ac:26:a9:94:55:
34:51:4d:cb:7b:de:09:d3:ca:8e:c8:bf:0b:92:72:
90:2b:e6:aa:9e:d8:3f:4a:77:f0:ee:c9:b5:fe:0a:
9b:60:60:36:98:38:11:87:22:e2:55:e7:ad:54:40:
07:88:67:fd:e5:8e:9c:d6:b3:83:d5:7f:e4:83:95:
23:cb:3c:26:e0:8d:5f:34:68:40:b9:e6:0c:8e:c8:
89:92:61:b3:7d:9b:29:1c:bf:c1:9d:b3:f9:6b:5a:
dd:3b:2b:c8:4b:fc:f7:e5:6a:a2:21:23:4d:e4:40:
56:e6:d9:b1:20:38:11:31:3c:ba:63:64:90:b3:f4:
94:7a:7d:23:00:95:30:56:75:1b:db:fb:99:65:d5:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:D4:2A:75:FC:C8:8C:DE:48:28:A1:9C:08:CF:4A:33:D2:92:54
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bm3UKnX8yIzeSCihnAjPSjPSklQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.36.0/24
163.5.71.0/24
163.5.82.0/24
163.5.87.0/24
163.5.95.0/24
163.5.99.0/24
163.5.124.0/23
163.5.127.0/24
163.5.136.0/24
163.5.138.0/24
163.5.181.0/24
163.5.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b8:ef:75:ca:29:0d:2e:65:30:60:52:c7:fd:98:ae:90:cb:
72:e5:58:8e:f0:b4:60:5d:e4:f5:51:98:51:cc:fc:0f:e1:8e:
39:19:5b:b8:4a:d0:05:d5:af:98:0d:1d:fb:a5:af:ac:90:4d:
5d:76:cc:7f:a9:68:db:7b:c2:34:be:52:51:d2:ac:1f:5e:d6:
5b:31:56:da:09:02:4f:9e:63:07:76:a5:06:2d:99:d4:44:89:
d8:42:6a:77:bc:0e:d3:68:01:e4:f6:a5:3f:1e:5d:f2:ea:45:
b8:e3:5f:ec:1b:34:f9:5f:ac:c8:6c:0d:b2:97:69:58:52:a4:
a5:7e:b8:ff:66:d0:37:d8:8d:79:fd:40:7f:90:01:bb:51:4e:
7d:a2:5b:31:05:cb:34:e3:58:65:f9:20:0e:0e:6c:53:f7:10:
4f:21:4a:f1:24:dd:6f:4e:49:ac:25:c4:f6:e2:60:ad:a6:b7:
dc:1b:cd:2a:90:27:4f:77:b8:3e:45:78:7a:ae:11:08:ce:56:
f4:ed:f4:ab:a0:94:47:54:57:2d:39:e7:06:1b:52:32:57:2c:
15:4a:03:9e:de:11:e5:11:d3:59:da:70:7a:ab:db:9b:a4:18:
d9:16:9e:f5:b1:a4:da:f8:14:df:60:7d:95:d1:df:45:a3:74:
dd:65:74:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 18 13:32:29 2024 by rpki-client on console-ams.rpki-client.org