Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BngluhYFaqegq2Q4EHr4IbrxqQ8.roa
File: BngluhYFaqegq2Q4EHr4IbrxqQ8.roa (raw, json)
Hash identifier: 8mt4h6gDH45E1J/+iQhVEDufETm6M8OPUXp8v/t6PsM=
Subject key identifier: 06:78:25:BA:16:05:6A:A7:A0:AB:64:38:10:7A:F8:21:BA:F1:A9:0F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01857042B284BA685B74E767AD7A3A89001F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BngluhYFaqegq2Q4EHr4IbrxqQ8.roa
Signing time: Mon 02 Jan 2023 02:14:57 +0000
ROA not before: Mon 02 Jan 2023 02:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 163.5.199.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:b2:84:ba:68:5b:74:e7:67:ad:7a:3a:89:00:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 02:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=067825ba16056aa7a0ab6438107af821baf1a90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:30:64:e5:f3:9e:5a:30:4f:1d:d6:8d:1c:
f4:09:34:85:de:96:28:a9:b5:56:d9:e0:eb:d5:f5:
37:85:8f:b3:64:df:0a:b2:a1:e7:52:9e:25:00:d0:
01:e9:6b:c1:7c:21:16:5c:d8:f4:fb:56:1c:02:c1:
60:e1:97:89:10:39:b6:3c:9d:1f:41:17:2e:d8:52:
95:bb:13:7d:da:8b:ee:65:88:24:59:e7:81:dc:25:
3f:c7:a9:c3:69:51:b8:a3:5d:6d:e8:b1:fc:70:b1:
29:9d:73:39:2e:06:37:2b:e9:be:d5:d7:02:97:fc:
e1:f7:5e:8e:f6:b0:ec:82:78:4b:70:59:03:e0:7a:
59:d2:b2:c8:03:ed:d5:5f:ab:9c:39:74:59:0d:15:
d8:da:37:24:e8:1b:8c:0e:f5:5a:b0:fa:ee:99:eb:
68:a2:88:2b:47:03:44:4d:59:88:ef:90:8a:f0:96:
be:30:68:74:7e:5a:03:7e:f7:3a:42:3b:af:1c:3c:
ce:7d:23:6e:f2:e4:b2:d6:b0:7d:02:53:a9:cf:ae:
83:e3:d7:44:de:48:5f:66:15:71:8a:8b:aa:9a:a3:
a0:7d:e1:1f:85:fe:91:a2:db:bf:b4:c3:71:d9:56:
97:4c:46:23:d9:3e:23:f8:da:0c:c8:01:dd:9d:12:
3a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:78:25:BA:16:05:6A:A7:A0:AB:64:38:10:7A:F8:21:BA:F1:A9:0F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BngluhYFaqegq2Q4EHr4IbrxqQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0-163.5.157.255
163.5.199.0-163.5.200.255
163.5.206.0-163.5.209.255
Signature Algorithm: sha256WithRSAEncryption
00:a4:96:79:26:2f:c7:54:a2:f8:8a:7d:62:32:94:2a:e5:18:
76:9b:cc:77:e0:17:96:f7:e2:4d:f1:b6:e3:a4:af:e1:13:92:
33:44:32:ef:5a:18:e5:e7:73:01:b1:98:fa:82:3c:55:2c:08:
c0:d0:15:50:33:dd:60:ba:41:79:6d:32:a4:0d:9e:b0:8d:e2:
8d:83:7f:14:59:b1:19:9d:8d:63:d7:06:a0:dc:54:fb:12:57:
83:88:5c:34:1e:d8:7a:a9:22:69:19:cc:2c:dd:23:8f:fc:af:
ca:d8:45:6e:66:44:e1:05:0a:8a:97:7a:d2:ea:fe:a6:d7:77:
ae:6b:ff:b4:ec:b5:77:7b:55:f4:30:7f:c5:d7:e0:78:e4:15:
d1:cf:ad:f0:f7:ed:50:d4:73:54:31:f4:d0:7d:01:ce:81:ba:
1a:b9:34:b2:ea:af:a4:c6:33:dc:31:1b:20:d7:e3:82:cf:77:
52:35:a6:bd:e4:cf:af:e6:b4:af:f5:49:ed:37:72:38:29:a8:
a6:48:20:ba:a2:1a:f8:1b:ba:b0:06:ad:4b:b7:95:77:59:b9:
84:79:68:1f:f8:f7:b3:e3:40:6d:6d:51:6c:cc:96:77:bb:78:
f3:47:ec:25:cf:2a:45:f4:78:3b:b1:a2:9e:5e:af:7d:1f:41:
20:cd:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org