Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BnknGz0slibSUBdsKf50USk8CyM.roa
File: BnknGz0slibSUBdsKf50USk8CyM.roa (raw, json)
Hash identifier: 73yGHHZqy+ckOfyUI1p94sQV/SuWOL+EYZoMeDt1LRs=
Subject key identifier: 06:79:27:1B:3D:2C:96:26:D2:50:17:6C:29:FE:74:51:29:3C:0B:23
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B28BA8C82434784CCE1625F191F5C10F6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BnknGz0slibSUBdsKf50USk8CyM.roa
Signing time: Fri 13 Oct 2023 11:09:56 +0000
ROA not before: Fri 13 Oct 2023 11:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 163.5.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:ba:8c:82:43:47:84:cc:e1:62:5f:19:1f:5c:10:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 13 11:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0679271b3d2c9626d250176c29fe7451293c0b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:cb:f6:81:df:8b:75:84:b0:91:a5:e3:c1:
2a:40:9a:2a:16:b7:d9:58:14:ea:a6:d6:66:70:72:
1f:8f:d8:6d:bc:8c:c1:ec:ab:c0:75:b4:eb:7f:8d:
95:30:18:5b:22:aa:55:51:12:4b:d8:24:e1:f8:c5:
55:96:21:31:e8:26:b6:94:3a:dd:0f:e8:a7:aa:4d:
ad:5d:89:30:d4:cb:71:be:ef:fe:06:a3:05:0d:d3:
06:18:f8:1c:e9:dd:6a:6d:59:33:9d:c7:ee:7f:f1:
b9:d6:b6:b7:65:81:64:67:0b:70:56:bf:e7:a8:e9:
c3:dc:9f:8c:ae:f7:6d:b9:7e:69:71:58:6f:dc:0f:
85:6c:0c:e7:4d:05:0c:83:6e:c4:ca:09:65:44:bd:
9f:67:96:d4:62:b1:97:45:6f:e4:2d:5c:9b:79:e9:
40:dc:29:73:6c:34:c2:b7:d4:77:78:a2:5c:57:8e:
ad:0b:f2:a7:85:82:66:4e:da:f5:05:5c:16:b4:67:
ac:39:55:5e:5d:f1:6b:d3:a8:96:ba:68:aa:64:43:
21:1e:90:7a:ca:ca:13:f2:4e:1f:6d:9e:f6:ca:f2:
71:88:4d:02:38:5b:b1:b7:a4:e3:ae:5d:20:4d:1c:
1c:6d:54:d5:21:21:08:a9:8a:dc:4d:74:ea:7a:71:
6e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:27:1B:3D:2C:96:26:D2:50:17:6C:29:FE:74:51:29:3C:0B:23
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BnknGz0slibSUBdsKf50USk8CyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1b:5c:a3:0b:ed:48:60:87:e0:e3:c6:94:9f:fd:ac:da:c4:
64:b7:03:f6:6f:2f:11:1c:0e:ca:8f:ac:cb:c8:68:e8:bc:72:
0d:ef:35:05:9b:16:ec:56:89:c6:7f:91:73:a3:b6:3e:90:a7:
d6:23:e9:45:b3:53:0c:a3:46:69:71:a1:65:39:f6:b4:ff:85:
4f:bc:bd:85:42:25:85:87:d2:4c:4b:5d:18:7f:64:db:e0:64:
0c:91:4d:b6:20:12:31:2a:0c:b1:31:0e:ea:57:ef:0b:5c:e2:
f8:73:8d:df:f6:a1:5c:9e:fd:b7:d1:de:c8:83:cd:01:b5:55:
99:81:bf:08:8b:af:8f:6a:10:33:3b:98:07:2b:88:7b:57:b0:
3b:29:db:c1:5a:a3:2b:c1:b2:53:9d:a8:76:3c:00:7b:a5:c1:
e7:e2:2c:2f:7a:dd:0e:08:9b:a9:24:cf:13:e3:cc:b5:db:17:
f0:05:0c:05:d2:57:ed:a5:a5:fc:f8:1a:00:eb:b7:ad:e4:67:
f7:be:3d:9b:04:17:66:0d:90:13:a4:5b:4e:14:33:3b:f5:71:
28:00:fa:5f:a2:36:b9:d0:95:96:58:4e:84:bf:16:6b:7b:64:
c0:b1:90:81:ba:20:a2:7d:6a:66:df:37:91:fa:b3:a4:b9:ce:
30:bc:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 07:14:19 2023 by rpki-client on console-ams.rpki-client.org