Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BoKCuyieadbOxD9ZcH1jLDsDbZI.roa
File: BoKCuyieadbOxD9ZcH1jLDsDbZI.roa (raw, json)
Hash identifier: e19em/4Q0oO8xmh+Rny+myXTBH2tiYpjfouks6bEzCo=
Subject key identifier: 06:82:82:BB:28:9E:69:D6:CE:C4:3F:59:70:7D:63:2C:3B:03:6D:92
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01908E3C5BF9AE12B0E63D06460B5D339D88
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BoKCuyieadbOxD9ZcH1jLDsDbZI.roa
Signing time: Sun 07 Jul 2024 17:27:18 +0000
ROA not before: Sun 07 Jul 2024 17:27:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jul 2024 04:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8e:3c:5b:f9:ae:12:b0:e6:3d:06:46:0b:5d:33:9d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 7 17:27:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=068282bb289e69d6cec43f59707d632c3b036d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:38:bc:5c:5a:13:25:c2:d9:29:cd:a0:9a:
68:f3:82:d5:d5:7b:74:5f:37:05:b8:3a:8e:85:40:
bc:ff:10:8f:b2:c7:07:21:47:28:be:e0:c6:cf:f7:
a9:23:cd:59:33:3e:c7:38:2e:58:72:f7:5f:88:e0:
9b:20:1f:30:a8:16:79:98:77:af:62:0f:02:ec:8e:
c3:34:66:2c:e8:1f:16:69:48:7d:a3:93:9b:52:82:
68:d3:41:51:78:0b:72:fd:15:32:49:32:fa:d6:6d:
df:3a:12:ee:26:1a:f0:c9:b4:07:1c:e7:72:70:eb:
ab:1e:9f:fc:5f:9b:03:07:80:8b:7d:7b:3a:b3:de:
02:83:74:84:5e:06:b3:9a:eb:61:07:dd:98:32:2c:
8f:7b:9f:6e:bf:7f:e3:44:31:c8:09:bb:99:f1:9d:
c7:ce:a7:c2:ce:fd:d5:56:1a:32:31:f2:43:41:2e:
73:8a:a0:ac:b4:a5:63:3d:6d:a9:11:51:16:8a:c9:
2b:23:a5:69:bb:c7:e3:7a:1e:12:86:f0:29:40:16:
ca:f2:72:e4:5d:b4:22:97:8f:88:40:e6:f5:7d:7c:
17:c4:ef:6d:ff:e4:85:fd:02:0f:e2:51:79:16:85:
48:11:cd:4a:9f:c1:5d:b5:85:f1:2b:2e:f1:e5:5d:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:82:82:BB:28:9E:69:D6:CE:C4:3F:59:70:7D:63:2C:3B:03:6D:92
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BoKCuyieadbOxD9ZcH1jLDsDbZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.71.0/24
163.5.73.0/24
163.5.89.0/24
163.5.94.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
06:15:89:15:dc:9e:d7:9b:46:14:a2:60:d9:34:08:b3:73:80:
16:53:55:0f:4f:99:32:cd:fd:3e:e8:9e:22:f7:f5:61:40:82:
7b:1f:43:aa:e5:c3:02:06:96:b2:4e:0a:36:b5:d7:3b:24:72:
c1:b9:6f:7b:03:da:fb:75:c9:b8:b2:6e:04:29:8b:e8:98:2e:
94:5e:ca:8a:3c:b4:f2:16:3c:a6:b6:26:3c:16:29:17:7d:e7:
b4:a5:f7:ea:19:15:2b:0d:86:e9:09:27:63:44:e4:ca:5e:40:
51:9b:ee:fa:f6:d1:39:c1:41:02:f7:c8:38:9a:16:37:32:44:
6e:28:7c:f5:27:72:d9:82:70:11:62:8b:31:25:4c:01:4a:51:
11:b9:66:1b:ac:f5:f5:69:89:bf:ee:fc:7e:29:be:58:7e:bb:
01:bd:48:1b:16:e0:61:da:70:16:80:dd:2b:66:ed:b4:d8:cb:
ac:b5:2d:45:26:de:7c:68:a2:23:8d:bb:e0:46:bb:75:ba:f3:
fc:6d:97:d2:39:7d:6f:c2:37:4a:dc:2a:49:26:5a:29:7e:66:
29:a1:46:92:6e:ab:ef:c3:c9:83:89:33:cb:38:12:1d:f3:fd:
d4:5f:8b:5d:99:13:f6:bf:7d:9d:b2:36:9c:93:c5:5d:43:38:
4f:63:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 05:45:13 2024 by rpki-client on console-fra.rpki-client.org