Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bulu7BqYUnZSFIBdFMFtuIHNX5I.roa
File: Bulu7BqYUnZSFIBdFMFtuIHNX5I.roa (raw, json)
Hash identifier: lCCCkoMMM8EfBJVBmc1UaRgXySWJFsvM6CJDLSbock4=
Subject key identifier: 06:E9:6E:EC:1A:98:52:76:52:14:80:5D:14:C1:6D:B8:81:CD:5F:92
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018577337F567F1FE3CD45C622B94723C0CB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bulu7BqYUnZSFIBdFMFtuIHNX5I.roa
Signing time: Tue 03 Jan 2023 10:35:41 +0000
ROA not before: Tue 03 Jan 2023 10:35:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 163.5.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:33:7f:56:7f:1f:e3:cd:45:c6:22:b9:47:23:c0:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 3 10:35:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06e96eec1a9852765214805d14c16db881cd5f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:70:5b:a5:42:7c:0a:44:57:48:b7:6e:37:
c8:5b:d9:47:74:a6:af:02:26:d6:b9:bf:79:4f:38:
d2:05:41:2d:ec:e2:d2:9e:85:0b:5a:20:c9:af:5c:
7a:1c:a0:ad:57:10:a5:bb:03:fd:5d:67:a0:25:1d:
20:7e:c7:2c:59:3d:38:24:cc:ec:a2:00:1b:6c:3e:
59:96:39:a0:ca:c0:4a:08:8e:96:bd:96:2d:a3:a2:
39:96:d9:55:cd:c9:c7:75:54:8b:04:5d:d7:1e:f2:
e1:59:41:80:07:5f:d6:41:d5:47:a1:e6:a3:db:a7:
d0:05:1f:8f:c2:5a:7e:5e:09:ed:e1:ca:c9:82:d0:
98:40:d8:e6:f3:d2:ce:07:61:ff:38:b1:87:88:ed:
ee:b9:97:e1:15:b5:be:b0:ee:40:84:2a:2a:ef:fe:
17:35:50:64:bf:9f:6c:ed:e1:94:71:75:40:08:aa:
d2:31:c0:61:58:06:29:16:b5:2a:40:18:c3:8f:94:
82:57:d5:18:fc:8b:12:f1:ab:ea:7e:09:c0:39:2d:
f0:e7:f6:1c:fd:ed:47:51:8b:47:29:7d:4e:5d:b7:
48:ad:9a:e1:12:fb:a9:3e:6e:ff:98:24:cd:23:fe:
52:a8:d9:78:0b:0f:77:f2:3c:17:02:6c:72:31:cf:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E9:6E:EC:1A:98:52:76:52:14:80:5D:14:C1:6D:B8:81:CD:5F:92
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Bulu7BqYUnZSFIBdFMFtuIHNX5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.232.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:07:f4:40:41:be:4f:33:60:64:68:01:db:6e:14:a7:95:91:
a9:56:47:29:7b:5e:d3:93:55:0a:9f:d5:ef:c2:a4:a0:25:6a:
7f:10:91:74:6b:ae:c0:9d:e6:39:60:22:60:d0:9c:60:98:7b:
cb:3d:3d:be:f1:79:e6:38:51:64:b0:02:f4:dc:7a:a6:22:df:
1a:16:10:38:48:23:e8:b2:e3:2b:6e:86:d5:25:ee:3b:d4:f3:
0d:60:0f:90:1a:d3:9d:b7:13:8a:27:80:3f:87:67:80:d2:26:
db:dc:cf:56:39:91:60:40:00:fb:f1:a1:a3:a7:74:7e:ec:df:
eb:f2:23:7c:18:b3:ad:04:85:89:b9:e7:a9:e1:43:23:60:37:
cd:24:17:d6:1e:aa:24:ac:45:6b:35:27:15:71:ff:ce:5a:be:
48:97:ff:6b:5c:07:ef:35:fc:dd:78:76:34:43:70:3b:45:24:
04:04:17:4c:80:8e:81:58:f3:b2:3b:88:67:95:87:d6:20:72:
96:7e:91:c6:41:cd:95:48:30:13:64:f9:a7:57:38:fe:a2:86:
73:19:93:d5:b7:4d:b2:28:b4:c9:03:ae:c9:aa:15:6b:03:f1:
5e:3f:72:c9:ca:ae:58:7c:54:97:40:f4:21:0f:7d:d5:da:be:
d5:8d:d4:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV3M39Wfx/jzUXGIrlHI8DLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwMTAzMTAzNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmU5NmVlYzFhOTg1Mjc2NTIxNDgwNWQxNGMxNmRiODgxY2Q1ZjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSpwW6VCfApEV0i3bjfIW9lHdKav
AibWub95TzjSBUEt7OLSnoULWiDJr1x6HKCtVxCluwP9XWegJR0gfscsWT04JMzs
ogAbbD5ZljmgysBKCI6WvZYto6I5ltlVzcnHdVSLBF3XHvLhWUGAB1/WQdVHoeaj
26fQBR+Pwlp+Xgnt4crJgtCYQNjm89LOB2H/OLGHiO3uuZfhFbW+sO5AhCoq7/4X
NVBkv59s7eGUcXVACKrSMcBhWAYpFrUqQBjDj5SCV9UY/IsS8avqfgnAOS3w5/Yc
/e1HUYtHKX1OXbdIrZrhEvupPm7/mCTNI/5SqNl4Cw938jwXAmxyMc8FHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbpbuwamFJ2UhSAXRTBbbiBzV+SMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQnVsdTdCcVlVblpTRklCZEZNRnR1SUhOWDVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAowXoMA0G
CSqGSIb3DQEBCwUAA4IBAQCyB/RAQb5PM2BkaAHbbhSnlZGpVkcpe17Tk1UKn9Xv
wqSgJWp/EJF0a67AneY5YCJg0JxgmHvLPT2+8XnmOFFksAL03HqmIt8aFhA4SCPo
suMrbobVJe471PMNYA+QGtOdtxOKJ4A/h2eA0ibb3M9WOZFgQAD78aGjp3R+7N/r
8iN8GLOtBIWJueep4UMjYDfNJBfWHqokrEVrNScVcf/OWr5Il/9rXAfvNfzdeHY0
Q3A7RSQEBBdMgI6BWPOyO4hnlYfWIHKWfpHGQc2VSDATZPmnVzj+ooZzGZPVt02y
KLTJA67JqhVrA/FeP3LJyq5YfFSXQPQhD33V2r7VjdRm
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org