Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bCcDiZJ48AwNDSv0z3JYlOwVADM.roa
File: bCcDiZJ48AwNDSv0z3JYlOwVADM.roa (raw, json)
Hash identifier: Bi6KwPazOMS4ww7UCjCij21/bXx2fS6JXuMyN0LAx34=
Subject key identifier: 6C:27:03:89:92:78:F0:0C:0D:0D:2B:F4:CF:72:58:94:EC:15:00:33
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B96C860CEE397C2AC9F99F57EB81E9EB0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bCcDiZJ48AwNDSv0z3JYlOwVADM.roa
Signing time: Fri 03 Nov 2023 20:03:16 +0000
ROA not before: Fri 03 Nov 2023 20:03:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:c8:60:ce:e3:97:c2:ac:9f:99:f5:7e:b8:1e:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 3 20:03:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c2703899278f00c0d0d2bf4cf725894ec150033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a7:19:1b:b9:2f:71:ac:91:9b:00:a5:1f:4c:
7f:08:e5:43:79:b9:b5:2c:13:d8:ed:61:38:e5:87:
8d:84:d9:f1:f1:af:61:ea:a5:17:34:9f:c5:19:dc:
be:61:c2:a5:da:cc:c0:89:ac:c7:cf:74:96:e3:d4:
f7:0b:d3:26:80:14:22:e0:65:9f:50:44:bd:07:d5:
39:55:a3:89:16:ab:3c:3f:5f:bc:50:1a:70:11:84:
ce:42:e9:a5:00:8d:25:d0:f3:03:b7:84:d3:24:ee:
8f:13:81:5e:47:ad:41:97:e5:a9:b1:d3:7d:42:ce:
b7:fa:53:c2:40:c1:a3:c9:84:aa:1a:42:d3:db:94:
1b:63:52:75:e0:dc:73:e2:3f:39:46:9d:87:a3:42:
b7:00:54:3f:9d:a1:b5:6d:f0:ab:4b:09:db:9a:40:
e0:75:70:ea:76:22:0e:67:d0:0d:37:d6:6b:48:e5:
f3:20:18:7c:8f:23:2b:8b:c2:11:0c:03:be:97:b7:
c0:1f:81:29:14:9a:f3:31:5f:58:75:ec:f0:74:b2:
0b:75:5a:d7:43:5a:6c:90:1f:82:f0:0a:2b:56:9e:
79:c9:8a:fa:01:79:d3:39:56:ae:67:77:1b:04:b2:
40:b8:43:24:61:1d:b3:4f:c2:60:36:0a:87:ce:11:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:27:03:89:92:78:F0:0C:0D:0D:2B:F4:CF:72:58:94:EC:15:00:33
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bCcDiZJ48AwNDSv0z3JYlOwVADM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.104.0/24
163.5.129.0/24
163.5.157.0/24
163.5.194.0/24
163.5.197.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:58:60:fc:a2:21:ad:4f:5b:2d:f9:03:2b:b5:31:ca:f9:0d:
af:e2:bf:43:ed:75:28:16:78:cb:96:f0:e8:65:3a:4f:44:d2:
ef:4d:9a:20:21:01:04:2b:4d:1b:4d:8a:52:f5:09:df:3e:0c:
26:79:05:35:b7:cc:ff:0f:48:c3:46:74:3e:8c:e6:8c:e2:5e:
09:ac:5f:ce:e3:2b:0b:6b:f6:a7:67:68:ac:68:2f:f2:d7:3b:
87:29:40:fe:28:ad:33:48:f6:b7:19:9c:9e:00:c7:7a:37:ca:
f9:2a:9c:4f:07:51:c4:77:06:8b:bf:a1:69:11:d5:20:26:6d:
f0:86:69:e5:98:11:59:c8:fa:92:8a:97:0f:86:74:9d:c8:9d:
9f:e2:bb:8a:97:69:95:b2:47:b3:25:bd:07:b5:b4:10:69:1a:
34:e6:5a:a2:62:0e:fb:0a:19:50:54:72:f3:43:a8:62:68:f6:
0f:21:73:ff:d0:1c:36:0c:a1:7f:c2:14:00:dc:f5:2d:07:40:
66:d3:22:97:7a:30:ca:45:1d:5c:60:8f:44:a1:28:2c:0a:5c:
87:5b:01:f7:de:e7:57:a8:fc:03:30:bc:d3:08:de:1d:ae:da:
4c:fd:98:77:cd:3f:81:fc:29:93:dd:9e:25:c6:60:67:84:6b:
4c:42:f8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 11 10:58:54 2023 by rpki-client on console-ams.rpki-client.org