Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0D1vLlY_WIFIS5xGEgn2OLNvHdY.roa
File: 0D1vLlY_WIFIS5xGEgn2OLNvHdY.roa (raw, json)
Hash identifier: DWJahWUShboI3QcH6csfb7M3tbcOd952bx+EYTdbbNw=
Subject key identifier: D0:3D:6F:2E:56:3F:58:81:48:4B:9C:46:12:09:F6:38:B3:6F:1D:D6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019473CE49966A04C9081B4EE2C864E80A25
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0D1vLlY_WIFIS5xGEgn2OLNvHdY.roa
Signing time: Fri 17 Jan 2025 10:28:06 +0000
ROA not before: Fri 17 Jan 2025 10:28:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 10:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:ce:49:96:6a:04:c9:08:1b:4e:e2:c8:64:e8:0a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 17 10:28:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d03d6f2e563f5881484b9c461209f638b36f1dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:64:57:04:6f:8b:d7:a8:c4:88:7c:4c:d5:
10:4c:92:90:8b:c7:fc:8a:50:db:62:5a:a9:52:18:
6c:53:bb:a1:98:b9:a2:16:e3:65:63:68:47:aa:26:
5f:c3:5b:ce:c0:7f:1c:29:d8:6c:a3:50:da:71:23:
0c:b8:ff:76:0d:b9:bc:3c:fa:47:f3:d7:ef:7a:cb:
7f:26:4b:64:34:db:6f:33:45:5d:d9:72:09:7b:d9:
ee:c8:69:b1:9c:22:d0:9f:74:27:cc:7d:41:10:be:
ff:53:af:af:54:71:b2:64:c5:03:f9:e2:3e:ed:32:
59:e6:f9:d9:2a:8e:ac:8b:78:b1:08:49:82:9d:f2:
1c:5d:76:e0:4e:cb:42:bd:68:da:a0:60:bb:c5:f5:
c8:6a:d2:f0:aa:1e:5c:c0:99:43:04:1b:4e:1a:7b:
c1:21:1d:98:fd:63:25:80:e4:de:b6:29:e1:93:ac:
e4:70:92:ba:23:9e:19:54:56:45:41:b6:59:63:9d:
39:f0:a8:de:e2:46:5b:ff:24:9e:a7:96:47:1a:77:
4e:85:cd:f8:77:53:55:80:83:f2:de:1d:4c:48:c0:
2f:04:d6:72:ed:0e:c4:26:e5:10:59:ed:87:e7:dc:
6d:c1:b2:01:0d:23:55:66:cd:f3:4a:10:fc:02:46:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:6F:2E:56:3F:58:81:48:4B:9C:46:12:09:F6:38:B3:6F:1D:D6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0D1vLlY_WIFIS5xGEgn2OLNvHdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.167.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.212.0/24
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.231.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2b:31:c2:ef:cb:8e:c3:55:04:4a:15:cd:76:6a:19:65:7c:
4f:06:26:c1:1b:13:bd:20:fc:d7:e9:55:b2:da:eb:1f:80:9b:
02:8b:89:93:ee:12:a1:01:cf:63:e7:e9:bb:7b:02:68:1d:91:
ee:b7:31:d0:a0:8e:82:21:98:61:a5:ec:10:d3:d7:ee:f1:f2:
0f:3e:99:b0:c5:bb:db:0b:6d:34:a9:85:46:c7:53:55:69:70:
70:8f:b9:a5:fb:c9:97:9f:30:c4:75:7c:12:a2:09:09:f5:db:
4c:84:d8:7a:52:13:97:ed:27:ab:b5:f1:66:d8:a5:00:3f:c9:
c3:3a:9c:8a:f8:e1:a2:dc:68:ce:62:a0:a4:9b:c3:80:54:22:
9c:02:40:2d:23:b1:b0:ec:70:7b:09:ba:39:04:ec:35:9d:2a:
33:88:4d:16:31:37:f9:04:4f:10:a8:71:42:41:06:b2:e0:78:
92:78:c3:d6:ff:91:a9:21:eb:c6:8f:a0:eb:41:50:6c:76:70:
18:45:d2:44:8f:c2:7a:46:fb:e5:8a:0e:a1:1f:82:18:6a:e5:
c5:1b:c1:76:35:b1:6b:3c:72:86:62:6e:ce:02:87:1a:26:65:
ec:ac:da:ce:2c:7a:77:4a:a5:52:11:4f:ac:41:f2:c4:07:82:
7f:ae:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:28:11 2025 by rpki-client