Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0EFD23ELUi-NupzFVxFQL5sz8Fs.roa
File: 0EFD23ELUi-NupzFVxFQL5sz8Fs.roa (raw, json)
Hash identifier: GQgXROHnY4I7rDw364OBzC7Tyy9wmd59/lNud5PmhX0=
Subject key identifier: D0:41:43:DB:71:0B:52:2F:8D:BA:9C:C5:57:11:50:2F:9B:33:F0:5B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4254D5B0ACBDC788BEAEAF744DF312D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0EFD23ELUi-NupzFVxFQL5sz8Fs.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:5b:0a:cb:dc:78:8b:ea:ea:f7:44:df:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d04143db710b522f8dba9cc55711502f9b33f05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:a1:c1:f7:19:4b:8f:73:02:8c:60:a9:d2:
cc:1e:b8:e1:0f:08:0a:26:96:8e:65:55:8f:b3:95:
81:8f:dd:5e:d1:c0:26:e5:5f:31:bd:10:07:e1:fd:
f5:43:9a:f1:c9:fa:5e:68:63:d9:46:09:5f:5c:e9:
f0:62:36:eb:77:f3:40:9e:49:14:36:a0:24:4a:a2:
f4:c3:a2:88:2a:c7:fa:3e:de:57:db:e0:16:df:5c:
52:f3:90:e5:77:73:1d:72:ac:91:51:ac:26:50:91:
c9:15:9f:14:1b:8c:99:33:a6:5c:2a:88:b9:3f:a2:
18:c3:b8:ba:2b:04:ce:53:1b:b0:94:c7:6a:f8:17:
38:fe:54:27:50:67:d8:59:b0:91:af:bc:d8:a8:97:
8d:84:78:5b:f7:40:72:9e:fc:df:91:ff:04:77:b6:
d1:49:5a:aa:fe:1a:f2:8a:49:30:5d:7d:f5:44:0a:
ab:03:ab:e2:f5:9e:0f:36:7c:9c:89:8b:c0:70:3b:
9b:00:55:26:3e:94:0d:8f:d8:34:9e:4f:33:0f:8f:
7e:4a:66:af:6d:b0:ca:46:38:63:ff:b8:f0:bc:1d:
98:70:3a:7b:a5:ae:52:93:0e:6e:77:0a:56:33:e0:
2e:0e:b7:7b:f2:0b:91:67:fa:52:81:ca:1f:fa:6b:
9b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:41:43:DB:71:0B:52:2F:8D:BA:9C:C5:57:11:50:2F:9B:33:F0:5B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0EFD23ELUi-NupzFVxFQL5sz8Fs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.66.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.106.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:fd:26:7a:f4:6e:ea:90:73:e9:36:76:b4:ed:92:a4:19:b7:
aa:5b:27:f9:69:47:d6:b7:9f:82:ad:95:df:6c:79:fd:56:fa:
a0:13:b5:c9:64:b0:1c:7a:e9:4f:b7:08:28:e8:98:7e:61:77:
14:f0:72:7c:6f:ea:2e:e8:90:b4:a7:db:93:01:db:e5:07:6b:
0f:45:27:c5:ee:8b:f3:f0:c5:e5:c2:3b:57:25:af:e2:3a:d9:
42:1c:e8:83:2a:fd:68:23:cf:6e:8c:36:6d:6f:18:e6:15:d5:
fe:a5:52:04:41:6a:8d:c0:7e:2b:70:94:d9:16:32:3c:22:69:
7b:63:9a:dd:ce:2a:af:86:89:51:d0:d2:f1:9f:d1:97:2c:b4:
75:94:fd:19:2e:bf:c8:44:df:6a:ca:64:bc:ee:61:ec:9a:96:
b0:1a:64:b6:eb:ff:8e:8d:69:21:27:32:d9:1f:7d:b6:8a:ae:
38:16:fd:34:f0:aa:83:ec:87:74:54:84:81:96:1e:0f:77:05:
1a:e1:f9:83:06:a6:69:c5:be:30:44:31:7e:b3:5c:64:54:14:
34:2d:07:4e:be:ca:f6:fd:db:56:f3:45:52:82:24:a0:71:76:
b5:96:bb:b8:46:fb:4a:2c:ea:13:99:76:ed:78:14:ce:3b:e5:
c5:83:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:22 2024 by rpki-client on console-fra.rpki-client.org