Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0XW5h1taRu-n6obLBw3LYiGYDiw.roa
File: 0XW5h1taRu-n6obLBw3LYiGYDiw.roa (raw, json)
Hash identifier: CxZT4U55nTnEAIikZIaZ5dLBO2L9SzKQRiAOou0hH+E=
Subject key identifier: D1:75:B9:87:5B:5A:46:EF:A7:EA:86:CB:07:0D:CB:62:21:98:0E:2C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F169632FD2020E8641B435595B2797398
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0XW5h1taRu-n6obLBw3LYiGYDiw.roa
Signing time: Thu 25 Apr 2024 18:48:13 +0000
ROA not before: Thu 25 Apr 2024 18:48:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Apr 2024 15:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:16:96:32:fd:20:20:e8:64:1b:43:55:95:b2:79:73:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 25 18:48:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d175b9875b5a46efa7ea86cb070dcb6221980e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ea:bf:77:a9:0d:b0:da:6e:de:23:c1:d9:65:
9a:d9:13:71:1d:59:17:02:aa:bb:c3:11:c9:b9:ee:
ef:99:e0:41:b9:ef:1e:33:f7:19:40:66:ac:83:13:
4b:c3:86:40:be:d3:5d:3d:3f:4a:31:ad:0b:e5:88:
60:f5:46:1b:b3:0b:cc:68:91:98:20:44:d4:cb:0e:
d4:99:0f:ea:19:e4:b0:00:a4:5f:41:43:85:f8:f8:
8a:f1:5f:1d:ab:94:05:e9:98:65:b8:e3:59:3d:22:
70:66:d4:38:3c:48:17:15:86:9c:d0:ff:1c:e5:a4:
5b:39:cc:39:b4:f8:87:61:34:d1:f3:36:90:d9:48:
bf:08:c3:ab:e7:17:9c:98:90:52:d7:27:25:29:1a:
4e:75:c8:5d:c8:cd:ec:81:6a:44:8e:a7:fc:16:60:
aa:8b:8a:03:74:f2:1d:ce:86:61:7c:09:ec:74:99:
14:2c:80:02:26:19:b3:57:95:f6:c5:06:6c:b3:7d:
77:bc:54:36:af:65:74:61:df:25:5a:a2:3d:8b:ae:
ba:d2:52:4e:79:1f:3f:93:a5:d4:3a:18:19:c1:76:
15:fa:49:f5:30:73:b8:3b:fa:2d:cb:48:a2:35:88:
99:8e:33:d7:78:ea:82:e5:57:82:85:43:73:c7:80:
cf:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:75:B9:87:5B:5A:46:EF:A7:EA:86:CB:07:0D:CB:62:21:98:0E:2C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0XW5h1taRu-n6obLBw3LYiGYDiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0/24
163.5.126.0/24
163.5.128.0/23
163.5.134.0/24
163.5.136.0/24
163.5.139.0-163.5.140.255
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.154.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.171.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:98:26:c3:23:38:7f:f9:95:1d:2d:ae:c6:2f:a7:55:9d:f1:
c3:2e:a8:39:48:5e:6a:56:0d:99:18:cf:6e:42:68:99:8e:5c:
92:7d:d0:fb:44:b7:64:b2:c0:f6:ed:e9:62:5c:27:0a:fa:54:
21:52:2f:35:e2:58:20:cf:23:0e:08:6d:9e:d1:c6:95:6d:5c:
78:41:96:57:4e:03:4b:66:22:19:d2:b0:f4:6f:c4:c7:f1:e8:
86:f4:2b:19:b2:8d:3d:4f:8a:6f:97:81:de:9a:ce:27:cc:35:
43:7c:03:68:f7:26:8d:cb:de:bc:54:70:c7:85:9d:44:75:ce:
c1:78:a1:a7:59:cc:33:86:12:2a:b7:fd:f0:c0:d5:78:a8:7f:
83:4c:74:c3:ea:90:93:22:a0:fa:3d:a1:05:4a:d4:6e:40:1d:
4a:ef:36:06:6b:cd:3d:da:91:d6:24:be:da:f5:e1:fb:a0:b9:
a7:b4:43:8a:10:c8:cb:40:49:60:21:ac:1a:37:79:61:6e:0a:
74:50:70:8c:b8:e9:d8:29:ca:a3:5c:14:e2:5c:6b:08:9d:e6:
63:eb:e1:bd:d9:e8:fa:7e:f3:1f:c7:e6:a5:ab:e4:99:49:c2:
cd:b6:7e:14:c7:90:62:cc:dc:ad:d4:f9:bd:48:2f:24:3f:3b:
ee:c0:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 19:21:21 2024 by rpki-client on console-fra.rpki-client.org