Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0lVSDUPNEGGqQoHY9GtXSiwD7Vo.roa
File: 0lVSDUPNEGGqQoHY9GtXSiwD7Vo.roa (raw, json)
Hash identifier: KZ9gyKvbFc7QVAdh2CaCVQI1UNAzHA+O0pUNh1dzlXk=
Subject key identifier: D2:55:52:0D:43:CD:10:61:AA:42:81:D8:F4:6B:57:4A:2C:03:ED:5A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191731D40E9F12BC6507CC40D40C63A4C70
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0lVSDUPNEGGqQoHY9GtXSiwD7Vo.roa
Signing time: Wed 21 Aug 2024 04:06:22 +0000
ROA not before: Wed 21 Aug 2024 04:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 22:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:73:1d:40:e9:f1:2b:c6:50:7c:c4:0d:40:c6:3a:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 21 04:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d255520d43cd1061aa4281d8f46b574a2c03ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:a1:00:ff:c5:a7:34:07:b3:ec:20:6a:e6:
b4:48:df:72:84:0a:8a:3b:b8:09:49:90:ac:0f:31:
98:c5:cf:0f:b5:30:11:ad:67:94:33:cf:89:f0:35:
73:31:9b:f2:f3:f9:60:3a:88:82:71:bf:b0:7c:dd:
4a:5c:7d:6a:95:4d:17:20:76:c6:66:51:20:14:91:
b5:3b:3e:10:4a:af:8f:54:f2:af:ce:11:92:81:ba:
e7:6e:2d:69:f2:69:0b:bd:59:b2:ea:6e:aa:5c:51:
6d:ee:37:30:f7:0d:38:14:44:f4:0d:6a:b7:45:04:
9a:06:bc:36:73:6f:b5:e1:33:be:84:63:73:7c:4e:
2e:64:c0:58:dd:74:df:ca:e0:06:6d:56:b4:9f:9e:
19:d7:19:96:20:7b:a4:67:df:97:ff:ee:a5:dc:7e:
7a:36:a6:b9:2f:06:f7:b5:0a:6e:13:9f:bd:d8:76:
55:c1:54:85:25:0a:87:b7:28:6f:a1:fc:bb:84:63:
9e:d6:60:4f:96:56:43:39:5c:97:cf:29:27:ae:63:
63:15:37:8e:cc:b3:8e:ca:c8:70:c9:d9:66:f8:84:
9d:99:e2:c4:a9:a5:8c:8a:74:9d:46:20:2a:96:bc:
3f:52:cf:94:35:89:f2:2c:aa:5f:90:cf:29:7c:81:
a5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:55:52:0D:43:CD:10:61:AA:42:81:D8:F4:6B:57:4A:2C:03:ED:5A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0lVSDUPNEGGqQoHY9GtXSiwD7Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.59.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.166.0-163.5.168.255
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5d:bb:cc:72:12:c9:c3:1d:14:b3:9b:6a:70:c3:eb:73:fa:
7e:01:59:9b:26:25:5c:7e:fd:03:60:be:85:a6:0c:4b:a5:ea:
dc:71:5c:5b:84:90:73:c8:cf:b0:11:55:de:80:51:67:99:df:
e7:1e:b1:aa:19:69:9e:fe:c0:d9:9c:c0:55:41:73:e0:43:8f:
50:97:cc:80:61:ac:43:f3:db:1e:e9:25:76:d0:51:7c:41:61:
92:80:0e:ff:a8:ed:a1:11:01:04:10:a6:ce:a5:a7:24:bd:0a:
ab:78:a6:0a:fe:32:6c:f4:e9:e9:74:17:3d:7b:31:15:08:73:
48:3f:7d:b9:8c:4f:95:f8:90:e1:7b:40:ed:3b:03:41:88:5e:
b8:e0:a2:63:69:da:20:09:2c:a9:29:03:b4:73:da:7b:36:df:
82:5b:42:4d:28:b4:1b:76:06:d8:37:f3:42:c6:84:fb:f7:6a:
f8:1a:9c:37:3a:51:56:91:4a:91:0c:d8:85:c8:13:1a:d3:6d:
90:77:a4:17:7b:8d:b8:30:26:4d:a3:24:60:ba:fd:a0:b1:f6:
05:e9:c7:56:2c:cb:b5:b5:fe:6c:57:1c:8a:0e:37:ac:4e:12:
c2:0d:cd:d1:e2:c9:d1:51:ee:16:4d:5e:49:ce:aa:e8:c0:8a:
76:64:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 23:44:01 2024 by rpki-client on console-fra.rpki-client.org