Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-nbavsx80A9L7ZHelmgMzmX7PTs.roa
File: 1-nbavsx80A9L7ZHelmgMzmX7PTs.roa (raw, json)
Hash identifier: kCa8sWm83u5Wi87m1BjNTVEdImQgRsT7U0UH6QC4o5k=
Subject key identifier: FA:76:DA:BE:CC:7C:D0:0F:4B:ED:91:DE:96:68:0C:CE:65:FB:3D:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192E2CDF63B912ADB5CF3B28D296E722C73
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-nbavsx80A9L7ZHelmgMzmX7PTs.roa
Signing time: Thu 31 Oct 2024 13:40:01 +0000
ROA not before: Thu 31 Oct 2024 13:40:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 15:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:cd:f6:3b:91:2a:db:5c:f3:b2:8d:29:6e:72:2c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 31 13:40:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa76dabecc7cd00f4bed91de96680cce65fb3d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:34:f1:a8:6d:ed:6f:8d:c8:ab:74:ae:dd:
16:71:2e:e4:98:d8:e6:24:3e:ae:71:02:0b:4c:90:
3b:fa:b1:82:61:6d:7c:1f:12:f6:39:7f:1b:02:3a:
41:ff:19:7d:96:20:98:e4:b1:04:39:84:e0:d5:d6:
39:72:16:c9:cf:c4:db:f2:a6:bb:e7:06:7c:95:b5:
01:a8:f9:14:f5:1c:d3:65:63:6a:b7:40:5e:61:35:
ad:a2:a3:d4:cb:da:e6:8d:1e:a0:05:17:0f:69:15:
15:9e:be:b5:ff:e5:f4:88:9b:a5:f6:d6:d8:49:17:
d5:76:f0:b3:5a:02:5a:e2:31:08:8b:15:70:e8:3f:
18:8c:0c:9d:bc:c9:a2:5a:71:e0:19:f1:fe:ee:5f:
82:67:81:eb:c3:a3:97:27:8e:34:9e:15:f5:c8:7c:
8e:2c:01:1f:3b:18:8b:31:a5:04:86:25:d6:74:82:
4c:16:e9:1c:bf:d9:31:de:15:6a:7d:bb:77:42:4c:
51:3c:54:5c:21:07:88:fd:d4:73:d8:e6:52:64:89:
32:3a:a0:23:76:0d:a1:14:8f:0e:2a:cc:80:57:5d:
f1:07:1e:77:a8:f8:41:e0:7b:16:dd:d5:05:15:20:
b1:4d:9c:6c:b5:f1:ca:7d:a3:ff:62:2d:33:7d:c7:
a5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:76:DA:BE:CC:7C:D0:0F:4B:ED:91:DE:96:68:0C:CE:65:FB:3D:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-nbavsx80A9L7ZHelmgMzmX7PTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ad:77:4e:93:3f:0f:39:74:45:f5:ac:30:c8:a6:8b:89:91:
01:52:d2:14:65:da:9a:df:0c:bd:4b:39:4d:aa:aa:c4:21:a3:
1d:c0:ca:ed:c2:57:d7:0d:7e:91:96:ca:c8:b6:92:75:9f:a7:
f9:e9:26:32:b3:f7:d0:60:76:8a:dc:5e:15:0f:b9:e1:94:62:
21:02:94:67:14:b6:3f:90:c6:3a:8f:78:53:31:1a:3a:0f:42:
c9:36:f6:2c:8f:01:4f:51:54:a2:8e:c5:1c:90:fb:8d:9b:76:
1d:79:b0:11:33:a9:30:48:39:b8:c7:0a:7a:15:60:f1:d2:9e:
4e:45:26:98:bc:28:10:0f:0e:a1:74:b2:95:bc:49:e9:24:dc:
58:f0:c2:58:0f:36:5a:a0:4f:d5:a9:b7:91:41:5e:f3:42:06:
0f:b5:9e:55:04:51:59:7a:b8:a2:45:ab:8f:56:e9:0f:77:32:
ce:07:43:26:b9:62:f3:9b:7c:e9:0e:96:96:ff:f1:95:4d:1b:
19:1a:d5:0f:98:2c:97:25:8b:bc:8b:01:96:d1:9c:68:d1:54:
67:d1:12:25:6f:67:87:d2:2b:12:e2:8e:8b:1c:e7:4b:48:83:
66:25:3f:ad:c5:e8:ab:a5:bd:48:08:3a:c7:57:f7:7e:fb:fe:
e8:96:70:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 19:27:10 2024 by rpki-client on console-ams.rpki-client.org