Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2dnBOfOgFEbNmd3oPfwhF3YUMIg.roa
File: 2dnBOfOgFEbNmd3oPfwhF3YUMIg.roa (raw, json)
Hash identifier: IZLUxRbUEcRs7XMq+jW1X6rVtrBqtmFWqqKv0gGHDNM=
Subject key identifier: D9:D9:C1:39:F3:A0:14:46:CD:99:DD:E8:3D:FC:21:17:76:14:30:88
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196F30949930DBFE1799758C0894A7681A1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2dnBOfOgFEbNmd3oPfwhF3YUMIg.roa
Signing time: Wed 21 May 2025 13:29:54 +0000
ROA not before: Wed 21 May 2025 13:29:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 May 2025 11:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f3:09:49:93:0d:bf:e1:79:97:58:c0:89:4a:76:81:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 21 13:29:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9d9c139f3a01446cd99dde83dfc211776143088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:7d:62:46:c0:35:b0:96:97:75:73:19:f3:
20:97:9c:26:55:a5:c8:9e:13:e0:92:16:f6:a2:23:
81:af:f4:26:f5:ff:76:3f:0b:d1:9a:5e:81:71:5e:
e9:69:8a:07:7b:72:43:14:8a:0d:f5:c9:bd:da:58:
79:3f:55:59:23:de:a2:ee:4f:2d:46:c7:8e:b9:82:
b4:30:8f:f4:aa:79:70:52:44:50:cc:3d:c0:1c:81:
5d:d1:1b:9c:42:8d:d2:20:d9:0b:e6:8e:0b:06:69:
3e:b4:83:de:a0:25:26:c7:b4:75:f4:2f:74:6a:2d:
b6:da:84:ee:95:c3:7d:a5:f0:29:a4:c9:c0:a6:9c:
26:6b:a7:3d:ae:f7:9d:86:ad:e0:27:f5:fc:98:10:
16:e2:f8:51:85:58:49:8e:b4:4a:6a:8b:85:5f:06:
8a:bb:13:75:a9:47:6e:5d:80:e0:b4:47:a9:56:0b:
39:72:24:e5:98:2c:81:d3:58:1a:80:3b:f6:fb:5f:
8c:1d:1d:2d:06:02:3e:f2:bf:2f:86:be:91:19:d8:
e8:8e:78:8f:ac:1c:7d:7a:29:fa:ee:35:d8:13:16:
a9:f6:52:40:6f:31:60:dc:1c:02:50:4a:35:6f:7b:
83:32:f7:6e:8c:d8:6e:c6:7d:ac:a7:da:99:a7:26:
35:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:C1:39:F3:A0:14:46:CD:99:DD:E8:3D:FC:21:17:76:14:30:88
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2dnBOfOgFEbNmd3oPfwhF3YUMIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a5:91:0b:ae:55:de:7f:cc:fa:3d:5f:d0:1e:0e:7b:7f:a7:
c1:79:3f:73:10:cb:f9:de:9a:3c:ec:bc:ac:eb:84:25:a3:17:
54:27:bd:aa:59:d1:68:29:b2:0c:d5:2b:66:94:37:d0:0f:18:
6d:9b:09:56:9a:26:0a:11:5b:58:fd:24:86:64:b6:c0:af:b8:
27:92:2d:04:72:11:50:b3:82:b0:cc:d7:8c:a3:f3:55:66:b7:
46:0e:25:aa:09:e2:82:8c:d4:fa:4d:03:2b:af:66:a2:a0:d6:
b9:96:6f:e2:fd:6f:cf:7f:e9:58:88:b4:21:d0:85:e5:e3:75:
f9:51:03:51:35:e4:e4:81:85:36:a0:b7:3e:54:f8:f0:72:1f:
ef:76:61:bc:fd:d6:05:66:82:88:26:1d:b1:eb:fa:64:0b:34:
39:b8:ba:af:22:f7:ee:f4:33:9e:2f:a0:f2:17:aa:cc:6e:ea:
bf:4f:b8:87:18:65:07:0c:52:9a:9d:51:bc:2b:d5:63:ad:02:
02:3e:1a:66:cd:7e:97:ed:83:c7:02:89:be:4e:f6:dd:6e:c9:
90:62:38:56:74:56:bd:c8:d0:6b:e3:8e:06:0f:82:50:2f:66:
af:71:10:9c:1c:c7:be:ef:2a:58:ce:89:8c:06:a8:78:ca:bc:
d1:70:72:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:24:11 2025 by rpki-client