Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3a248A9oiBgG437q04TWcy8Li1w.roa
File: 3a248A9oiBgG437q04TWcy8Li1w.roa (raw, json)
Hash identifier: bXUzsxSi/r2aF7V/iMpZxGbliykIShBl/4BHc81JNEw=
Subject key identifier: DD:AD:B8:F0:0F:68:88:18:06:E3:7E:EA:D3:84:D6:73:2F:0B:8B:5C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EE86CC4C8696E24E3C47A209AA32F758C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3a248A9oiBgG437q04TWcy8Li1w.roa
Signing time: Tue 16 Apr 2024 19:40:26 +0000
ROA not before: Tue 16 Apr 2024 19:40:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:42:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e8:6c:c4:c8:69:6e:24:e3:c4:7a:20:9a:a3:2f:75:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 16 19:40:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddadb8f00f68881806e37eead384d6732f0b8b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:76:0d:65:a6:a8:f0:65:13:0e:64:ad:d9:9e:
58:ec:22:e9:a9:2a:d0:a4:91:d6:e2:27:1b:73:94:
5b:d9:5d:df:21:7c:e7:ce:13:5a:34:e4:23:74:d2:
6f:45:40:0b:bc:9e:4c:56:93:61:8a:ec:32:3a:5f:
f1:eb:2b:38:16:01:ba:64:d2:a0:fd:b4:2e:c9:0d:
ed:9b:6c:19:0d:2c:e5:20:e6:5a:92:ad:b2:3b:29:
f1:30:75:c0:99:55:5b:05:f6:d3:4b:a2:0e:41:0c:
02:22:fa:9f:67:73:eb:9e:8e:d6:be:9d:94:31:64:
97:4a:5b:1b:90:73:67:4b:35:67:c8:e5:3e:2f:1a:
76:9c:31:1e:74:e9:13:ea:09:8b:65:3a:98:71:6f:
60:5f:5b:02:0c:e2:39:14:fc:31:64:04:0d:fe:60:
29:39:f6:1a:2a:23:84:20:12:1b:53:08:aa:d8:67:
e2:f4:0d:ea:88:a5:43:a6:5f:28:5f:c2:85:4e:de:
24:ea:54:04:e0:17:1b:83:a1:3c:38:61:1d:ce:8b:
59:ec:40:ac:ac:89:05:5b:c3:85:0b:37:64:55:44:
6d:a1:2e:83:51:84:c5:f5:5a:77:3d:16:5b:5f:00:
de:91:ea:94:12:b3:d9:7b:61:25:07:07:df:12:98:
51:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AD:B8:F0:0F:68:88:18:06:E3:7E:EA:D3:84:D6:73:2F:0B:8B:5C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3a248A9oiBgG437q04TWcy8Li1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0/24
163.5.126.0/24
163.5.128.0/23
163.5.134.0/24
163.5.139.0-163.5.140.255
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.154.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.171.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.211.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:01:00:95:e8:ba:72:96:6a:67:ab:74:d7:26:84:39:ce:57:
49:08:d6:dd:37:db:78:a8:37:ec:21:3c:c9:7d:63:e8:fb:ab:
a6:5b:3d:96:71:5f:da:ac:84:3c:fd:d8:0f:09:25:d4:c8:b2:
c2:28:d2:17:4b:7f:4d:a7:fd:34:84:b9:f0:04:c6:6a:0c:37:
58:5a:d4:4e:ce:cf:10:b2:5d:5a:49:d0:c7:91:b0:43:10:f7:
53:2a:41:07:27:58:4c:91:28:56:57:24:f4:df:d2:5e:35:29:
f6:de:6d:0e:d7:9a:93:3c:d8:d6:68:4a:e3:62:11:bd:49:65:
f7:41:3c:d8:3d:53:70:fb:f9:ec:51:3d:41:bc:ff:c6:dd:30:
48:12:ba:de:03:d9:b6:0d:e3:a4:52:41:06:18:c7:db:8d:94:
90:1c:b1:8f:1c:1a:99:58:8b:04:66:9b:7f:a8:65:ac:74:46:
5e:c5:e5:7e:c4:68:b1:33:0a:92:be:c0:57:55:66:16:b2:f2:
df:d5:e0:5c:a4:5d:aa:9a:07:52:0a:b0:c2:a2:49:20:ce:9b:
da:f8:ba:02:36:f5:bd:2d:b6:cf:7b:3a:22:a1:51:a4:75:2d:
0c:b8:44:5b:82:c0:e1:71:cc:1d:e5:29:8e:33:f2:8b:61:ce:
09:83:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 00:45:40 2024 by rpki-client on console-ams.rpki-client.org