Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3mKwoXnfAyvQndZvyuiMwMhjNhY.roa
File: 3mKwoXnfAyvQndZvyuiMwMhjNhY.roa (raw, json)
Hash identifier: 4hQqh1X/hQ9W5/BbVTvK5er7ni3xVxLGvdi71DUH9d4=
Subject key identifier: DE:62:B0:A1:79:DF:03:2B:D0:9D:D6:6F:CA:E8:8C:C0:C8:63:36:16
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193122A4AD9EE01A6BD0E52EA50FFC6B489
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3mKwoXnfAyvQndZvyuiMwMhjNhY.roa
Signing time: Sat 09 Nov 2024 18:23:01 +0000
ROA not before: Sat 09 Nov 2024 18:23:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.17.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 15:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:12:2a:4a:d9:ee:01:a6:bd:0e:52:ea:50:ff:c6:b4:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 9 18:23:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=de62b0a179df032bd09dd66fcae88cc0c8633616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:57:d8:20:56:23:fd:b5:7a:2e:39:5d:2c:
5f:91:7b:6f:3a:b3:60:07:ca:cb:01:2b:ff:33:0a:
3c:0b:2b:33:ee:9f:95:8d:0b:ea:6b:66:f3:c6:8d:
8a:ab:47:71:a2:fb:bb:e1:25:2f:65:7e:fc:64:94:
2b:ad:d5:79:d8:fa:7f:c3:96:15:42:53:3f:7b:50:
6e:44:a0:37:34:a3:9c:69:29:ae:73:ca:0b:7e:00:
2b:2c:42:2e:7a:2f:75:ae:d3:1e:c5:50:16:b8:1d:
e0:cb:56:40:6d:6e:3e:ae:f5:a1:5e:18:0d:00:5e:
9c:74:1f:6a:a3:4a:21:26:c0:b3:59:e3:49:ce:de:
58:79:af:8d:65:21:30:33:7e:cd:e9:3f:94:04:13:
60:00:2a:7d:44:36:2e:0d:2a:76:5b:5d:bb:af:c6:
4d:5d:64:a5:a8:7d:59:b8:6b:59:ee:a6:2d:f3:52:
c1:d5:47:13:0a:ac:de:ab:27:9d:1e:45:58:de:0f:
bf:99:a5:9d:33:84:f4:34:f3:7f:34:8a:b8:5f:24:
ee:a9:4c:cc:9c:32:81:aa:32:ce:6a:a3:a7:26:0c:
28:1b:87:4f:ec:f6:7f:2d:92:a2:2a:77:f2:c5:c9:
6c:08:f4:fa:c0:81:00:e2:98:2d:e3:95:6f:3d:e2:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:B0:A1:79:DF:03:2B:D0:9D:D6:6F:CA:E8:8C:C0:C8:63:36:16
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3mKwoXnfAyvQndZvyuiMwMhjNhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.17.0/24
163.5.30.0/23
163.5.59.0/24
163.5.62.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b8:3b:94:1f:19:08:84:e1:a9:2a:0f:7c:13:b3:79:f2:bf:
26:8e:9c:fc:f5:25:00:f8:10:ac:b4:21:72:95:96:44:fa:63:
2b:4f:b2:b7:16:44:1f:9b:9a:2c:f4:f6:a4:38:1f:bd:05:00:
59:0a:1a:11:56:e2:87:49:cf:6d:8e:76:8f:dd:5b:93:d2:80:
58:a6:a9:ca:2d:72:8b:76:a6:af:de:29:09:13:96:b0:bd:5f:
02:bf:bb:e4:f3:d3:f3:8d:5b:b5:10:31:7f:c9:76:5b:19:a5:
bd:a7:b8:7b:cb:71:b4:5f:c1:d1:36:e8:ec:62:03:62:84:1a:
6f:f8:25:fc:15:18:22:71:85:40:99:0a:ea:0e:d2:74:a4:d3:
c9:21:82:fc:b0:65:b5:89:c6:8e:21:c1:5d:38:11:b2:d8:38:
ae:d7:13:ed:df:48:4f:a2:6f:7d:fc:05:dc:c4:e2:53:db:09:
c8:05:97:bb:c0:41:0b:8c:62:fe:58:42:2c:df:7b:a3:d3:cb:
35:de:15:b9:b6:e4:cd:04:1a:d0:d5:f5:b3:34:01:df:86:4d:
d2:9b:75:e5:56:d8:e1:0f:24:4b:83:2a:e8:64:64:8c:b8:08:
95:28:8c:84:e0:f2:7c:40:3e:28:11:8f:86:bd:79:2a:eb:f2:
8d:29:ff:29
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZMSKkrZ7gGmvQ5S6lD/xrSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMTA5MTgyMzAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTYyYjBhMTc5ZGYwMzJiZDA5ZGQ2NmZjYWU4OGNjMGM4NjMzNjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs55X2CBWI/21ei45XSxfkXtvOrNg
B8rLASv/Mwo8Cysz7p+VjQvqa2bzxo2Kq0dxovu74SUvZX78ZJQrrdV52Pp/w5YV
QlM/e1BuRKA3NKOcaSmuc8oLfgArLEIuei91rtMexVAWuB3gy1ZAbW4+rvWhXhgN
AF6cdB9qo0ohJsCzWeNJzt5Yea+NZSEwM37N6T+UBBNgACp9RDYuDSp2W127r8ZN
XWSlqH1ZuGtZ7qYt81LB1UcTCqzeqyedHkVY3g+/maWdM4T0NPN/NIq4XyTuqUzM
nDKBqjLOaqOnJgwoG4dP7PZ/LZKiKnfyxclsCPT6wIEA4pgt45VvPeKCFwIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFN5isKF53wMr0J3Wb8rojMDIYzYWMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvM21Ld29YbmZBeXZRbmRadnl1aU13TWhqTmhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBACj
BREDBAGjBR4DBACjBTsDBACjBT4DBACjBUkDBACjBVkDBACjBVwwDAMEAaMFbgME
AaMFcAMEAKMFeQMEAKMFfgMEAaMFgAMEAKMFiwMEAKMFjwMEAKMFkgMEAKMFlwME
AKMFoAMEAKMFpwMEAKMFsgMEAKMFtgMEAaMFvAMEAKMFvwMEAaMFyDAMAwQAowXL
AwQAowXOAwQAowXaAwQAowXgAwQAowXkAwQAowXxAwQAowX6AwQAowX9MA0GCSqG
SIb3DQEBCwUAA4IBAQAmuDuUHxkIhOGpKg98E7N58r8mjpz89SUA+BCstCFylZZE
+mMrT7K3FkQfm5os9PakOB+9BQBZChoRVuKHSc9tjnaP3VuT0oBYpqnKLXKLdqav
3ikJE5awvV8Cv7vk89PzjVu1EDF/yXZbGaW9p7h7y3G0X8HRNujsYgNihBpv+CX8
FRgicYVAmQrqDtJ0pNPJIYL8sGW1icaOIcFdOBGy2Diu1xPt30hPom99/AXcxOJT
2wnIBZe7wEELjGL+WEIs33uj08s13hW5tuTNBBrQ1fWzNAHfhk3Sm3XlVtjhDyRL
gyroZGSMuAiVKIyE4PJ8QD4oEY+GvXkq6/KNKf8p
-----END CERTIFICATE-----
Generated at Mon Nov 11 19:38:44 2024 by rpki-client on console-fra.rpki-client.org