Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4J10v5zXnGIryigHFyhndqQXGZI.roa
File: 4J10v5zXnGIryigHFyhndqQXGZI.roa (raw, json)
Hash identifier: GS7d3idiKO/G/Rk9ZT6yeVXv/+Vkq6VleQNo+mRciPs=
Subject key identifier: E0:9D:74:BF:9C:D7:9C:62:2B:CA:28:07:17:28:67:76:A4:17:19:92
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01917C3CC43CC0B81BD8DFB59E23EE7DEF87
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4J10v5zXnGIryigHFyhndqQXGZI.roa
Signing time: Thu 22 Aug 2024 22:37:22 +0000
ROA not before: Thu 22 Aug 2024 22:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Aug 2024 20:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7c:3c:c4:3c:c0:b8:1b:d8:df:b5:9e:23:ee:7d:ef:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 22 22:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e09d74bf9cd79c622bca280717286776a4171992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:fb:41:0e:29:fc:da:cc:0f:74:9d:a1:03:
92:c9:93:4b:85:ce:f5:90:5f:b5:d7:be:3d:ca:d9:
04:53:96:8a:1b:12:7b:a7:46:03:e8:68:19:4e:24:
a3:19:d3:93:74:86:b2:cd:56:e3:f7:08:f7:63:73:
38:d2:6b:2e:6d:bc:15:77:e3:99:46:9e:c3:25:7f:
31:35:d3:57:47:a1:b4:83:cd:b6:2f:f5:b0:06:71:
a6:76:18:ba:72:b6:2d:be:27:5b:eb:13:ae:01:ee:
8c:9a:20:fd:ec:87:0f:2b:76:16:e5:94:7e:d2:5d:
cb:d2:3e:1a:3a:66:76:db:48:90:c3:93:00:ab:28:
d8:bc:c9:3e:d4:43:d9:7c:4c:24:4d:13:2a:4b:22:
81:d1:91:fc:c7:1f:8f:e7:cc:89:4b:17:22:6b:17:
86:02:be:33:38:56:76:ee:1b:39:a6:df:cb:33:7d:
73:af:c1:0e:d1:98:40:69:d5:ea:9f:40:5f:5c:f9:
c6:8e:fc:36:6d:3e:3b:03:8f:02:3c:51:8a:ab:55:
a1:de:96:26:a9:e3:43:8d:f8:4d:2c:33:76:bc:24:
3b:44:f5:a6:9f:39:23:ce:df:25:b6:1a:e6:7c:ab:
a7:be:cc:87:69:83:df:65:9b:1a:c7:c2:d4:a1:4f:
3b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9D:74:BF:9C:D7:9C:62:2B:CA:28:07:17:28:67:76:A4:17:19:92
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4J10v5zXnGIryigHFyhndqQXGZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.59.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0-163.5.168.255
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
80:93:a5:1d:1f:5d:32:4c:21:0c:25:e9:9d:75:02:e2:10:35:
20:a6:5d:db:7e:54:3f:ee:69:ce:66:cd:61:81:33:f1:bd:af:
5b:c7:cd:9e:06:e7:9b:e1:2f:ea:5b:1c:91:c5:5d:75:c0:f3:
2c:30:65:dc:f3:dd:48:77:b4:bb:88:f6:91:98:7f:4d:ad:51:
bc:23:a9:ce:e5:72:5a:0e:21:d8:2d:21:e5:17:bb:c9:57:19:
39:b9:4d:ac:cc:14:f8:55:f3:8c:e5:48:62:84:d7:15:74:51:
f8:64:ae:53:5e:0e:35:7c:23:07:e7:e3:7d:de:78:2a:e8:c4:
23:dc:46:7e:25:55:2f:5b:6d:ac:c4:13:c6:e4:f6:74:28:d8:
ca:0f:c7:73:9e:73:29:3f:43:1c:16:fb:d9:93:f9:7a:a0:a2:
ec:30:90:52:fb:af:22:5a:01:57:ca:a7:67:b5:21:c2:42:a5:
d2:f5:e1:69:b1:c0:86:db:ae:c4:f2:88:5a:bd:60:cc:0d:43:
75:96:39:8f:10:4a:55:c9:25:d4:7a:d3:92:ea:2b:a2:52:c1:
e3:20:9b:60:bb:0a:12:87:5c:4a:95:d1:79:90:6d:9f:26:73:
09:33:09:57:0f:74:b9:be:09:cb:f0:d5:b0:81:8e:02:c5:73:
9c:f1:7e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 21:46:39 2024 by rpki-client on console-fra.rpki-client.org