Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4OJWxPgQs2fxcCSzKmgD_f3ruvM.roa
File: 4OJWxPgQs2fxcCSzKmgD_f3ruvM.roa (raw, json)
Hash identifier: JYUgUvy5nDIWQUlPDQabvjczD0c1azMbLriw3h7lbgo=
Subject key identifier: E0:E2:56:C4:F8:10:B3:67:F1:70:24:B3:2A:68:03:FD:FD:EB:BA:F3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193CAE19BAD87CFFEE18097E09759C55A64
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4OJWxPgQs2fxcCSzKmgD_f3ruvM.roa
Signing time: Sun 15 Dec 2024 15:13:23 +0000
ROA not before: Sun 15 Dec 2024 15:13:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Dec 2024 14:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:e1:9b:ad:87:cf:fe:e1:80:97:e0:97:59:c5:5a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 15 15:13:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0e256c4f810b367f17024b32a6803fdfdebbaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:65:ab:61:5b:e9:70:33:47:be:7f:e4:00:
86:e9:8b:82:e2:2a:42:e1:09:5d:d1:fc:3d:7c:06:
94:6b:68:b1:20:94:62:25:37:4e:48:7a:e6:a2:22:
2f:fa:8a:c3:78:f0:14:aa:04:3f:22:e7:69:6a:42:
9f:63:96:6e:9c:bd:ea:d4:61:31:19:97:80:fe:72:
02:3e:f1:39:ce:3e:80:bf:6f:38:fe:70:79:a3:35:
ea:3d:91:48:b6:f7:2b:fc:b6:18:21:a1:08:9e:30:
a9:18:34:39:88:47:11:3a:99:a6:d3:48:c7:39:2a:
a6:56:6e:1a:63:2f:ae:84:42:84:da:80:e9:df:eb:
df:f4:3f:13:81:b8:37:a7:e7:03:f3:08:30:04:26:
4d:af:ef:4e:d8:97:43:8e:be:d3:0d:81:50:27:3c:
92:0a:99:58:54:73:1d:d3:06:00:c0:13:a8:bf:5d:
b8:07:fe:6d:56:cd:59:40:27:cc:3b:15:cf:6f:a6:
ad:99:8d:96:6b:8e:bc:32:77:34:08:96:33:18:8f:
eb:ed:a2:7f:9a:57:bd:e4:3c:d6:c7:77:80:90:76:
fd:38:7d:f7:3a:08:52:fe:6b:72:d3:f2:1a:8d:11:
65:f4:5c:e2:67:52:ad:ce:c6:8f:f3:d8:a6:8f:35:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E2:56:C4:F8:10:B3:67:F1:70:24:B3:2A:68:03:FD:FD:EB:BA:F3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4OJWxPgQs2fxcCSzKmgD_f3ruvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ce:44:9e:34:4a:b8:22:1e:c0:85:49:eb:47:01:82:39:4f:
af:eb:85:38:7d:8b:10:b5:99:d6:b8:dc:84:f8:24:10:51:bf:
96:26:37:db:08:7f:3f:12:87:65:46:8b:0f:5f:f9:70:74:16:
9c:1a:e9:1f:c5:b2:24:72:84:ca:84:c5:d6:b6:bf:a0:bd:ca:
e5:8c:14:fe:16:7d:78:63:5b:84:27:0c:b7:18:7f:61:c1:64:
ea:10:7f:d4:1f:64:d8:db:d5:b8:5e:4a:48:6b:6f:95:07:ca:
08:3e:05:8a:0d:57:28:92:85:35:af:e9:4a:24:4a:bd:2c:58:
d0:d5:b6:a1:2b:e4:16:bd:ba:de:c9:f2:06:e5:47:8b:51:9b:
c3:dd:c2:a7:67:ba:0c:81:0f:38:99:cd:45:68:8f:3a:7e:44:
3f:bd:6d:51:e6:99:47:03:25:fc:cb:25:55:9c:cf:74:cc:f6:
30:34:8b:12:21:bc:d6:91:df:cd:c7:0b:e8:1e:06:f8:1c:04:
ec:c3:4b:b2:14:ca:f3:77:33:df:05:e1:a9:f6:8b:c6:73:c4:
ab:f6:57:70:46:3c:1d:94:d0:4f:3d:20:76:7a:63:be:29:ed:
f2:46:af:42:cd:69:d3:07:a0:40:2a:6a:5b:3f:d7:5f:e8:b9:
bc:23:5d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:33:34 2025 by rpki-client