Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4TF9JumctsMPEnMseizZFWAKIlA.roa
File: 4TF9JumctsMPEnMseizZFWAKIlA.roa (raw, json)
Hash identifier: hZQovfgJdegKK0Ys2uqvVZtV2sKnexcogXNJxuz4oFU=
Subject key identifier: E1:31:7D:26:E9:9C:B6:C3:0F:12:73:2C:7A:2C:D9:15:60:0A:22:50
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190C4B5E8EDF7B9BCFCA5F6537E77F3B44C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4TF9JumctsMPEnMseizZFWAKIlA.roa
Signing time: Thu 18 Jul 2024 07:19:34 +0000
ROA not before: Thu 18 Jul 2024 07:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jul 2024 15:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:b5:e8:ed:f7:b9:bc:fc:a5:f6:53:7e:77:f3:b4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 18 07:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1317d26e99cb6c30f12732c7a2cd915600a2250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:71:e2:a3:1c:11:13:cc:ca:cb:3b:84:a4:24:
45:10:6e:58:43:e7:8b:94:2b:89:bb:4d:0d:0b:f0:
2d:76:50:8c:70:0c:61:f2:27:3f:b7:39:a8:4d:83:
2f:58:0c:6b:83:24:d3:fe:2d:65:94:85:d6:16:2a:
6a:95:14:d7:ce:00:fe:b0:be:f8:fd:c7:55:48:51:
bf:d4:a1:e0:0c:89:ef:74:a8:24:82:c9:3a:34:b3:
88:70:12:ec:fe:43:50:b5:13:a4:f8:36:2f:51:a3:
01:27:5d:33:bf:49:a9:65:5c:44:59:e6:5c:15:bd:
cb:25:88:0e:b1:a4:30:cf:a8:84:41:d7:10:e9:6e:
52:81:b6:c2:1b:02:a5:32:52:18:bc:d9:d7:06:ca:
d0:44:03:29:51:0c:e1:24:a4:a2:d2:14:e2:85:50:
93:be:1e:02:6d:46:ab:88:5b:22:28:44:bd:4f:1d:
5d:c9:5a:1c:75:5e:02:23:73:d8:00:23:c1:70:83:
69:2a:c9:67:24:e7:9e:9e:79:40:84:62:9b:7c:db:
7e:93:ad:08:11:79:63:fe:27:24:66:b4:f6:7b:ad:
da:f3:bd:d5:ae:72:9a:41:e2:a0:16:48:aa:2b:36:
8c:c0:28:7b:a0:71:66:04:b8:52:07:3e:7e:67:e0:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:31:7D:26:E9:9C:B6:C3:0F:12:73:2C:7A:2C:D9:15:60:0A:22:50
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4TF9JumctsMPEnMseizZFWAKIlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:83:1a:3d:a8:0c:f5:01:80:0e:7d:e1:90:8b:4f:04:9f:a9:
18:3e:fa:8d:db:21:9f:fb:06:a9:68:d7:51:c3:d9:49:43:3a:
1c:0f:66:ec:93:6f:79:cd:29:86:e6:35:d9:9b:19:92:2f:82:
04:4c:b7:47:35:f6:e8:73:d4:91:1e:45:a1:b0:2a:64:d8:43:
e3:7c:e4:c3:c5:f1:97:3b:c8:38:e1:d2:33:1e:8e:ca:5a:0b:
5a:29:27:22:b7:70:40:85:82:b2:ac:9f:2a:9a:87:cf:f5:88:
66:40:b5:4e:e2:f1:c2:cd:b9:1a:15:a2:13:55:8a:8c:f7:ba:
8a:a3:5d:33:03:6b:c0:46:14:52:2c:bf:a8:00:b9:2e:2a:e0:
cf:3b:0b:d0:60:76:89:c9:31:da:3e:50:95:7b:36:c3:69:92:
75:e0:81:c4:e7:a3:67:db:96:f0:5a:52:33:c7:25:60:b8:8e:
aa:d8:31:5a:7d:1e:08:3c:ef:ce:d7:ca:8a:fc:5e:3c:6b:7b:
60:75:87:82:02:b9:eb:16:9f:ef:23:e9:0c:92:87:3f:5f:80:
17:82:cb:bc:f4:30:3a:9f:9c:52:92:d9:d4:f3:db:b3:b6:dd:
ed:49:6d:7d:a2:00:1e:86:a6:39:e5:e7:a5:78:ae:84:11:95:
2f:90:e6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 20 18:20:49 2024 by rpki-client on console-ams.rpki-client.org