Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5N_LmrxsPFEg-Kab10uUgI90T_Y.roa
File: 5N_LmrxsPFEg-Kab10uUgI90T_Y.roa (raw, json)
Hash identifier: AUnQXBSKIG+pqJ3wWq6RLJSRvpN3yfKowzXNf2TUjvY=
Subject key identifier: E4:DF:CB:9A:BC:6C:3C:51:20:F8:A6:9B:D7:4B:94:80:8F:74:4F:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191C31BC58606B356FB0A84ED363E7A58C9
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5N_LmrxsPFEg-Kab10uUgI90T_Y.roa
Signing time: Thu 05 Sep 2024 16:54:22 +0000
ROA not before: Thu 05 Sep 2024 16:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Sep 2024 13:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:1b:c5:86:06:b3:56:fb:0a:84:ed:36:3e:7a:58:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 5 16:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e4dfcb9abc6c3c5120f8a69bd74b94808f744ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:fb:21:e9:cd:b5:9b:04:d8:6e:6c:87:18:
63:9b:ca:8d:6e:f0:b9:92:72:c9:ed:0d:fb:d9:9c:
9d:ca:03:b5:56:f4:be:ad:6d:19:af:bc:ee:84:c2:
03:19:07:65:7e:6c:49:e7:dd:a0:25:31:9d:d4:14:
99:eb:41:be:eb:c8:18:00:ee:18:da:3b:6d:88:e6:
16:ab:9e:36:bf:54:96:3e:ab:a8:ae:df:93:4b:df:
31:6b:99:bf:f9:bf:58:12:54:a5:96:78:47:54:aa:
79:da:c6:b7:87:8a:e2:8b:00:41:d4:2a:52:2e:43:
d6:cd:40:b8:ae:8e:21:55:c2:42:ad:a4:df:8d:69:
9d:71:7c:87:eb:a4:2e:ec:3f:75:37:da:00:8e:5a:
75:22:ea:cb:3a:cf:1a:1c:51:b0:af:b6:08:63:46:
f4:be:50:2c:a0:a4:9c:85:e4:b8:54:66:1c:44:6e:
0a:96:05:ea:58:8d:d8:84:cb:6a:3c:7b:ab:84:9a:
e9:81:56:62:4d:4e:04:0c:78:86:c1:e1:97:3e:93:
29:fb:b7:02:63:2f:5d:55:af:f8:7f:50:81:da:7b:
6b:39:42:56:20:63:df:f3:21:cc:33:e7:06:e1:7b:
dc:9a:3f:75:d2:ef:c8:cc:09:1f:bf:90:e0:04:f9:
0c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DF:CB:9A:BC:6C:3C:51:20:F8:A6:9B:D7:4B:94:80:8F:74:4F:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5N_LmrxsPFEg-Kab10uUgI90T_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0-163.5.35.255
163.5.51.0/24
163.5.59.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/23
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:db:a3:44:3f:a2:06:46:b6:53:6d:77:82:34:da:2a:66:d1:
ad:37:4f:6a:e4:df:94:5f:1b:6b:7e:0d:08:d6:82:67:fc:16:
f8:50:78:a4:b4:fd:18:a5:4e:c4:30:79:b1:42:b7:aa:62:4d:
71:fd:20:62:7d:9b:3e:9c:8f:66:5d:81:a3:34:62:cc:19:9a:
a4:6a:99:67:a7:1d:b8:e3:35:1e:5a:9b:10:39:ac:04:2f:e3:
1b:b3:05:d7:4c:9f:b2:5f:61:db:13:c7:30:9b:c0:7e:09:04:
63:0b:4b:ab:cd:df:08:b9:7d:41:83:55:d4:cf:ac:13:fc:90:
45:2b:52:fe:76:87:3f:bb:7f:9a:32:b1:e1:32:92:5f:6f:93:
13:b7:83:d5:ef:94:cf:3d:64:3b:6a:0b:e8:af:b9:50:62:ec:
77:5d:b5:7a:10:23:ba:00:ff:c8:15:a4:8f:28:a9:a2:23:20:
3e:03:73:44:e3:aa:e0:31:21:4a:d3:e8:31:91:c3:56:92:93:
f3:cc:dc:19:bc:4a:34:74:da:9a:16:7a:ae:e3:8f:b2:1e:30:
0d:e1:51:93:a6:10:68:5f:2b:6a:15:b2:be:d9:87:3c:b2:3c:
0c:19:44:d6:07:a4:ff:d4:e2:48:cd:25:66:85:65:9e:55:8a:
11:9e:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 15:48:35 2024 by rpki-client on console-fra.rpki-client.org