Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5i5xxDo6nhyfULoRcg7qoIoXtQg.roa
File: 5i5xxDo6nhyfULoRcg7qoIoXtQg.roa (raw, json)
Hash identifier: FUU0955bwQThv5Uvo3mgkGSB4y7rdbO0SqXurCI5KAM=
Subject key identifier: E6:2E:71:C4:3A:3A:9E:1C:9F:50:BA:11:72:0E:EA:A0:8A:17:B5:08
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194C33967B88E8AF6CA78D589D1622C6398
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5i5xxDo6nhyfULoRcg7qoIoXtQg.roa
Signing time: Sat 01 Feb 2025 20:35:06 +0000
ROA not before: Sat 01 Feb 2025 20:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Feb 2025 12:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:39:67:b8:8e:8a:f6:ca:78:d5:89:d1:62:2c:63:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 1 20:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e62e71c43a3a9e1c9f50ba11720eeaa08a17b508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2e:62:d8:44:a3:d4:6d:27:41:27:5b:36:f4:
a9:40:f7:fe:bb:ae:3e:d4:3e:2a:95:6a:6b:81:80:
aa:c9:c4:f9:02:9f:55:5b:18:c4:ef:9d:92:b8:90:
d0:bd:a7:7e:21:cc:eb:51:38:4d:7b:87:2e:fc:89:
b6:69:f4:9d:63:70:da:53:c8:47:77:ea:a1:42:d0:
3f:e0:c3:03:a7:9a:f3:ab:74:a9:31:e2:8e:7b:17:
7d:84:b4:d0:6d:57:5f:09:b9:ca:df:4e:1f:1e:62:
25:c8:e9:ff:52:a8:b6:a0:0d:7d:b1:0d:e2:15:df:
44:5c:15:e2:99:11:15:b4:8e:6d:c3:08:18:b9:ac:
c2:75:60:bc:ca:23:3e:76:62:cd:87:f3:81:d7:33:
f9:dc:57:bb:b8:c0:d9:1a:12:45:6e:a8:9d:ec:3e:
b9:d1:49:b7:f1:71:c2:1e:4d:83:65:ae:cf:7e:1f:
1b:e6:42:47:9b:ca:d9:27:9d:31:d2:e6:6b:aa:da:
78:00:c4:5f:fe:2b:6d:2b:0d:52:52:40:08:20:27:
07:c3:87:0f:dd:a5:b2:80:16:80:61:8d:14:4e:97:
42:be:8d:7b:90:98:a4:4d:35:98:3f:3d:d3:0c:82:
1a:62:a1:ca:58:5f:67:98:38:95:29:f2:1e:77:cb:
f5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:71:C4:3A:3A:9E:1C:9F:50:BA:11:72:0E:EA:A0:8A:17:B5:08
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5i5xxDo6nhyfULoRcg7qoIoXtQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
163.5.250.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:93:2d:90:a4:3f:cf:f7:5f:14:ae:3d:af:16:9e:66:6d:a6:
88:99:46:d6:e2:ac:09:56:84:7c:f3:b4:71:8b:97:b5:31:fe:
41:f7:13:2e:c5:fd:e8:db:2b:95:fd:43:2d:5c:c4:27:32:17:
52:5c:62:9c:4d:9d:24:31:0c:62:79:a2:47:cb:89:53:a5:bf:
54:34:7a:64:0c:8c:f2:3f:81:fb:e8:9a:96:56:9c:55:c9:dd:
b5:cd:b4:27:be:c0:2a:23:d9:69:18:42:19:f8:b8:81:a5:43:
9c:6b:4c:25:3e:f9:1d:a0:98:83:01:4a:4c:7c:24:be:43:01:
c9:7e:34:5a:6f:98:b5:c7:f5:38:95:75:54:70:36:8c:22:c8:
a9:1c:c3:cc:d3:4d:07:dc:6d:3d:f0:ab:0b:39:3b:ac:30:1b:
f1:1e:7c:79:7d:00:1b:9c:84:36:ca:4f:59:d7:9c:cf:5a:7b:
76:1f:8a:2c:81:d6:82:75:cf:50:18:27:5d:02:eb:47:16:a7:
68:52:34:4a:d2:eb:fb:de:db:7f:6a:b0:ce:b7:be:a8:29:63:
4f:a6:bd:95:23:70:c7:ed:75:e4:85:a8:f2:af:14:91:64:61:
56:35:69:4f:e2:e1:9d:82:00:e6:93:33:4e:e7:c1:80:b9:43:
13:80:a3:ab
-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgISAZTDOWe4jor2ynjVidFiLGOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMjAxMjAzNTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjJlNzFjNDNhM2E5ZTFjOWY1MGJhMTE3MjBlZWFhMDhhMTdiNTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri5i2ESj1G0nQSdbNvSpQPf+u64+
1D4qlWprgYCqycT5Ap9VWxjE752SuJDQvad+IczrUThNe4cu/Im2afSdY3DaU8hH
d+qhQtA/4MMDp5rzq3SpMeKOexd9hLTQbVdfCbnK304fHmIlyOn/Uqi2oA19sQ3i
Fd9EXBXimREVtI5twwgYuazCdWC8yiM+dmLNh/OB1zP53Fe7uMDZGhJFbqid7D65
0Um38XHCHk2DZa7Pfh8b5kJHm8rZJ50x0uZrqtp4AMRf/ittKw1SUkAIICcHw4cP
3aWygBaAYY0UTpdCvo17kJikTTWYPz3TDIIaYqHKWF9nmDiVKfIed8v1VwIDAQAB
o4IC7zCCAuswHQYDVR0OBBYEFOYuccQ6Op4cn1C6EXIO6qCKF7UIMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNWk1eHhEbzZuaHlmVUxvUmNnN3FvSW9YdFFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBAwYIKwYBBQUHAQcBAf8EgfMwgfAwge0EAgABMIHmAwQA
owUWAwQAowUeAwQAowU7AwQAowVJMAwDBACjBW8DBAGjBXADBAGjBXYDBACjBXkD
BAGjBYADBAGjBYowDAMEAKMFjwMEAKMFkAMEAKMFkgMEAKMFlwMEAKMFngMEAKMF
oAMEAKMFogMEAKMFpwMEAKMFqgMEAKMFrQMEAKMFrwMEAaMFsgMEAKMFtgMEAKMF
vQMEAKMFvwMEAaMFyDAMAwQAowXLAwQAowXOAwQAowXRAwQAowXUAwQAowXaAwQA
owXgAwQAowXkMAwDBACjBfEDBACjBfIDBACjBfcDBACjBfowDQYJKoZIhvcNAQEL
BQADggEBAKuTLZCkP8/3XxSuPa8WnmZtpoiZRtbirAlWhHzztHGLl7Ux/kH3Ey7F
/ejbK5X9Qy1cxCcyF1JcYpxNnSQxDGJ5okfLiVOlv1Q0emQMjPI/gfvompZWnFXJ
3bXNtCe+wCoj2WkYQhn4uIGlQ5xrTCU++R2gmIMBSkx8JL5DAcl+NFpvmLXH9TiV
dVRwNowiyKkcw8zTTQfcbT3wqws5O6wwG/EefHl9ABuchDbKT1nXnM9ae3YfiiyB
1oJ1z1AYJ10C60cWp2hSNErS6/ve239qsM63vqgpY0+mvZUjcMftdeSFqPKvFJFk
YVY1aU/i4Z2CAOaTM07nwYC5QxOAo6s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:03:13 2025 by rpki-client