Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5iO2VmkqzCLVhSKtwFEj5oAzJvA.roa
File: 5iO2VmkqzCLVhSKtwFEj5oAzJvA.roa (raw, json)
Hash identifier: JXr4rtR3SB8KIcqieuByRSqwBRoHq+469eZR7NpECno=
Subject key identifier: E6:23:B6:56:69:2A:CC:22:D5:85:22:AD:C0:51:23:E6:80:33:26:F0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC4255BA4213F344F9BF1665DDBA7885B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5iO2VmkqzCLVhSKtwFEj5oAzJvA.roa
Signing time: Mon 01 Jan 2024 08:30:31 +0000
ROA not before: Mon 01 Jan 2024 08:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.38.0/23 maxlen: 23
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5b:a4:21:3f:34:4f:9b:f1:66:5d:db:a7:88:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 08:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e623b656692acc22d58522adc05123e6803326f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:c7:19:c3:8a:88:6c:da:e7:cf:e1:90:b2:
c7:be:d0:eb:73:9d:53:28:ee:37:16:85:02:0e:47:
48:27:22:7d:0e:f8:0f:13:75:1a:69:73:2a:61:5c:
e8:ff:58:06:ea:19:f5:68:86:08:7e:5f:c3:8a:c3:
7d:2b:6e:54:26:ba:21:05:c3:e3:9c:e6:1c:cf:cb:
fd:05:73:18:67:2c:be:2c:28:e5:95:a2:5b:51:b9:
1b:44:96:a3:c9:fe:4d:12:83:37:e3:23:bc:ba:61:
ac:ad:17:73:74:27:11:1c:18:af:b1:76:43:23:2b:
4f:f8:00:61:1f:55:92:de:7f:f8:26:9b:36:e9:b6:
ce:2b:b2:00:98:2a:f1:d4:37:81:4f:58:af:14:52:
a2:1b:3f:11:2c:33:3c:55:1c:33:fb:49:25:e5:0a:
70:df:fc:3b:b4:cd:14:3c:f8:75:2f:3f:16:71:1a:
80:ec:b3:bc:30:6d:00:c7:15:45:d2:12:13:88:77:
84:d6:57:5c:c0:3e:6e:fc:eb:6b:7f:11:eb:17:69:
d0:55:71:fe:a0:5b:53:83:c3:09:5f:6b:5d:7c:f5:
9d:e6:7c:d0:a0:f5:3d:ce:6c:4d:59:44:9d:dd:66:
12:5b:e4:49:ea:f5:4f:08:ac:58:85:63:b9:20:bb:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:B6:56:69:2A:CC:22:D5:85:22:AD:C0:51:23:E6:80:33:26:F0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5iO2VmkqzCLVhSKtwFEj5oAzJvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/22
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.161.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
19:06:64:c5:3a:b9:13:9a:7d:85:0b:5d:a6:42:b1:d1:6e:94:
21:df:c6:53:cf:79:f2:4d:08:7a:6a:24:aa:7f:ac:e8:a9:41:
f7:c2:ac:2e:8d:ef:8a:c5:06:0f:5b:77:8f:eb:c4:9b:1e:8f:
27:97:d1:77:76:e1:8c:51:6e:4e:3b:07:11:33:53:b4:53:b3:
d9:83:85:6e:2a:30:2f:28:1f:98:70:9d:25:9b:f5:ab:d5:ca:
ad:33:94:df:fd:7c:88:4f:22:e2:0d:24:7e:42:48:8a:84:41:
77:0b:8d:94:cc:af:7c:e9:1d:6d:ca:1d:c9:20:1b:67:1b:ca:
92:99:93:d2:45:89:14:da:3f:c7:82:c0:6c:01:02:27:a2:11:
82:28:76:7d:2c:4e:18:89:8c:b2:34:d3:26:37:d3:ce:d4:4c:
03:92:f5:d9:f0:e2:dd:69:a0:23:a7:2b:38:9c:f8:5e:3a:ed:
e9:3b:c1:0d:2c:ee:b6:97:c8:8e:8d:83:e6:01:44:3b:bb:7b:
88:40:d9:30:96:4d:ea:6d:27:95:1c:c6:6f:55:a8:f3:d9:33:
c6:7a:b6:ab:bc:ff:e3:1c:3f:20:83:80:fc:3f:cf:16:f6:9a:
ea:62:ba:73:7d:10:9b:e9:de:fc:d8:1c:44:df:0a:b4:9c:62:
4e:f7:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:22 2024 by rpki-client on console-fra.rpki-client.org