Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Gt-NMHdur-IfJpf1bVvqnRkJxo.roa
File: 6Gt-NMHdur-IfJpf1bVvqnRkJxo.roa (raw, json)
Hash identifier: 4QLP87JaelMNd2tITOJneBgq5e4cAbyhX5a3uy5qixY=
Subject key identifier: E8:6B:7E:34:C1:DD:BA:BF:88:7C:9A:5F:D5:B5:6F:AA:74:64:27:1A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0197253366A71274D449B8EC7B5531246D19
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Gt-NMHdur-IfJpf1bVvqnRkJxo.roa
Signing time: Sat 31 May 2025 07:16:55 +0000
ROA not before: Sat 31 May 2025 07:16:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Jun 2025 11:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:25:33:66:a7:12:74:d4:49:b8:ec:7b:55:31:24:6d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 31 07:16:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e86b7e34c1ddbabf887c9a5fd5b56faa7464271a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8a:64:45:fe:b8:42:5e:96:19:ce:d2:1b:ff:
0f:01:66:0a:1c:80:c6:6d:1a:0c:ea:a8:25:ac:22:
2e:c2:86:c1:d8:68:2a:24:b7:69:38:f0:fe:a1:87:
2a:70:53:29:fa:50:8e:c0:c6:5c:0c:48:ea:69:43:
d5:d6:c2:21:8c:d3:c1:82:1d:e8:e6:c7:ef:8a:84:
ba:66:9d:ef:81:c8:ed:42:ce:5a:e0:98:b5:9a:21:
c4:dd:42:79:ea:9d:2b:31:3c:24:f7:ec:28:af:0e:
a2:d1:55:25:a1:8c:63:88:3c:2f:ff:ec:4e:dd:b8:
95:dd:c7:bd:6f:5d:77:bb:b2:7f:13:44:2f:77:f1:
52:35:ec:dc:06:c3:6d:c6:8d:d6:b6:0e:9e:e0:f9:
2d:48:9e:11:74:68:ab:f4:4b:79:c1:1a:84:7c:dc:
cc:12:bd:88:93:cc:dc:15:a2:54:7b:1c:7e:f0:49:
ee:87:e5:73:a7:17:58:2e:ac:af:a4:b0:3f:46:b4:
f2:79:4f:22:3d:15:92:af:80:39:bf:ab:7d:f9:ee:
63:e7:4d:a1:7e:d0:87:3b:81:7d:15:31:f6:9c:ee:
5e:fa:9e:19:a8:b2:84:0d:a6:13:ce:f3:a3:31:d3:
b5:5e:21:b6:e7:e3:3a:43:45:96:11:b9:11:c4:29:
7b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6B:7E:34:C1:DD:BA:BF:88:7C:9A:5F:D5:B5:6F:AA:74:64:27:1A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Gt-NMHdur-IfJpf1bVvqnRkJxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.109.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:a2:c2:86:59:9f:b7:20:95:1a:eb:61:e0:d8:e9:4e:b1:d7:
aa:22:6f:2c:ca:cc:40:53:0c:fa:6a:76:12:28:3d:95:a5:da:
e0:32:30:e6:77:b4:01:bb:7f:4d:54:c0:18:5e:b5:5e:5e:af:
15:5a:37:75:5b:0f:b1:d5:29:32:01:5c:5d:02:b3:e3:2b:1a:
4d:67:35:03:37:50:47:1c:b9:f8:d9:90:9d:b2:ad:dc:0b:05:
49:3d:e6:65:16:7f:f0:47:20:14:53:ef:c8:30:e6:76:1f:2a:
7b:cb:ac:ef:94:2a:8c:5b:58:f5:44:9c:aa:03:ea:de:bc:c2:
c7:37:5d:0e:80:ce:69:64:74:d7:23:2d:c4:b4:df:db:3c:c7:
e4:c0:30:4e:09:33:4c:d7:93:c4:ae:b1:e4:8f:ed:5c:66:12:
0e:53:b6:42:86:f6:1e:1a:db:91:5a:ce:a3:3e:3e:a4:92:90:
ad:61:b0:57:a1:af:a6:e5:07:66:c6:34:61:7c:bb:54:6d:76:
27:5f:48:22:a5:14:9e:f2:da:1c:e7:65:a9:5e:e9:33:da:dc:
c2:d2:7f:65:23:1f:78:79:7c:4d:36:32:18:f6:7a:20:f9:26:
16:11:aa:22:1e:a0:c1:77:57:8b:e2:44:f0:f1:a4:24:72:b0:
d5:77:d2:04
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZclM2anEnTUSbjse1UxJG0ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNTMxMDcxNjU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODZiN2UzNGMxZGRiYWJmODg3YzlhNWZkNWI1NmZhYTc0NjQyNzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84pkRf64Ql6WGc7SG/8PAWYKHIDG
bRoM6qglrCIuwobB2GgqJLdpOPD+oYcqcFMp+lCOwMZcDEjqaUPV1sIhjNPBgh3o
5sfvioS6Zp3vgcjtQs5a4Ji1miHE3UJ56p0rMTwk9+worw6i0VUloYxjiDwv/+xO
3biV3ce9b113u7J/E0Qvd/FSNezcBsNtxo3Wtg6e4PktSJ4RdGir9Et5wRqEfNzM
Er2Ik8zcFaJUexx+8Enuh+VzpxdYLqyvpLA/RrTyeU8iPRWSr4A5v6t9+e5j502h
ftCHO4F9FTH2nO5e+p4ZqLKEDaYTzvOjMdO1XiG25+M6Q0WWEbkRxCl7uwIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFOhrfjTB3bq/iHyaX9W1b6p0ZCcaMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNkd0LU5NSGR1ci1JZkpwZjFiVnZxblJrSnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAGj
BR4DBACjBTsDBACjBUIDBACjBUkDBACjBW0DBAGjBXADBACjBXcDBACjBXkDBAGj
BYADBAGjBYoDBACjBY8DBACjBZIDBACjBZcDBACjBaADBACjBaIDBACjBacDBACj
Ba0DBACjBbIDBACjBbYDBACjBboDBACjBb0DBAGjBcgwDAMEAKMFywMEAKMFzgME
AKMF0QMEAKMF2gMEAKMF3TAMAwQAowXfAwQAowXgAwQAowXkAwQAowXxMA0GCSqG
SIb3DQEBCwUAA4IBAQCsosKGWZ+3IJUa62Hg2OlOsdeqIm8sysxAUwz6anYSKD2V
pdrgMjDmd7QBu39NVMAYXrVeXq8VWjd1Ww+x1SkyAVxdArPjKxpNZzUDN1BHHLn4
2ZCdsq3cCwVJPeZlFn/wRyAUU+/IMOZ2Hyp7y6zvlCqMW1j1RJyqA+revMLHN10O
gM5pZHTXIy3EtN/bPMfkwDBOCTNM15PErrHkj+1cZhIOU7ZChvYeGtuRWs6jPj6k
kpCtYbBXoa+m5QdmxjRhfLtUbXYnX0gipRSe8toc52WpXukz2tzC0n9lIx94eXxN
NjIY9nog+SYWEaoiHqDBd1eL4kTw8aQkcrDVd9IE
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:30 2025 by rpki-client