Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Gw9__wOklHcUfJF5jvSUrC45Vc.roa
File: 6Gw9__wOklHcUfJF5jvSUrC45Vc.roa (raw, json)
Hash identifier: QPZRpYz71ku9Zj+MFckLwKhVAmkrFV0o6Znjsr88/1g=
Subject key identifier: E8:6C:3D:FF:FC:0E:92:51:DC:51:F2:45:E6:3B:D2:52:B0:B8:E5:57
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192DE5C6E1DC7B60407445DCAE54699A314
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Gw9__wOklHcUfJF5jvSUrC45Vc.roa
Signing time: Wed 30 Oct 2024 16:57:32 +0000
ROA not before: Wed 30 Oct 2024 16:57:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 13:40:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:5c:6e:1d:c7:b6:04:07:44:5d:ca:e5:46:99:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 30 16:57:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e86c3dfffc0e9251dc51f245e63bd252b0b8e557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:aa:20:ab:18:6b:c1:d2:2f:1f:8f:e1:05:
1c:e8:c6:3d:a8:62:ed:39:d1:13:85:82:e5:75:16:
ac:d3:77:32:9c:2b:c3:83:f5:c7:01:e2:d1:fc:be:
ab:63:d6:26:f2:22:55:83:ff:3f:8e:26:c8:8f:c4:
51:79:c3:e7:f0:c1:d2:45:0f:97:f4:d5:7b:e1:c3:
e4:66:a0:0d:82:46:ec:45:8e:67:29:57:cb:d6:a8:
51:7e:a4:f9:06:2f:03:45:f9:57:46:de:e4:ce:1d:
c5:d8:9a:90:e9:b4:c0:fb:5a:60:00:89:9d:a8:4a:
6c:79:f8:22:cb:c2:b4:a5:b8:96:ef:15:04:6c:3d:
0b:9b:1a:ca:d8:b1:3d:e6:58:a0:3c:7b:ab:41:e5:
60:d7:25:bd:11:73:b9:db:be:35:b8:6a:3e:20:4f:
87:41:52:e2:3f:ea:81:64:4b:79:12:aa:20:8b:3b:
f1:84:ea:e5:e0:a1:c9:db:16:39:26:3b:ae:a3:99:
ea:37:e2:57:29:ea:b7:c5:76:d9:da:7e:79:ec:92:
eb:80:87:ca:6d:96:e6:67:f1:ba:b4:0c:8d:79:c1:
aa:41:e3:5b:5e:df:3f:cb:c8:e0:ef:de:6a:7c:d4:
77:2d:a7:88:a7:be:94:06:15:49:c9:68:b9:8e:66:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6C:3D:FF:FC:0E:92:51:DC:51:F2:45:E6:3B:D2:52:B0:B8:E5:57
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Gw9__wOklHcUfJF5jvSUrC45Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.44.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:7f:9f:86:60:2d:db:3c:13:e4:0a:63:f6:f4:a8:ef:9f:f4:
c4:8b:a6:a8:27:98:34:8a:b5:43:33:59:9c:79:a8:17:67:d2:
10:a2:11:2f:90:5a:b1:97:82:56:b0:12:3f:97:89:fa:a8:4f:
b8:b3:1e:fa:ba:8c:6a:f6:6c:17:40:af:93:01:30:85:cf:eb:
d3:dc:73:fc:19:87:ca:bf:02:a0:02:5e:f2:f9:9b:0f:c2:cb:
68:96:f4:bd:d9:ae:21:e8:16:b2:ed:5f:36:96:1c:76:1b:69:
d7:a5:da:4b:7e:ba:13:21:23:47:2d:b9:65:2e:7f:28:27:1e:
e1:c4:d5:2c:69:4f:40:cd:2b:9d:40:2c:09:d4:14:af:4b:c8:
39:de:5d:fc:0f:2c:09:9f:4d:52:51:40:6e:a0:e2:d6:a6:6a:
4c:f0:a3:10:c9:94:aa:49:48:7f:7d:0e:0d:84:48:98:31:16:
21:6b:1f:dc:b3:3a:e8:af:0e:f8:6c:2f:a5:c1:b6:d0:8d:15:
d0:72:66:b9:a8:d6:d7:07:0e:84:3a:82:e1:1d:e6:23:16:59:
81:fe:ae:f3:c3:76:ad:4c:e3:d1:87:72:01:ea:a8:7b:9c:b8:
23:f3:4e:15:16:b3:c9:9c:62:e8:bd:ee:74:34:68:07:c4:ea:
eb:1a:ca:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 15:31:01 2024 by rpki-client on console-fra.rpki-client.org