Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7J4BKRx4wsdJ57F02qBPXNGPrsw.roa
File: 7J4BKRx4wsdJ57F02qBPXNGPrsw.roa (raw, json)
Hash identifier: kd7aXZ+Jyio7y93aX8JRHybRUg3sqyDrHwOEW4lAX4A=
Subject key identifier: EC:9E:01:29:1C:78:C2:C7:49:E7:B1:74:DA:A0:4F:5C:D1:8F:AE:CC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018F355028DFD5F7B08CA39588508C6522A7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7J4BKRx4wsdJ57F02qBPXNGPrsw.roa
Signing time: Wed 01 May 2024 17:59:56 +0000
ROA not before: Wed 01 May 2024 17:59:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.65.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 May 2024 19:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:35:50:28:df:d5:f7:b0:8c:a3:95:88:50:8c:65:22:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 1 17:59:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec9e01291c78c2c749e7b174daa04f5cd18faecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:15:b5:5c:3c:3b:69:83:60:cd:bf:e5:8e:
a5:a3:6d:88:21:ec:fe:0a:af:3a:0a:f2:c5:52:fe:
f2:bf:bc:5b:b2:85:f0:90:e5:5e:7c:5d:1a:a8:7e:
99:5a:ce:ae:75:b7:f2:d6:6e:6c:89:cf:1e:00:9c:
cd:59:a5:17:13:87:34:3d:b4:b4:d5:f7:53:61:a8:
b9:c5:c8:b7:31:68:9e:7c:09:69:d4:d7:c4:3b:9d:
ed:19:e4:65:6c:ce:66:c4:98:43:b4:af:39:48:0c:
92:dc:cf:3f:f4:6e:56:60:f2:11:80:0b:75:ca:62:
6a:63:70:11:b1:d5:6d:89:5d:44:3b:be:b9:7a:b2:
89:71:d3:f9:1e:6b:18:3b:05:dc:db:a5:3f:fa:16:
89:de:7c:d0:70:45:8d:1e:19:29:db:52:be:9b:bc:
ee:ca:9e:85:c0:4e:4e:fb:78:97:fd:80:ff:ea:ec:
75:2c:37:21:98:83:f9:8c:e0:70:d6:d3:ef:c5:fe:
04:c2:83:27:4c:9c:e0:ba:80:2f:32:2e:20:04:ec:
ac:2a:15:97:b0:5a:6b:5e:ff:13:bd:05:07:0e:4f:
b5:bb:13:73:68:4a:ce:e9:51:c5:83:e6:ba:c3:55:
72:3a:9e:42:9f:8d:a9:df:69:b2:61:6e:0d:09:ad:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9E:01:29:1C:78:C2:C7:49:E7:B1:74:DA:A0:4F:5C:D1:8F:AE:CC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7J4BKRx4wsdJ57F02qBPXNGPrsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.53.0-163.5.54.255
163.5.56.0/24
163.5.65.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.136.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.163.0/24
163.5.167.0/24
163.5.171.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
89:9d:d8:eb:2e:c2:e5:d1:fe:e2:8a:c1:91:e0:aa:eb:f9:7a:
dd:ed:99:2e:ba:d0:eb:4e:05:e6:63:62:93:4a:3b:90:c5:6c:
77:38:dd:64:f3:5f:90:15:0f:74:9b:c8:c0:45:84:17:21:dd:
fc:f2:7f:c6:c9:9f:f7:67:f6:65:2d:19:d6:65:f7:2c:b4:97:
bf:77:6e:7c:df:f7:42:85:3e:44:9a:22:5f:bc:c0:55:08:c3:
a0:4b:39:eb:33:7a:a3:57:f5:39:d2:54:83:6c:73:59:1e:5f:
54:b8:61:43:6c:e5:46:14:b9:ec:6b:d4:83:83:b6:20:0d:8b:
1f:c4:c2:45:f6:64:a5:43:5f:56:77:a3:c1:d0:a9:a1:93:ab:
2e:c7:49:ae:f2:9a:77:3a:24:01:bc:a9:10:a4:d8:95:98:11:
f8:64:4a:ad:bf:e8:14:ae:c2:3d:56:38:13:4a:7e:7a:f7:34:
e7:f3:34:07:35:58:ee:60:e8:4f:00:b9:97:78:01:bf:46:1f:
5b:e5:d5:01:37:3a:77:76:5a:4c:3a:79:ee:cd:9b:2e:cc:bd:
99:03:0f:e5:f8:9f:b3:94:03:9d:78:03:d8:02:ae:32:7d:d8:
10:15:e6:9a:3e:4f:f2:f8:b2:d0:3b:5e:22:08:f7:d9:8d:d7:
af:12:41:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:28 2024 by rpki-client on console-ams.rpki-client.org