Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7pEa-gu0fFJ4FMmmNs7AXAC3OjE.roa
File: 7pEa-gu0fFJ4FMmmNs7AXAC3OjE.roa (raw, json)
Hash identifier: NzgYLLhxb4MDylNlhP5j3NgyAHc+qM6hEFdR8r81MHI=
Subject key identifier: EE:91:1A:FA:0B:B4:7C:52:78:14:C9:A6:36:CE:C0:5C:00:B7:3A:31
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019027093A4CA500C894D676615CFF4BA8FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7pEa-gu0fFJ4FMmmNs7AXAC3OjE.roa
Signing time: Mon 17 Jun 2024 16:30:34 +0000
ROA not before: Mon 17 Jun 2024 16:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 20:17:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:27:09:3a:4c:a5:00:c8:94:d6:76:61:5c:ff:4b:a8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 17 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee911afa0bb47c527814c9a636cec05c00b73a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:b0:e7:93:a0:6e:66:b0:76:b7:58:a0:40:
61:5c:70:59:f7:6f:01:52:e5:93:e2:52:60:61:9f:
4a:28:f7:1c:c2:1a:47:18:45:52:a0:72:c2:c6:4f:
23:81:bb:32:f1:bd:11:18:63:50:fe:76:6d:68:63:
43:cd:b8:71:f5:ba:1f:c0:22:bc:73:97:99:11:56:
00:b7:5a:1b:1f:dc:b5:b4:8c:84:b5:f6:51:f6:3a:
1f:b4:7f:c7:9c:e9:6e:2f:b8:76:b2:f9:c7:c4:36:
fd:fa:dc:2e:e9:69:1f:cb:56:d1:f0:91:07:25:c2:
ee:e8:54:d7:6a:62:8b:5c:19:af:77:6b:84:18:54:
ca:8b:75:e3:4d:ec:a8:5b:a4:16:e0:ed:8e:87:76:
ed:eb:69:4e:ce:a7:47:5a:40:7e:31:5a:6b:7f:9b:
22:47:0b:50:8a:f8:9e:a9:da:cb:63:fe:be:a3:6b:
6f:c8:a1:59:e0:cb:b7:b1:7d:6f:d8:6e:35:65:a4:
90:d8:2b:50:27:9e:32:59:32:09:3f:9d:19:94:19:
d9:cc:a2:0c:6e:12:86:25:ff:1c:9e:70:39:3b:c5:
a3:1e:e9:35:e6:f5:e7:14:e0:a7:f5:3f:f8:74:c5:
d0:a3:a4:cf:59:80:f5:41:04:f7:ff:09:da:c3:48:
96:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:91:1A:FA:0B:B4:7C:52:78:14:C9:A6:36:CE:C0:5C:00:B7:3A:31
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/7pEa-gu0fFJ4FMmmNs7AXAC3OjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.53.0/24
163.5.71.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.199.0-163.5.201.255
163.5.203.0-163.5.206.255
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:fe:2c:50:87:78:6d:d5:6f:7a:c2:36:ae:35:8e:86:45:7e:
6a:02:63:9a:a8:ad:c4:30:3d:cf:37:3d:7c:9e:55:0f:1c:c5:
e2:08:44:6f:56:a3:95:e5:9e:44:6c:72:1a:e7:1a:41:d7:09:
da:5d:54:92:10:e9:3a:58:52:bc:35:4e:74:7b:57:62:34:4c:
4a:59:6e:fd:b5:53:66:44:d2:45:53:cc:03:b5:60:ce:eb:28:
5b:6f:e0:e9:1e:98:c0:0f:84:a8:b9:f8:fc:6b:54:a3:1d:94:
d0:f9:10:1c:3d:a8:13:fe:35:11:9b:ae:ed:4b:55:34:93:57:
36:f5:3c:74:89:3f:a7:53:e2:52:6a:25:09:c7:13:79:30:e5:
99:0e:b1:e3:6c:60:be:79:40:1d:60:8c:57:e4:a1:a1:81:63:
ef:f6:e8:15:56:e0:70:c1:99:1a:50:87:23:89:1f:28:d6:22:
9d:70:e3:52:f9:8a:cb:2a:45:41:e9:80:f9:95:27:ee:a9:bc:
b1:c8:fa:33:8c:96:6d:72:da:45:e4:65:ff:a0:9d:4c:da:8e:
45:10:b6:e1:16:4b:75:cd:73:e0:a8:3a:13:3f:41:06:6d:44:
44:69:d4:be:4b:42:ec:5e:8b:99:bd:9d:b8:e5:de:53:47:5e:
96:aa:25:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 22:49:06 2024 by rpki-client on console-fra.rpki-client.org