Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8-Jjj9jtHfjekM44umvwSuQxwuI.roa
File: 8-Jjj9jtHfjekM44umvwSuQxwuI.roa (raw, json)
Hash identifier: pWO6fW4Ow/ei8VsS3qhJKIj9ICKQYluJkSZRPhDLztc=
Subject key identifier: F3:E2:63:8F:D8:ED:1D:F8:DE:90:CE:38:BA:6B:F0:4A:E4:31:C2:E2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019138CCB41EF4894186AFE83A1D98245B21
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8-Jjj9jtHfjekM44umvwSuQxwuI.roa
Signing time: Fri 09 Aug 2024 20:20:25 +0000
ROA not before: Fri 09 Aug 2024 20:20:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 10:56:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:38:cc:b4:1e:f4:89:41:86:af:e8:3a:1d:98:24:5b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 9 20:20:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f3e2638fd8ed1df8de90ce38ba6bf04ae431c2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:ad:01:04:57:6d:35:7a:d7:87:31:b0:b9:
7b:2c:3e:88:1d:d9:27:f9:db:9e:9d:09:6c:36:ba:
ef:f8:7f:2a:c6:4f:12:17:14:c7:a9:d5:a3:d8:80:
c0:98:66:ab:22:08:43:70:3c:8d:a7:78:32:6b:eb:
d0:be:f2:5b:a2:10:7c:71:f8:fc:17:1d:d3:a0:12:
d1:b9:bb:23:1f:4c:52:2f:be:56:7c:69:ed:6c:1c:
fc:da:8b:f3:3e:00:59:a3:53:e7:ca:eb:6f:64:af:
30:12:4b:81:68:b9:56:a8:21:91:dc:4f:1b:a7:56:
a1:ef:0c:2f:1e:07:78:ed:8b:84:34:a5:8c:00:58:
6c:05:1f:ec:c3:bd:42:9f:31:7d:fc:d4:bc:5d:0d:
ea:af:de:48:fb:d6:47:99:95:d3:cd:e1:22:c2:f8:
81:44:48:e0:da:32:ee:66:d8:39:dd:a3:d7:21:5f:
f4:85:d0:f3:9f:9d:f4:bd:6c:f4:f5:cb:37:40:ba:
ad:89:11:4b:8e:7a:25:bb:70:5f:44:cc:86:9c:d2:
dc:ec:0d:27:27:50:bd:26:75:5d:48:be:57:29:af:
b4:d4:95:4f:66:e7:58:1b:19:e2:01:d5:96:bb:89:
55:98:e2:23:d4:7d:67:84:90:0e:fa:6c:06:67:98:
78:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E2:63:8F:D8:ED:1D:F8:DE:90:CE:38:BA:6B:F0:4A:E4:31:C2:E2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/8-Jjj9jtHfjekM44umvwSuQxwuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0-163.5.168.255
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.241.0/24
163.5.245.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:8e:ea:b4:97:59:95:fa:c4:73:05:e6:74:3f:6a:fb:89:9b:
5a:fc:7a:9d:f6:20:9d:96:95:55:fd:cd:9d:4e:88:ad:3e:66:
ef:ff:63:34:17:48:b4:c6:4f:ae:c2:70:fc:e3:72:9c:eb:20:
4e:ac:07:86:0c:dd:e9:82:2f:45:6e:5d:55:59:76:14:9b:b1:
04:d7:c8:57:28:f7:5d:43:00:4f:05:be:2c:00:f7:47:70:20:
48:82:e9:bb:21:3e:f6:95:5c:3f:2c:01:b5:ee:95:7f:19:bf:
65:4e:07:32:a4:7a:57:81:42:03:68:1e:f1:ec:10:c8:b5:95:
46:4d:4e:f3:cf:0d:e8:74:3a:da:d7:69:43:d4:df:b9:09:13:
82:f4:cb:82:e7:dd:92:0d:21:9a:ae:c1:91:44:f7:c7:99:8b:
45:a7:70:d1:76:a6:b0:df:8d:79:4f:15:a1:3e:8b:fa:bc:e6:
27:80:f2:ec:a1:39:6b:02:03:33:a2:80:46:33:b9:c6:b8:57:
29:29:2e:a8:4c:c6:41:5d:4d:cb:1f:b9:ec:ac:68:39:6e:d0:
7e:ff:29:ec:f2:2b:9f:e3:3f:e6:5d:fc:79:14:46:5c:b7:55:
40:20:3f:07:7f:f5:0a:81:ec:0b:9f:6a:d5:a4:19:e2:59:13:
4d:ed:a6:b1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 11 13:09:05 2024 by rpki-client on console-fra.rpki-client.org