Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/91atowGHrnW3ydq8jGyV6xPVaxM.roa
File: 91atowGHrnW3ydq8jGyV6xPVaxM.roa (raw, json)
Hash identifier: 9BsPnrgxOP4gpWIarQzbe6aigv1nFFCrvc66Qqm6ihA=
Subject key identifier: F7:56:AD:A3:01:87:AE:75:B7:C9:DA:BC:8C:6C:95:EB:13:D5:6B:13
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D183CC2D242015A463393FEC0202810C4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/91atowGHrnW3ydq8jGyV6xPVaxM.roa
Signing time: Wed 17 Jan 2024 16:24:11 +0000
ROA not before: Wed 17 Jan 2024 16:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jan 2024 10:23:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:18:3c:c2:d2:42:01:5a:46:33:93:fe:c0:20:28:10:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 17 16:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f756ada30187ae75b7c9dabc8c6c95eb13d56b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:20:b6:85:91:b8:d0:11:f4:dc:75:1d:5c:d6:
c1:d6:fd:01:19:6e:27:c2:69:d3:2f:df:88:44:30:
bf:0f:e8:87:e3:c6:2b:5f:36:f6:73:83:63:8f:1c:
52:ca:33:89:83:ad:6a:30:e4:86:c8:08:4a:9e:ed:
fd:02:37:a0:d0:b9:db:7e:91:a5:8c:cf:00:d9:5d:
5b:90:a3:3f:1c:fd:34:97:c8:3d:3d:78:31:08:dd:
be:f3:71:35:b4:3b:3c:fd:c6:1f:e1:da:69:a2:30:
ab:f1:ea:11:5b:8f:0f:b6:78:0f:d0:42:29:af:85:
05:18:76:56:34:6a:20:07:f3:4c:55:a2:02:8b:53:
20:0b:6d:36:06:8e:c5:7a:aa:9e:2f:9a:30:65:f1:
b8:c6:93:d5:05:8a:b6:55:66:d8:9b:c8:a9:d7:52:
54:10:cf:21:43:a9:1f:a0:1c:ba:bb:9e:ed:19:48:
14:54:45:84:f9:55:38:2c:bf:e0:12:c2:39:37:b0:
b7:d6:4e:a9:64:f7:c3:3d:2b:69:a6:29:57:67:09:
44:35:f3:83:3c:a5:85:3a:7f:22:ca:90:b8:94:44:
7c:ce:31:8a:ac:3a:8f:62:77:c8:02:16:4c:31:0c:
6b:3d:39:51:2f:20:a6:6f:e5:6b:5d:46:16:c4:72:
b7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:56:AD:A3:01:87:AE:75:B7:C9:DA:BC:8C:6C:95:EB:13:D5:6B:13
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/91atowGHrnW3ydq8jGyV6xPVaxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.95.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
39:86:99:2a:88:63:48:86:4e:21:59:d3:35:40:a0:f9:7f:45:
6b:fc:4f:f7:88:d7:2e:44:0f:73:c9:95:e1:4c:4f:70:85:49:
69:4b:25:dd:2f:a7:45:6e:7d:9b:7e:7c:63:f2:24:7e:8f:3f:
15:4c:ad:ef:6c:93:9e:02:73:9c:cc:94:c9:e7:b0:cd:c0:0e:
43:f1:22:d7:f2:e6:00:d2:b8:d2:4e:78:34:bc:a2:01:de:b9:
f1:70:02:99:56:17:43:3b:18:88:c5:98:59:b4:d0:e7:4d:75:
56:1f:f5:ce:1d:7f:7a:d8:ec:73:55:56:61:f4:9f:b4:cf:ae:
32:5b:09:ae:42:6d:93:5e:22:bd:93:cd:41:cb:27:87:ae:35:
e8:bb:ab:a8:ce:be:14:eb:3d:22:a8:31:11:ab:d4:68:bd:14:
79:d2:ac:a5:34:d4:a7:c4:22:65:98:19:8d:b8:7c:11:b7:26:
fb:fb:65:ee:bc:30:8b:46:16:d0:09:b8:76:71:82:c4:dd:c5:
13:f4:df:ad:fc:d3:36:32:a0:88:10:2b:f1:57:04:d7:6c:40:
c2:6d:29:01:65:07:c1:bb:a2:21:56:9f:89:96:b4:fb:1f:6f:
05:c9:41:73:34:a4:21:31:19:5d:f2:2d:68:41:a0:de:6f:17:
df:50:2e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 13:45:37 2024 by rpki-client on console-ams.rpki-client.org