Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/A2VUNjMfbx-8c0x1-yMXO3OVz4k.roa
File: A2VUNjMfbx-8c0x1-yMXO3OVz4k.roa (raw, json)
Hash identifier: eN2Uyi5e289hjjoLPQYqxbMxPmByc2ttFCg6288TuDQ=
Subject key identifier: 03:65:54:36:33:1F:6F:1F:BC:73:4C:75:FB:23:17:3B:73:95:CF:89
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191B2E3DAD7786C558001E58830CBED8C65
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/A2VUNjMfbx-8c0x1-yMXO3OVz4k.roa
Signing time: Mon 02 Sep 2024 13:19:22 +0000
ROA not before: Mon 02 Sep 2024 13:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:e3:da:d7:78:6c:55:80:01:e5:88:30:cb:ed:8c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 2 13:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03655436331f6f1fbc734c75fb23173b7395cf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:3d:ce:34:71:2f:ba:3d:fa:b9:73:c2:60:65:
f3:d7:ef:16:a4:46:c9:3d:09:c2:24:31:85:6f:8d:
8e:f8:5f:18:16:48:8e:d1:0d:b7:43:fa:c8:73:e1:
fe:2d:2c:b8:3a:62:36:0c:31:73:d1:8b:93:6b:63:
30:10:39:a3:90:9f:02:e1:fe:18:e3:f1:87:fd:55:
a6:2b:ec:5c:7b:d2:3f:30:a5:ba:f4:86:d9:b0:06:
0d:aa:4a:9d:63:a6:05:1d:9f:d3:27:08:97:1b:af:
37:26:4e:44:04:19:e5:bb:c1:2a:5f:2c:fe:b5:4c:
9d:c2:73:2b:ca:aa:24:80:c9:dd:c5:b9:56:1f:0a:
38:88:c0:16:74:81:76:f7:73:70:e3:8d:4b:ee:52:
5b:60:71:07:cb:cc:c7:35:11:9b:22:0a:aa:9f:fb:
8d:6c:2f:60:b3:09:6f:56:f9:8e:bd:ed:43:d5:db:
01:97:36:c6:1e:59:2b:a4:3e:22:21:9f:8e:d1:83:
95:17:aa:ea:34:36:8a:10:c5:cd:50:ce:55:c2:e1:
96:79:db:e2:38:2e:fd:09:ef:8d:69:23:a2:3f:f8:
61:09:65:e6:b8:5b:4a:c6:29:3d:ce:1d:96:4b:cf:
0f:c6:0c:2c:b9:a7:67:4c:b5:18:22:5f:40:80:c6:
3c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:65:54:36:33:1F:6F:1F:BC:73:4C:75:FB:23:17:3B:73:95:CF:89
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/A2VUNjMfbx-8c0x1-yMXO3OVz4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.119.0/24
163.5.130.0/23
163.5.133.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.229.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
00:7b:2e:a9:66:d9:e6:ca:ed:14:40:d9:2f:be:66:1b:70:99:
12:f4:ba:bd:03:74:26:e4:fd:38:5b:46:06:6b:d1:5c:02:2e:
cf:5a:3e:f8:2a:40:6d:ea:6f:33:a8:44:7c:5d:d8:ff:72:58:
99:7e:d2:c8:71:eb:b6:30:b2:a8:15:42:af:d1:74:24:9f:f6:
22:5a:b4:2e:b0:fd:80:82:63:f3:6a:a7:54:0f:de:3c:da:12:
46:2a:2e:81:56:8d:fd:85:ff:b6:af:ae:e0:74:c2:5f:4e:66:
c7:fe:37:91:b0:2a:ee:b4:b1:43:28:17:7a:ad:62:43:ba:ac:
6a:f9:03:77:38:ae:7c:82:67:1e:8f:bb:a1:04:8e:b3:14:41:
3a:c4:8e:9f:32:76:79:1f:95:ee:7c:06:c6:a8:6f:da:b5:8e:
14:f5:d0:8d:16:01:2f:04:47:09:4f:65:07:60:6f:15:c8:72:
52:2d:d6:a1:52:b7:f6:6a:b6:1b:60:b9:ec:f2:7e:72:8d:ce:
8e:c9:a1:0e:f3:cb:9a:27:2e:27:ac:fc:65:fa:0e:24:ed:b3:
59:7e:56:c1:3e:9a:cb:6c:b7:86:9d:6d:98:06:a5:fe:98:d3:
45:66:5f:e5:c2:c3:d1:37:8b:09:ce:f1:a5:e7:54:d0:d1:3b:
77:eb:5f:ca
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAZGy49rXeGxVgAHliDDL7YxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwOTAyMTMxOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzY1NTQzNjMzMWY2ZjFmYmM3MzRjNzVmYjIzMTczYjczOTVjZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6j3ONHEvuj36uXPCYGXz1+8WpEbJ
PQnCJDGFb42O+F8YFkiO0Q23Q/rIc+H+LSy4OmI2DDFz0YuTa2MwEDmjkJ8C4f4Y
4/GH/VWmK+xce9I/MKW69IbZsAYNqkqdY6YFHZ/TJwiXG683Jk5EBBnlu8EqXyz+
tUydwnMryqokgMndxblWHwo4iMAWdIF293Nw441L7lJbYHEHy8zHNRGbIgqqn/uN
bC9gswlvVvmOve1D1dsBlzbGHlkrpD4iIZ+O0YOVF6rqNDaKEMXNUM5VwuGWedvi
OC79Ce+NaSOiP/hhCWXmuFtKxik9zh2WS88PxgwsuadnTLUYIl9AgMY8IwIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFANlVDYzH28fvHNMdfsjFztzlc+JMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQTJWVU5qTWZieC04YzB4MS15TVhPM09WejRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjCBmwQCAAEwgZQDBAGj
BSYDBACjBTwDBACjBT8DBACjBVgDBACjBVoDBACjBV0wDAMEAqMFZAMEAKMFZgME
AaMFbAMEAKMFcgMEAaMFdAMEAKMFdwMEAaMFggMEAKMFhQMEAKMFkwMEAKMFrgME
AKMFvQMEAKMFwDAMAwQAowXhAwQBowXkAwQAowXuAwQAowXwAwQAowXzAwQAowX2
MA0GCSqGSIb3DQEBCwUAA4IBAQAAey6pZtnmyu0UQNkvvmYbcJkS9Lq9A3Qm5P04
W0YGa9FcAi7PWj74KkBt6m8zqER8Xdj/cliZftLIceu2MLKoFUKv0XQkn/YiWrQu
sP2AgmPzaqdUD9482hJGKi6BVo39hf+2r67gdMJfTmbH/jeRsCrutLFDKBd6rWJD
uqxq+QN3OK58gmcej7uhBI6zFEE6xI6fMnZ5H5XufAbGqG/atY4U9dCNFgEvBEcJ
T2UHYG8VyHJSLdahUrf2arYbYLns8n5yjc6OyaEO88uaJy4nrPxl+g4k7bNZflbB
PprLbLeGnW2YBqX+mNNFZl/lwsPRN4sJzvGl51TQ0Tt361/K
-----END CERTIFICATE-----
Generated at Thu Sep 5 18:38:46 2024 by rpki-client on console-ams.rpki-client.org