Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ABXgFtUYvPMSJhG6Sxsc--0dKJA.roa
File: ABXgFtUYvPMSJhG6Sxsc--0dKJA.roa (raw, json)
Hash identifier: 7kwcGVxC2scI6ylmzsNPXofZ0WQXR7KE9jkkk0EoKCo=
Subject key identifier: 00:15:E0:16:D5:18:BC:F3:12:26:11:BA:4B:1B:1C:FB:ED:1D:28:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CF46D1E61282713142664D22E45BFC8A5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ABXgFtUYvPMSJhG6Sxsc--0dKJA.roa
Signing time: Wed 10 Jan 2024 17:30:40 +0000
ROA not before: Wed 10 Jan 2024 17:30:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 14:25:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f4:6d:1e:61:28:27:13:14:26:64:d2:2e:45:bf:c8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 10 17:30:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0015e016d518bcf3122611ba4b1b1cfbed1d2890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:38:27:d8:16:68:55:0f:52:bd:ac:67:63:
3d:28:ac:6e:a3:b5:21:96:32:a8:10:95:89:88:7b:
f9:4a:b8:46:5a:93:68:dc:78:f9:0c:f0:1e:fd:e0:
bc:6e:71:b5:5e:66:07:d9:6c:a8:ea:ad:d4:b0:d0:
20:c2:69:d5:e5:c1:c6:06:81:6e:46:58:83:25:e7:
e4:80:01:c5:91:6c:4e:f4:6b:16:47:75:f7:a1:36:
17:38:b6:95:39:85:c3:6e:55:1c:80:8b:f6:67:8b:
f9:d0:2a:dc:db:69:7d:01:89:23:61:8d:f6:4a:ab:
96:e1:a1:ae:6d:f0:74:79:7e:56:b5:50:f4:2e:41:
6e:6b:37:d3:86:a9:21:c4:62:93:e2:93:d1:49:28:
a4:d9:67:20:24:66:75:33:e0:7e:e4:20:24:d8:72:
09:ee:b8:b5:98:82:52:7b:86:63:0b:9f:da:76:60:
ae:f7:aa:3c:42:e3:28:86:e9:a6:6f:3a:2d:c8:a4:
84:3c:98:1c:c7:dc:00:e4:77:bd:5f:8c:d3:a9:73:
c1:15:a4:cb:7a:5c:d8:97:3b:7b:9c:28:9d:b2:30:
53:0e:f4:1e:18:c4:6e:b5:d9:78:cd:01:2d:16:8b:
1c:3c:bb:71:32:bd:e3:cc:a5:5e:65:99:2a:72:27:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:E0:16:D5:18:BC:F3:12:26:11:BA:4B:1B:1C:FB:ED:1D:28:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ABXgFtUYvPMSJhG6Sxsc--0dKJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.95.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:51:88:f0:09:ac:60:ec:e1:dc:28:82:22:4b:5d:40:b6:0f:
ad:6a:f4:12:6a:2e:60:d3:43:73:0f:e9:89:ac:76:5d:03:0d:
f7:e8:2f:85:d9:58:91:74:26:e2:27:7b:62:45:79:a9:57:9f:
6e:7c:ef:ba:d5:03:0e:a6:b9:f9:d3:93:98:ef:6d:f1:4a:6d:
64:33:be:0e:2f:8b:bc:23:84:7b:f8:fc:bf:c9:3c:28:9d:c0:
9b:f1:94:69:c4:f8:3e:1d:03:a5:09:a5:fb:e4:f0:67:4f:14:
4a:d5:e4:79:e0:d6:d9:44:6f:53:ba:72:9a:0c:a2:dc:2d:78:
98:98:5e:f0:40:ea:7d:f9:87:1b:1a:3c:c9:33:5b:0a:63:b2:
86:8e:c0:db:4e:8b:0d:8d:ab:f3:b6:8a:46:16:81:bc:90:79:
95:0d:2a:ef:c3:4b:ad:19:59:83:80:5a:0e:70:2d:34:0b:6b:
d9:76:89:c5:48:17:f4:20:90:ca:f9:a1:ed:c9:8e:b1:80:e9:
ba:50:d8:ee:1d:46:5f:cc:b8:2b:b4:8f:d5:67:5d:ac:a5:34:
a3:f0:b4:d1:b8:bf:a2:58:26:e1:48:30:0e:4f:eb:bb:70:7b:
32:59:61:69:f8:f6:c6:3e:7c:12:73:97:1d:76:45:41:84:d8:
d7:bf:2f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:10:21 2024 by rpki-client on console-fra.rpki-client.org