Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AgVNeI9qcLUXQ2xuyKMXIcOX2A0.roa
File: AgVNeI9qcLUXQ2xuyKMXIcOX2A0.roa (raw, json)
Hash identifier: kuSF1icF7Vx2rRDi0em39BN07l8XIZZj+sn4dkwXz0A=
Subject key identifier: 02:05:4D:78:8F:6A:70:B5:17:43:6C:6E:C8:A3:17:21:C3:97:D8:0D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01939D1CFBD068E32EC3C7D520D4DD72D23D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AgVNeI9qcLUXQ2xuyKMXIcOX2A0.roa
Signing time: Fri 06 Dec 2024 17:55:42 +0000
ROA not before: Fri 06 Dec 2024 17:55:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 08:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9d:1c:fb:d0:68:e3:2e:c3:c7:d5:20:d4:dd:72:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 6 17:55:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02054d788f6a70b517436c6ec8a31721c397d80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:42:5e:fc:c4:31:db:c0:3d:97:ee:f6:34:
d0:83:1c:03:79:c4:f6:e4:1b:7e:2d:82:59:75:60:
0c:f3:6d:4b:34:1c:2d:ad:34:b3:17:35:7b:16:0f:
4a:d4:67:2f:94:e3:f3:b1:84:06:5a:f1:29:00:57:
d4:84:16:f8:65:74:9c:e6:ed:68:2f:5f:c7:8c:f2:
40:11:9d:44:a1:1e:10:a6:d0:5e:b2:26:61:11:66:
af:88:9e:ec:c0:f4:17:39:d9:3b:b0:50:65:33:61:
29:b5:5a:2e:28:96:cb:1d:4d:59:c4:5b:10:a1:67:
6f:43:59:d2:a1:5a:b5:6b:d8:97:9f:02:86:8d:e0:
73:e7:27:40:bf:12:a0:bf:77:2d:78:c7:07:f1:5e:
bd:a0:fd:73:58:e1:eb:00:83:3f:6d:00:23:71:33:
15:c6:57:25:32:40:a3:b1:4e:c0:88:19:a2:0b:e0:
61:89:4e:2e:e3:bf:4d:be:90:a4:8e:f1:66:d0:ff:
7e:1e:74:74:c7:fa:60:29:b9:f9:33:10:a9:a1:8f:
b4:7f:52:39:8e:3a:ce:b0:fe:79:6f:4b:b3:fb:0d:
97:e4:d3:cc:3d:2e:db:3e:66:25:f6:6f:0b:20:b3:
be:44:a3:3a:d4:fd:28:51:dc:26:99:82:bb:52:96:
35:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:4D:78:8F:6A:70:B5:17:43:6C:6E:C8:A3:17:21:C3:97:D8:0D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/AgVNeI9qcLUXQ2xuyKMXIcOX2A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
163.5.248.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:15:df:9a:60:30:3f:6a:6c:7c:62:48:82:d9:7f:fc:e0:3a:
ba:20:a7:b3:5a:59:d9:d7:d4:72:84:12:55:d8:71:c4:ad:f1:
a9:42:f0:6d:f9:b2:0e:f9:61:8c:f1:31:20:38:c2:1c:1e:3d:
bc:23:f6:7a:75:bf:2f:a3:f3:bf:e7:f5:44:e7:3d:84:e2:0a:
06:f6:47:2a:70:14:e7:b5:48:37:6e:66:50:5f:96:90:78:a8:
13:90:93:11:e9:fe:d5:a3:80:03:70:c8:df:75:ca:e3:d9:bf:
ec:82:c2:02:7e:9d:10:c6:78:d5:60:7f:d4:28:30:1c:4b:61:
81:07:e9:6e:c0:12:dc:9c:f0:eb:ac:bd:7b:71:92:5e:65:b5:
52:91:f9:44:33:91:8e:e1:5a:8b:e6:86:24:92:04:5b:7d:bb:
0a:a7:d0:3a:b3:d2:27:68:36:70:42:e3:08:4f:50:e4:d3:8d:
35:4d:55:83:75:73:ce:01:b3:37:cf:13:a6:25:14:d1:ef:14:
eb:bf:c7:7d:f8:38:3e:36:52:1a:e6:bd:ff:7a:d4:db:53:03:
45:fc:b0:18:d3:85:ef:6b:61:c9:c1:d0:ae:52:67:a6:71:87:
95:1b:1c:d1:75:dc:91:a3:ec:45:ea:6b:b6:2a:a7:2d:ad:1e:
89:e4:a4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:40 2025 by rpki-client