Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BvYwwD4YTjuShaV9z_56h5yYy5A.roa
File: BvYwwD4YTjuShaV9z_56h5yYy5A.roa (raw, json)
Hash identifier: StqzSqDh1bdS9hG1TN+DMmJp28kJU/EwUyV0LHBNgbY=
Subject key identifier: 06:F6:30:C0:3E:18:4E:3B:92:85:A5:7D:CF:FE:7A:87:9C:98:CB:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018E2D411AD6A841A91035726046388AC953
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BvYwwD4YTjuShaV9z_56h5yYy5A.roa
Signing time: Mon 11 Mar 2024 11:23:45 +0000
ROA not before: Mon 11 Mar 2024 11:23:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Mar 2024 18:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:41:1a:d6:a8:41:a9:10:35:72:60:46:38:8a:c9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 11 11:23:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06f630c03e184e3b9285a57dcffe7a879c98cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:02:4d:fe:18:a5:89:e4:65:9d:29:61:83:
9e:f2:49:8f:4b:3b:1c:28:a8:ef:48:40:a1:2f:2e:
5d:10:57:cf:ea:92:0a:7d:5e:60:47:ac:ae:ec:34:
eb:cb:2a:a5:eb:52:03:5f:2d:0a:86:f3:e9:fa:09:
97:f9:49:e7:a0:12:c5:12:de:2f:32:df:ca:50:85:
03:8c:fc:1b:e3:6e:e7:12:26:c9:df:9e:c4:2d:17:
a7:ca:84:31:ae:3d:8b:46:03:45:e5:87:5b:ea:70:
67:79:03:c2:89:8a:3f:45:a4:60:8d:ff:80:dc:e5:
4d:16:68:df:aa:8f:4a:40:a8:90:eb:b9:31:0f:70:
57:93:3e:14:9d:58:ed:11:26:2b:36:39:66:35:8d:
9f:5a:db:c6:59:bd:e1:7c:34:0d:97:25:d3:1f:7d:
f2:87:b6:83:31:18:a5:15:28:85:c1:e1:34:a6:5d:
ce:c8:45:d3:f0:1b:d4:96:7b:84:c4:cf:8e:52:b9:
bf:22:1d:5b:84:79:15:af:16:4c:09:15:e1:30:e6:
c2:d3:53:27:82:6f:4d:59:c3:a0:2d:f2:ac:ef:df:
05:b5:02:86:ad:46:02:61:c2:df:d4:a7:fc:e6:19:
ce:f8:db:8e:a2:5a:b0:f8:45:f2:e0:3c:36:c4:65:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F6:30:C0:3E:18:4E:3B:92:85:A5:7D:CF:FE:7A:87:9C:98:CB:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BvYwwD4YTjuShaV9z_56h5yYy5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.79.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.160.0-163.5.162.255
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.248.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
40:f9:00:8c:9d:8c:e2:68:7f:80:b5:30:f4:6e:46:4c:36:7c:
73:64:7a:2e:f1:e3:10:6b:9c:45:52:1b:7a:93:32:ec:db:5b:
3e:42:71:21:45:dd:6f:e2:3b:45:6c:44:5c:87:c8:5e:37:81:
87:c5:a6:37:b5:c3:5b:1e:0e:ab:0b:3c:c3:bb:a7:54:ae:1e:
18:7a:c4:14:6a:55:79:bf:e1:93:cb:01:5a:31:06:7d:fb:94:
5a:4e:30:cd:d3:7b:0f:c5:30:79:4f:fb:c9:04:7a:d2:94:c6:
2a:65:54:f9:8b:a6:7e:6e:97:ca:35:bc:7c:e8:52:22:c3:3c:
ef:aa:c3:0a:6f:d6:22:2d:df:39:58:e0:58:8c:d4:3a:5e:dd:
f3:21:3e:bf:6d:bc:51:bd:34:c5:55:0f:5a:b6:3a:50:a6:86:
dc:bf:33:d8:c0:11:b7:03:58:ba:bd:21:da:92:4a:7c:36:3f:
21:a4:e8:d0:83:12:db:f6:0f:9b:4d:0c:d7:8b:be:60:02:d0:
27:47:ab:a2:5b:ab:14:d5:d7:39:61:14:6c:1c:d9:ff:fd:60:
2d:04:cb:b0:11:e3:3b:86:75:79:a0:72:60:5f:17:e7:87:24:
e4:73:04:df:77:1e:db:3a:36:dc:2e:0f:ab:3d:9f:1f:56:4b:
50:7a:0c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 22:33:06 2024 by rpki-client on console-ams.rpki-client.org