Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D0aXNMlkNBe4fvZlV_-1zNyHOnM.roa
File: D0aXNMlkNBe4fvZlV_-1zNyHOnM.roa (raw, json)
Hash identifier: eG+dzqcjsNrtOuTnp6BGaLHMUd0LNwGcqyydIAjDIb4=
Subject key identifier: 0F:46:97:34:C9:64:34:17:B8:7E:F6:65:57:FF:B5:CC:DC:87:3A:73
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193D50A9CA598807E383BABFE990F228CA0
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D0aXNMlkNBe4fvZlV_-1zNyHOnM.roa
Signing time: Tue 17 Dec 2024 14:34:22 +0000
ROA not before: Tue 17 Dec 2024 14:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Dec 2024 06:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:0a:9c:a5:98:80:7e:38:3b:ab:fe:99:0f:22:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 17 14:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f469734c9643417b87ef66557ffb5ccdc873a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:09:26:90:81:33:ad:ca:c7:0a:48:11:06:
dc:c8:b0:71:87:6c:9a:d2:86:64:a1:89:14:ee:d3:
a6:55:f3:a0:83:6d:90:58:8a:f7:29:c0:1b:ee:22:
04:25:ad:98:83:03:8a:2e:b5:30:fa:b4:b5:13:b0:
97:ca:5d:a6:e0:f5:1a:f4:a3:71:9e:81:b5:43:37:
46:5d:65:35:6f:98:98:79:43:cc:26:e1:90:ee:dd:
bf:1a:ad:6b:e5:89:9d:69:59:34:8e:61:15:4d:bb:
6e:4e:3d:ad:92:b4:0a:1a:a4:66:7f:b3:dc:be:4a:
da:a3:1a:79:57:32:89:03:19:f0:77:c3:b0:61:b6:
d6:f5:91:af:5e:0f:a2:5f:8d:44:5b:02:13:36:55:
f2:3f:d6:9e:c2:da:68:41:1a:e9:4b:e5:41:8f:16:
1b:e8:e7:42:e2:60:c5:96:f2:41:35:df:3d:15:60:
46:57:4a:ae:f9:2d:92:84:df:c3:22:e6:ec:01:a6:
7d:8f:27:31:6b:4e:ed:e8:81:ea:c0:68:20:38:7c:
ec:70:2e:ad:27:0f:e2:9d:f9:38:97:2b:90:d0:7d:
91:55:a4:a0:fc:4b:48:71:81:b9:e5:ed:ff:8d:05:
6b:cd:d5:97:2b:d9:41:28:74:ce:66:cf:fe:70:35:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:46:97:34:C9:64:34:17:B8:7E:F6:65:57:FF:B5:CC:DC:87:3A:73
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/D0aXNMlkNBe4fvZlV_-1zNyHOnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e0:9b:bc:c0:f8:f2:75:9e:52:3c:06:a8:7b:9a:95:74:e3:
1b:31:f5:7a:b7:0e:0e:8c:32:76:ed:d0:3c:00:2d:88:8f:07:
a8:99:b8:d1:58:7b:a5:ac:99:3b:64:e4:06:84:8b:ca:6c:2e:
f2:76:7d:93:34:23:53:49:b8:0a:a9:8e:d8:ce:e0:ab:41:c1:
8f:60:65:53:7d:e9:1b:00:3a:7d:6b:51:09:45:70:58:3d:35:
f9:40:cd:2c:55:46:c9:cf:e6:33:45:12:f0:8c:b3:01:06:a8:
32:f4:1c:83:60:28:4d:c5:d1:b9:b4:27:dd:59:90:1f:0f:3d:
8b:63:5f:3c:77:87:62:8e:c1:b4:04:a9:32:12:87:b8:eb:37:
3c:37:0f:16:06:c9:0c:eb:40:0f:dd:e2:6c:15:9e:7c:7c:21:
48:8d:55:1b:89:35:e8:02:b6:83:6b:3c:ff:3d:b4:b2:fb:db:
4d:38:1d:5d:65:0e:69:ec:44:f2:cc:db:35:59:13:22:f6:4f:
d5:a5:97:5f:ca:c9:66:61:08:b6:42:b7:68:3e:1b:35:83:03:
23:ec:f3:c0:2c:69:74:23:06:43:30:7e:6f:40:a6:0e:12:d6:
8c:9c:46:34:de:aa:8a:b8:bf:3b:b4:4b:27:1e:f9:b9:28:36:
3a:d4:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:00:12 2025 by rpki-client