Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E4aww4yl7bGEOzwPpM77PYVT4Ls.roa
File: E4aww4yl7bGEOzwPpM77PYVT4Ls.roa (raw, json)
Hash identifier: TCoWXnRVCyAQtfkJA5kUz8/VzFl5nszS3krkAt76AYA=
Subject key identifier: 13:86:B0:C3:8C:A5:ED:B1:84:3B:3C:0F:A4:CE:FB:3D:85:53:E0:BB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC568F2EAA993C408133D1C8C71B1933D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E4aww4yl7bGEOzwPpM77PYVT4Ls.roa
Signing time: Mon 01 Jan 2024 14:23:58 +0000
ROA not before: Mon 01 Jan 2024 14:23:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.38.0/23 maxlen: 23
163.5.63.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Feb 2024 09:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:68:f2:ea:a9:93:c4:08:13:3d:1c:8c:71:b1:93:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 14:23:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1386b0c38ca5edb1843b3c0fa4cefb3d8553e0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:c1:ce:fb:a5:4f:6f:0e:91:f0:e7:9f:31:
e7:d4:5d:2d:15:db:55:cb:35:ad:c6:fb:d0:3d:41:
40:79:00:2e:27:e8:eb:fd:53:1a:0c:91:4d:67:b2:
77:44:9a:af:7c:03:5f:ef:22:f6:42:7a:66:f8:98:
c2:6c:41:7d:42:8f:2d:7a:37:b3:d9:d4:f4:39:ef:
bd:bd:4c:ac:6c:7c:c5:2b:60:38:52:1e:c6:c9:fc:
6e:7a:26:6a:0f:77:5c:ef:86:8f:75:69:c8:c9:3d:
f7:29:6b:b6:ae:86:64:51:a4:27:d3:03:b0:26:0b:
c0:b3:58:fd:b7:f0:73:e9:2d:c2:3a:78:b4:d6:a1:
21:de:bf:c3:97:2c:d8:67:fc:44:92:f5:08:cb:7b:
d8:10:c9:0f:5b:3c:94:29:20:4b:39:30:ed:aa:ca:
80:67:48:04:71:b8:c0:d1:59:27:04:05:9b:50:ec:
52:40:f9:c9:e0:71:0c:c3:85:0b:ef:d9:02:8b:13:
e3:5e:b5:a6:39:87:38:bd:25:72:85:83:78:fe:db:
78:10:6e:71:38:27:d7:fb:17:98:fb:59:37:95:3f:
36:d6:e5:13:3f:a7:e5:b1:02:fa:f0:8a:fc:8b:b8:
f9:55:05:23:f7:e7:cf:dc:a7:bd:b7:99:cd:e4:5a:
39:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:86:B0:C3:8C:A5:ED:B1:84:3B:3C:0F:A4:CE:FB:3D:85:53:E0:BB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E4aww4yl7bGEOzwPpM77PYVT4Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.119.0/24
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.161.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
5b:47:45:e1:55:b3:b5:59:76:c2:c7:a7:b5:da:79:37:c0:01:
b6:a6:8b:10:ca:f6:ac:d1:f5:03:34:5b:67:11:a0:fe:a2:05:
66:4d:ae:b4:be:ea:cd:c5:9a:06:5a:9f:60:92:79:ae:ef:51:
ae:df:8c:c4:16:08:0a:1c:f3:50:c3:d8:f9:65:89:dd:f4:a7:
41:ae:32:80:70:13:eb:0c:ac:ac:a3:e0:15:a9:f1:37:1f:5e:
0d:c1:00:42:0d:7b:c0:4e:fe:fd:ea:77:5c:b6:6e:c7:df:f9:
54:01:a2:81:78:3e:fa:d8:a3:4e:43:6b:68:b0:15:07:57:49:
9e:18:6d:25:76:b0:6b:a5:25:ee:01:82:77:ec:17:28:4f:33:
5c:da:0a:a0:7a:83:09:3d:9a:77:76:ca:c4:4a:d5:1b:7e:77:
6f:d7:2f:3d:f2:55:f3:44:2f:75:0c:c3:e3:48:c5:41:e0:0f:
71:ff:ca:a1:03:d6:4c:f8:51:2b:d2:de:de:71:71:92:20:e0:
38:07:27:73:1f:9f:94:9b:70:c4:dd:bc:1c:dd:5b:3d:ac:d8:
10:f5:61:d6:1b:58:d4:6f:af:b8:93:6e:46:92:b9:85:7d:3c:
64:c9:df:43:21:4c:96:b6:6d:18:57:bc:9f:b0:d7:01:52:9c:
88:09:2f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 17 13:50:12 2024 by rpki-client on console-fra.rpki-client.org