Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Efa6Ch49hrbGerXAaUEa2UXxGf4.roa
File: Efa6Ch49hrbGerXAaUEa2UXxGf4.roa (raw, json)
Hash identifier: RxSGmgaWEy15LU/+peCoLo6qU5DxpOBFfUyJ9MKXYko=
Subject key identifier: 11:F6:BA:0A:1E:3D:86:B6:C6:7A:B5:C0:69:41:1A:D9:45:F1:19:FE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01924D7BC0F27DED92441095B8617FCF39CC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Efa6Ch49hrbGerXAaUEa2UXxGf4.roa
Signing time: Wed 02 Oct 2024 13:46:48 +0000
ROA not before: Wed 02 Oct 2024 13:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 09:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:7b:c0:f2:7d:ed:92:44:10:95:b8:61:7f:cf:39:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 2 13:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11f6ba0a1e3d86b6c67ab5c069411ad945f119fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:9d:65:4d:79:b8:b4:43:d6:ab:3d:8e:05:
0f:df:5a:52:ae:ed:2b:3a:5e:25:7f:72:a0:e6:d5:
69:dc:bd:f7:91:9e:2a:0b:09:3b:49:dc:02:be:df:
d8:c0:72:39:a9:ce:d6:e9:d5:36:33:b7:0f:a3:54:
a0:dd:7d:7e:12:68:d0:7f:c9:b9:b1:3e:e0:d5:5f:
18:6e:c7:e8:7c:10:23:65:35:d1:49:b6:ae:16:3d:
8f:d2:91:ae:5e:34:5b:80:61:af:61:37:d4:c2:db:
f3:29:68:b7:87:e3:5e:f9:b9:6a:f1:0d:29:c3:c0:
5c:d0:b8:e5:49:db:33:9c:c8:ac:71:dd:c3:12:a4:
f7:12:11:a3:48:87:91:b0:be:fa:93:15:c2:f9:e0:
94:34:1d:4f:23:37:b9:ca:75:aa:d9:af:e5:f9:d8:
8b:ff:a4:0b:02:5e:20:af:e4:38:f1:c6:a2:de:e3:
ea:93:b4:64:d0:07:e3:bd:a3:57:4c:7c:9b:17:0a:
2b:77:6e:6f:f0:78:f0:5f:e1:76:a9:19:b0:30:3c:
39:ed:92:49:34:9c:df:59:f5:94:74:2c:55:58:00:
e6:b6:10:74:6d:c5:e7:f2:c0:3b:f3:e5:a2:bb:58:
ba:cf:e5:1a:25:32:cf:01:4b:a1:fc:5e:46:81:2a:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F6:BA:0A:1E:3D:86:B6:C6:7A:B5:C0:69:41:1A:D9:45:F1:19:FE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Efa6Ch49hrbGerXAaUEa2UXxGf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.56.0/24
163.5.58.0/23
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.247.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
79:48:95:e7:4d:e0:8c:56:31:14:ad:eb:34:30:13:3d:54:ec:
18:ad:95:69:0c:94:74:07:45:e5:66:96:3a:8a:6a:20:8d:7d:
c0:9a:21:e7:c0:bd:c3:40:37:ae:d6:0c:f9:5f:64:a0:b3:e8:
e6:8b:45:79:74:fc:2a:31:91:c3:b0:a2:3d:9c:38:e9:8a:1b:
d2:ec:de:35:c1:0c:c7:96:9c:b2:f2:4a:97:f7:44:16:e8:ce:
f6:3e:cf:79:58:a4:1e:19:8a:8d:55:8c:f8:26:83:c0:ee:0d:
d0:86:db:14:f2:b8:f7:83:b8:6f:8e:ae:a6:40:97:b6:ae:5e:
c9:5e:3c:fb:a6:ac:5f:15:19:bb:05:33:bc:ef:c8:c9:dc:4b:
1d:2e:54:16:60:e9:a1:e8:18:61:33:08:3c:b1:df:ec:61:14:
a0:8e:b5:94:ee:bf:72:15:75:5d:22:a1:f6:1b:91:e9:a4:61:
b7:34:2b:56:8b:3d:02:86:6a:12:a2:c0:2c:e6:35:b9:17:c2:
5b:4d:0e:06:9f:92:33:93:dc:f6:6c:67:1f:6d:21:9d:64:7a:
0a:0a:5e:e7:8a:7e:e3:b8:a0:96:27:22:13:bb:b6:0c:bd:64:
51:e8:3c:9a:f8:33:f0:a3:6d:ae:ea:86:b3:e3:24:e3:a3:ea:
d9:eb:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 14:31:48 2024 by rpki-client on console-ams.rpki-client.org