Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Emg2SGoEjWHbLrUr72qm2PWYark.roa
File: Emg2SGoEjWHbLrUr72qm2PWYark.roa (raw, json)
Hash identifier: SvZaDBb2jpmAHbEPSWrsMd7vewRAZ5dAQ9Xouc0AKzo=
Subject key identifier: 12:68:36:48:6A:04:8D:61:DB:2E:B5:2B:EF:6A:A6:D8:F5:98:6A:B9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01931BEDCFE6C4EF15B3746D5F2F3D1BF378
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Emg2SGoEjWHbLrUr72qm2PWYark.roa
Signing time: Mon 11 Nov 2024 15:53:10 +0000
ROA not before: Mon 11 Nov 2024 15:53:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.17.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1b:ed:cf:e6:c4:ef:15:b3:74:6d:5f:2f:3d:1b:f3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 11 15:53:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=126836486a048d61db2eb52bef6aa6d8f5986ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:07:24:3b:ec:c7:f0:68:07:af:48:6d:5d:08:
72:ea:0a:67:24:12:f0:54:88:7a:dc:1e:64:b5:16:
e8:a1:41:94:1f:50:f8:87:56:17:df:54:e2:3f:7f:
5a:9d:84:73:f5:b6:f1:ca:c5:85:79:2f:c5:5c:49:
eb:a0:e0:43:2e:46:a4:66:9b:5b:1f:5f:a3:05:4a:
f9:d7:7e:0e:60:ec:49:ad:8e:23:a6:fe:07:f6:5f:
5b:95:2a:ed:ba:82:d3:d6:ec:ec:d9:b8:91:8f:4a:
14:7b:b4:ea:f9:3b:8e:fc:44:0e:b2:a3:77:20:46:
07:75:c9:01:8e:1f:98:f6:95:7e:4f:e5:8e:5c:d5:
2d:2e:3b:8c:da:fb:65:16:78:d6:01:9b:d0:13:44:
dc:b9:fb:f3:67:53:e0:92:e8:37:30:cf:16:ea:1b:
c3:a8:65:04:6c:cd:a4:ab:62:16:7b:37:0a:24:ab:
8a:7c:13:78:98:2e:12:34:a7:90:92:a9:1c:7e:e2:
55:a5:97:3a:73:e5:7a:23:23:85:ab:5b:b9:0f:bb:
08:8a:32:f9:cc:48:a1:f9:a6:f6:a4:a2:dd:12:94:
39:0c:4e:a2:80:42:00:bd:c4:14:d7:9c:7b:aa:47:
d3:c8:fa:79:83:dd:6e:7d:7f:61:1a:bd:a9:ba:51:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:68:36:48:6A:04:8D:61:DB:2E:B5:2B:EF:6A:A6:D8:F5:98:6A:B9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Emg2SGoEjWHbLrUr72qm2PWYark.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.17.0/24
163.5.30.0/24
163.5.59.0/24
163.5.62.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:5b:ed:f0:f3:de:05:f8:3e:7f:1a:78:48:ea:85:b1:ee:8a:
53:9d:14:38:72:aa:86:bf:33:64:f8:c8:4f:31:58:c9:27:08:
b5:08:c0:d1:8b:8e:8d:39:bd:3a:ad:ba:ec:76:dc:96:ab:3d:
7c:cf:a4:e7:c0:10:82:d1:98:a3:1b:eb:bb:ba:ac:cb:d8:95:
a7:48:fb:5a:eb:8e:75:d2:76:ed:8f:b2:7a:ca:5c:33:3c:9d:
79:83:ff:e6:7a:56:65:db:4a:91:fb:15:ef:3d:bf:d3:43:b6:
75:eb:6c:36:dc:22:92:f4:72:d1:b6:8d:ea:9a:5d:fd:5b:dc:
fc:97:ab:7c:06:51:9a:40:58:13:32:02:a9:3a:4e:f9:21:b4:
70:45:61:1c:cf:c8:cd:ee:d9:36:27:0a:94:2a:bd:13:28:a8:
e0:db:ab:fc:8d:a8:06:6a:94:6d:21:5a:d8:97:a6:c2:f6:0d:
3f:e2:30:35:93:87:e3:3a:5b:1d:7e:ae:81:da:16:6a:09:f0:
a0:30:57:d5:2f:69:24:79:62:7c:dd:00:8e:29:69:6d:f4:b7:
43:c0:64:85:a8:60:91:eb:0d:74:32:37:37:14:6b:57:46:77:
7c:c9:2c:ce:47:91:a8:ff:ef:ea:85:fd:58:f8:3f:42:f8:a6:
5f:c5:33:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:43:26 2024 by rpki-client on console-ams.rpki-client.org