Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FWQCHByLPax1Vz8Qp383NkpOMs4.roa
File: FWQCHByLPax1Vz8Qp383NkpOMs4.roa (raw, json)
Hash identifier: H75gK3ljB/oalscbJTopQgTLLcGimpV4gvky3jy2Eo4=
Subject key identifier: 15:64:02:1C:1C:8B:3D:AC:75:57:3F:10:A7:7F:37:36:4A:4E:32:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01914A9AB9C8733503F9540D077C4A42B989
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FWQCHByLPax1Vz8Qp383NkpOMs4.roa
Signing time: Tue 13 Aug 2024 07:18:59 +0000
ROA not before: Tue 13 Aug 2024 07:18:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 14:12:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:9a:b9:c8:73:35:03:f9:54:0d:07:7c:4a:42:b9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 13 07:18:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1564021c1c8b3dac75573f10a77f37364a4e32ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c2:cc:c3:08:1c:85:c3:fd:78:31:9d:29:11:
95:eb:c7:e0:b3:10:b8:7d:a8:78:7c:ac:c7:17:08:
17:a4:e6:6e:ea:bc:db:13:0a:66:a2:bf:79:02:82:
88:53:83:29:a1:c2:80:f8:09:7c:05:c5:b3:87:e2:
99:79:b6:8c:85:1f:6e:5d:3d:1d:3c:74:a4:61:3d:
75:b5:b6:48:b4:9e:8a:c7:27:03:13:18:a6:5e:a2:
96:31:ed:a1:f2:27:16:d9:d6:fe:4e:ea:f7:1a:a6:
68:0c:79:10:b9:79:5b:56:51:dc:76:1c:31:8a:c9:
5f:59:fc:d8:ec:d8:b6:e9:52:45:bd:18:20:53:55:
86:59:55:54:fc:ab:f4:a3:0d:2b:be:6d:35:9a:0c:
dd:90:70:7c:48:0b:0a:02:c5:a8:d4:f2:7d:3b:2c:
d6:a9:d5:8d:38:9e:e8:5a:ab:95:6d:26:bd:76:29:
49:73:66:26:a3:77:ab:20:43:c0:6e:07:b5:04:dd:
d1:8f:7a:42:8a:11:ce:38:2d:12:48:aa:07:f6:4d:
43:05:cb:df:49:19:7b:1a:2a:ca:28:ea:de:c8:ec:
18:a0:c6:4e:92:90:a0:51:e0:cb:5d:4b:48:f7:f6:
aa:07:67:e7:bf:14:0e:af:3d:84:01:fd:c0:91:66:
01:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:64:02:1C:1C:8B:3D:AC:75:57:3F:10:A7:7F:37:36:4A:4E:32:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FWQCHByLPax1Vz8Qp383NkpOMs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.58.0/23
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.136.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.166.0-163.5.168.255
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d0:f5:bc:5b:f1:47:24:1e:b6:a3:a9:67:18:d4:cc:76:5f:
8a:2f:81:43:f8:65:d6:0e:d8:35:b1:ff:fc:ee:5d:a5:c8:0f:
5e:03:28:b4:9b:32:6f:9f:8f:3e:ac:40:65:10:66:1b:0d:78:
47:ef:40:24:c6:e0:9b:1a:29:17:58:0a:01:61:6b:1a:9e:8b:
f0:25:8c:28:51:dc:93:8e:0e:a8:1b:0c:b2:0e:7c:b8:29:6f:
e8:38:19:17:14:26:08:dd:78:ba:56:95:38:b3:69:f6:cc:48:
62:41:0b:9c:bf:0d:05:6a:aa:b9:6d:0b:c4:d6:0f:f2:8a:9f:
5a:c3:06:09:d8:c0:a0:9e:97:02:4d:11:ad:64:94:3f:2c:da:
7b:f6:6a:05:c4:b9:59:55:0c:4d:42:49:3f:e9:39:b1:b5:da:
ae:8a:d3:2b:43:f3:58:00:55:18:da:39:13:54:d4:09:26:42:
92:b6:59:a2:95:6e:76:0b:34:03:8f:44:3f:82:97:63:ca:cd:
d8:3c:a6:e4:0f:23:76:07:c6:17:4b:3e:7c:a6:07:d5:0e:c9:
e4:3e:b8:f8:4e:ca:fe:54:52:04:47:5b:f5:ac:14:b3:05:67:
b2:01:de:57:2e:e1:0a:c1:bf:97:a3:2b:37:2b:e0:7e:c4:90:
1d:16:30:13
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgISAZFKmrnIczUD+VQNB3xKQrmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwODEzMDcxODU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTY0MDIxYzFjOGIzZGFjNzU1NzNmMTBhNzdmMzczNjRhNGUzMmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+sLMwwgchcP9eDGdKRGV68fgsxC4
fah4fKzHFwgXpOZu6rzbEwpmor95AoKIU4MpocKA+Al8BcWzh+KZebaMhR9uXT0d
PHSkYT11tbZItJ6KxycDEximXqKWMe2h8icW2db+Tur3GqZoDHkQuXlbVlHcdhwx
islfWfzY7Ni26VJFvRggU1WGWVVU/Kv0ow0rvm01mgzdkHB8SAsKAsWo1PJ9OyzW
qdWNOJ7oWquVbSa9dilJc2Ymo3erIEPAbge1BN3Rj3pCihHOOC0SSKoH9k1DBcvf
SRl7GirKKOreyOwYoMZOkpCgUeDLXUtI9/aqB2fnvxQOrz2EAf3AkWYB8QIDAQAB
o4IC1jCCAtIwHQYDVR0OBBYEFBVkAhwciz2sdVc/EKd/NzZKTjLOMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRldRQ0hCeUxQYXgxVno4UXAzODNOa3BPTXM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHrBggrBgEFBQcBBwEB/wSB2zCB2DCB1QQCAAEwgc4DBACj
BR4DBACjBTMDBAGjBToDBACjBVkwDAMEAaMFbgMEAaMFcAMEAKMFeTAMAwQAowV9
AwQAowV+AwQBowWAAwQAowWGAwQAowWIAwQAowWLAwQAowWPAwQAowWSAwQAowWX
AwQAowWgMAwDBAGjBaYDBACjBagDBACjBbIDBACjBbYDBAGjBbwDBACjBb8DBAGj
BcgwDAMEAKMFywMEAKMFzgMEAKMF2gMEAKMF4AMEAKMF5AMEAKMF6AMEAKMF8QME
AKMF+gMEAKMF/TANBgkqhkiG9w0BAQsFAAOCAQEAUdD1vFvxRyQetqOpZxjUzHZf
ii+BQ/hl1g7YNbH//O5dpcgPXgMotJsyb5+PPqxAZRBmGw14R+9AJMbgmxopF1gK
AWFrGp6L8CWMKFHck44OqBsMsg58uClv6DgZFxQmCN14ulaVOLNp9sxIYkELnL8N
BWqquW0LxNYP8oqfWsMGCdjAoJ6XAk0RrWSUPyzae/ZqBcS5WVUMTUJJP+k5sbXa
rorTK0PzWABVGNo5E1TUCSZCkrZZopVudgs0A49EP4KXY8rN2Dym5A8jdgfGF0s+
fKYH1Q7J5D64+E7K/lRSBEdb9awUswVnsgHeVy7hCsG/l6MrNyvgfsSQHRYwEw==
-----END CERTIFICATE-----
Generated at Thu Aug 15 19:59:47 2024 by rpki-client on console-fra.rpki-client.org