Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J-kJlrUYSuJ0cufhsaQyn38fChU.roa
File: J-kJlrUYSuJ0cufhsaQyn38fChU.roa (raw, json)
Hash identifier: OgBA5QgpcTVH62Wkp3No/+CISJoOmVmzVtfTGf1KThU=
Subject key identifier: 27:E9:09:96:B5:18:4A:E2:74:72:E7:E1:B1:A4:32:9F:7F:1F:0A:15
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018D31BC79603E7351AEB309500565659850
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J-kJlrUYSuJ0cufhsaQyn38fChU.roa
Signing time: Mon 22 Jan 2024 15:14:11 +0000
ROA not before: Mon 22 Jan 2024 15:14:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 07:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:bc:79:60:3e:73:51:ae:b3:09:50:05:65:65:98:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 22 15:14:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27e90996b5184ae27472e7e1b1a4329f7f1f0a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:ef:23:b7:73:1c:08:01:d5:ed:99:50:c9:
f1:64:26:da:80:60:13:ed:c6:e1:d2:b0:9d:78:15:
15:60:91:87:43:4d:e9:b1:61:04:d1:f5:7e:54:24:
04:fb:3d:4d:a1:1e:f4:89:03:5f:b9:af:bd:f3:91:
a6:2e:1d:bd:33:71:12:1f:d9:49:19:f3:d6:a1:e5:
4f:e6:26:62:3c:de:9d:7b:05:b7:83:e6:a0:b3:18:
dc:19:4d:7b:79:6c:d6:d4:20:d7:26:d0:0e:61:c1:
e3:c1:04:6f:5b:ca:de:b7:92:32:f5:ff:c9:6e:73:
d7:37:19:2b:18:4f:3f:51:70:e0:04:1f:a7:a4:5d:
a5:bc:0e:c6:53:50:dd:e1:24:09:c9:81:28:cb:62:
15:fa:bf:30:7b:f1:52:01:db:f2:fe:65:52:ec:d2:
c2:ef:dd:7d:63:80:3d:53:a1:90:d8:23:f0:73:de:
3e:e3:64:d2:58:e6:82:dc:e6:3b:d4:5d:ec:7e:13:
a8:4f:c8:fd:3b:96:37:ce:9e:c6:3d:34:f4:cf:51:
c0:89:ce:19:6d:0b:87:66:6c:e5:36:23:e7:cc:0d:
5e:d3:74:2a:b3:4a:f1:ae:eb:62:a9:80:8a:df:57:
4b:b8:2f:7f:10:2f:16:e0:dd:ec:a6:53:ff:33:f7:
1b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E9:09:96:B5:18:4A:E2:74:72:E7:E1:B1:A4:32:9F:7F:1F:0A:15
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J-kJlrUYSuJ0cufhsaQyn38fChU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.95.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5f:7b:71:f6:14:4c:49:39:e0:d0:e5:ef:b7:58:82:3c:cf:
08:1c:0e:ff:16:c4:53:3a:c1:09:d2:54:7f:45:92:d3:6c:0d:
3e:d9:ea:f6:be:c8:47:64:a3:70:d7:b3:4a:8f:8c:5a:ff:95:
4f:d1:8b:80:90:d8:0c:48:9a:60:c9:b3:c1:9f:d0:37:a6:8e:
0b:1d:96:bd:86:ff:b7:98:65:b4:40:90:a8:34:d4:62:b1:15:
ef:d2:48:eb:bc:cd:7e:9a:61:29:81:a7:1f:49:b7:18:0d:6d:
6e:6b:a6:95:7d:40:a2:b1:6f:97:d3:9a:b2:5d:58:2d:07:1a:
15:ad:f0:2a:00:09:b8:6a:db:18:fc:a9:f6:37:09:03:2e:52:
4b:8f:22:11:42:93:93:66:7e:86:ab:05:84:62:b3:3b:c1:54:
c9:90:74:69:1b:8c:df:73:fb:09:bd:32:33:09:7a:94:1c:be:
83:54:c2:b9:da:87:0c:18:4a:a0:91:8f:6b:9a:d7:b2:d8:90:
83:d1:4f:04:88:10:d1:da:91:f3:5e:37:6f:ca:2c:0f:ee:22:
ee:b2:ee:c4:5e:38:8e:8b:bf:0b:1d:3c:db:30:02:b3:6a:ff:
70:68:99:eb:08:4c:d6:43:69:07:c2:80:cd:e7:35:ba:24:53:
0c:94:65:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 28 10:27:37 2024 by rpki-client on console-fra.rpki-client.org