Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L9yKwZptS8hY51Hpit5V2JWZxto.roa
File: L9yKwZptS8hY51Hpit5V2JWZxto.roa (raw, json)
Hash identifier: igIBfPeKbG3g88hKHqtzHD9hm5yq7vLPEryNLf8gEkk=
Subject key identifier: 2F:DC:8A:C1:9A:6D:4B:C8:58:E7:51:E9:8A:DE:55:D8:95:99:C6:DA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EC30647ADE8308CFE7D33ACDE18D0578D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L9yKwZptS8hY51Hpit5V2JWZxto.roa
Signing time: Tue 09 Apr 2024 13:22:32 +0000
ROA not before: Tue 09 Apr 2024 13:22:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 09:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:06:47:ad:e8:30:8c:fe:7d:33:ac:de:18:d0:57:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 9 13:22:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fdc8ac19a6d4bc858e751e98ade55d89599c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a0:9a:8f:1f:88:b1:71:08:43:8c:8d:15:f9:
99:61:67:05:a8:fe:bb:89:22:ae:e2:43:44:f9:c3:
a1:69:ef:9a:09:b8:e9:30:a3:2e:e8:be:f3:f3:64:
c6:cf:c0:b3:21:4d:fd:f3:89:68:db:3d:48:79:60:
4f:22:0b:f3:32:7e:db:d0:fa:3e:63:0d:ca:8e:56:
68:8b:ce:85:11:71:a5:c5:b2:82:3f:03:c6:88:28:
bd:94:b2:0b:f1:65:30:5b:30:b3:69:57:58:52:60:
e2:fd:30:46:d2:7c:ac:79:30:ef:3c:bc:31:c4:59:
84:49:20:32:cf:c3:16:e2:ae:35:66:52:af:95:24:
9d:3e:8d:aa:55:4a:6a:22:54:96:ed:85:0b:2e:df:
4e:8e:bb:3a:b2:21:d3:41:de:5e:45:7f:52:73:ac:
fc:e5:2b:fe:ac:06:f8:b8:77:df:ee:c7:e8:d1:5e:
c4:7a:86:04:dc:a7:1a:5f:f5:6d:5e:fe:ae:ef:d8:
fa:0d:be:4f:26:af:cb:ab:53:68:17:93:df:75:41:
13:44:2b:28:fa:52:d3:ff:ac:fc:a0:41:ac:8a:43:
22:f9:e8:4b:41:f1:b0:00:9c:76:ea:58:2b:9f:25:
b6:bb:01:1c:c5:4e:36:e8:d8:77:91:e7:73:34:03:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:8A:C1:9A:6D:4B:C8:58:E7:51:E9:8A:DE:55:D8:95:99:C6:DA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/L9yKwZptS8hY51Hpit5V2JWZxto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0/24
163.5.126.0/24
163.5.128.0/23
163.5.134.0/24
163.5.139.0-163.5.140.255
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.154.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.171.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
87:3d:9c:dc:f5:99:9c:0c:7b:9b:d8:06:e4:eb:72:b5:e7:c8:
10:e8:f9:36:de:39:48:79:4a:ce:aa:16:b0:00:92:06:92:2d:
aa:d4:7d:d7:ab:a3:6c:22:e1:a4:a0:b0:bb:d5:6a:21:90:a7:
66:1c:6b:0f:e6:d4:0f:ee:0b:56:6e:68:e8:2d:00:8a:3f:b3:
81:60:be:34:c9:d1:f7:ae:ba:52:c9:09:28:9c:44:00:da:be:
5d:bc:a7:49:d3:fd:a2:4e:4a:eb:b8:e2:d8:17:ca:bc:2b:2d:
88:57:f4:58:5d:47:ba:73:47:60:d3:74:4c:b9:7e:7b:3b:61:
7e:e5:a7:b9:45:1e:ac:1e:f7:81:7d:ba:24:88:9c:61:65:ed:
c5:21:4e:a7:7d:19:ba:45:c7:fb:25:8a:ff:01:9d:14:5c:4e:
a2:c9:62:a9:35:36:cd:0d:91:1a:8c:6e:34:75:d5:77:05:9f:
8a:b0:6d:c0:66:5a:fc:3c:1d:ea:51:3c:b9:2c:6d:82:4f:58:
51:bb:75:c3:5a:f8:d7:2c:6d:9f:52:f7:b6:73:3b:62:6a:20:
d6:a0:23:1e:db:d3:94:18:8f:f9:b0:2b:85:5a:75:10:3e:b4:
0a:da:81:a2:27:cb:22:ab:2d:41:df:90:11:74:0c:5d:6c:dc:
36:3c:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 13:40:22 2024 by rpki-client on console-fra.rpki-client.org