Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MQ1vT7deVM92kxWvEGk0_FVLnng.roa
File: MQ1vT7deVM92kxWvEGk0_FVLnng.roa (raw, json)
Hash identifier: Ukai52A3lfQcxcqq3XDErEKxy28KQTCXsyrilptrS3E=
Subject key identifier: 31:0D:6F:4F:B7:5E:54:CF:76:93:15:AF:10:69:34:FC:55:4B:9E:78
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019650E730116E7FB3826CC808423F5C0C33
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MQ1vT7deVM92kxWvEGk0_FVLnng.roa
Signing time: Sun 20 Apr 2025 01:54:10 +0000
ROA not before: Sun 20 Apr 2025 01:54:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:e7:30:11:6e:7f:b3:82:6c:c8:08:42:3f:5c:0c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 20 01:54:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=310d6f4fb75e54cf769315af106934fc554b9e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:16:27:a1:4f:8a:aa:c4:ac:c8:7b:02:d0:bf:
67:09:a0:3d:88:05:d1:18:a6:ca:2a:c7:76:7f:93:
34:4f:f7:25:fb:fc:3a:3e:79:3b:b8:86:dc:76:f4:
99:80:fc:74:f5:ed:78:8a:e1:c5:a1:ee:70:24:11:
1d:9c:96:60:39:3d:22:d1:40:5f:02:8b:a4:65:03:
23:88:63:29:fd:d3:24:91:ae:a4:ae:d3:a3:9a:50:
4f:a2:fe:a4:88:d3:1e:09:de:65:77:d6:1e:35:a3:
85:ed:47:d3:20:de:8b:c2:31:a8:3d:70:23:4f:02:
49:b3:7e:91:42:5d:d3:51:25:f3:9e:18:14:2b:31:
08:37:f8:34:bc:40:b6:96:47:ac:fd:56:b1:7f:6c:
d9:63:d6:a2:8a:c0:be:77:33:fb:8f:51:5d:31:d6:
94:8a:2c:8f:0a:43:1e:4f:91:2d:6c:ff:59:56:7e:
3e:39:da:81:98:97:bc:c2:a7:f1:37:c6:09:26:97:
77:a0:5f:2e:8e:f9:83:d1:67:df:74:3c:80:12:65:
60:00:0b:e4:55:07:00:84:7f:3d:91:28:02:70:ec:
47:a4:40:56:3e:cd:af:8b:d6:fe:59:bc:ad:97:17:
57:1b:3b:2b:01:b3:e1:55:40:c7:e6:69:02:35:3a:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:6F:4F:B7:5E:54:CF:76:93:15:AF:10:69:34:FC:55:4B:9E:78
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MQ1vT7deVM92kxWvEGk0_FVLnng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.86.0/24
163.5.111.0/24
163.5.155.0-163.5.156.255
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ec:9e:09:ea:98:7d:ac:4c:5c:f7:c7:3b:d0:5a:30:8d:12:
f6:fc:d5:38:e0:bd:10:11:41:bc:fc:48:18:28:4f:3f:a7:23:
fc:cd:eb:8f:b4:9f:74:4a:8c:8c:21:34:a5:6b:81:c6:bd:36:
ae:02:df:3f:03:2a:4e:31:78:49:f3:50:a0:df:4b:81:a7:d6:
90:9d:76:3e:a8:cd:47:76:fd:29:8d:34:fb:88:a5:20:23:3e:
70:aa:94:f1:85:bd:89:1e:2c:b4:cb:b8:d6:1d:a0:44:64:cf:
a8:0a:27:2d:ba:e9:df:6c:0e:0a:b4:ae:b3:d2:99:b4:fd:76:
9f:0f:0b:5c:fa:2c:af:fe:d9:79:52:d8:13:59:44:82:62:a4:
21:0d:62:fd:08:e7:11:be:f3:8e:ce:35:b7:9b:9e:e5:80:66:
80:19:6e:a1:a4:42:62:c2:19:ee:1c:dd:3e:69:68:6c:a4:09:
b0:53:f0:c3:cd:54:3a:f2:5a:c1:bf:d3:ab:c9:f5:4b:76:0d:
62:71:08:3d:b7:45:9b:ce:41:52:02:36:83:3e:b5:f1:00:a5:
3a:bd:64:0b:a2:75:45:2a:bc:40:35:da:82:25:d6:69:36:0a:
37:2c:3d:c4:13:74:3b:bb:2b:5e:9e:eb:94:bc:da:6b:b0:03:
96:56:48:33
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZZQ5zARbn+zgmzICEI/XAwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNDIwMDE1NDEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTBkNmY0ZmI3NWU1NGNmNzY5MzE1YWYxMDY5MzRmYzU1NGI5ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BYnoU+KqsSsyHsC0L9nCaA9iAXR
GKbKKsd2f5M0T/cl+/w6Pnk7uIbcdvSZgPx09e14iuHFoe5wJBEdnJZgOT0i0UBf
AoukZQMjiGMp/dMkka6krtOjmlBPov6kiNMeCd5ld9YeNaOF7UfTIN6LwjGoPXAj
TwJJs36RQl3TUSXznhgUKzEIN/g0vEC2lkes/Vaxf2zZY9aiisC+dzP7j1FdMdaU
iiyPCkMeT5EtbP9ZVn4+OdqBmJe8wqfxN8YJJpd3oF8ujvmD0WffdDyAEmVgAAvk
VQcAhH89kSgCcOxHpEBWPs2vi9b+WbytlxdXGzsrAbPhVUDH5mkCNTpaGwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFDENb0+3XlTPdpMVrxBpNPxVS554MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTVExdlQ3ZGVWTTkya3hXdkVHazBfRlZMbm5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAowVWAwQA
owVvMAwDBACjBZsDBACjBZwDBACjBfIwDQYJKoZIhvcNAQELBQADggEBAEfsngnq
mH2sTFz3xzvQWjCNEvb81TjgvRARQbz8SBgoTz+nI/zN64+0n3RKjIwhNKVrgca9
Nq4C3z8DKk4xeEnzUKDfS4Gn1pCddj6ozUd2/SmNNPuIpSAjPnCqlPGFvYkeLLTL
uNYdoERkz6gKJy266d9sDgq0rrPSmbT9dp8PC1z6LK/+2XlS2BNZRIJipCENYv0I
5xG+847ONbebnuWAZoAZbqGkQmLCGe4c3T5paGykCbBT8MPNVDryWsG/06vJ9Ut2
DWJxCD23RZvOQVICNoM+tfEApTq9ZAuidUUqvEA12oIl1mk2CjcsPcQTdDu7K16e
65S82muwA5ZWSDM=
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:31:26 2025 by rpki-client