Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NggsPITLDXnulLO2ZEc0cZ3dYjo.roa
File: NggsPITLDXnulLO2ZEc0cZ3dYjo.roa (raw, json)
Hash identifier: oZ5CWvuryN1yLRwYJ7gtQ31vmsbTea984b7oVFLngKk=
Subject key identifier: 36:08:2C:3C:84:CB:0D:79:EE:94:B3:B6:64:47:34:71:9D:DD:62:3A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192421423E7F7F203906DD59B8FCC66884D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NggsPITLDXnulLO2ZEc0cZ3dYjo.roa
Signing time: Mon 30 Sep 2024 08:37:48 +0000
ROA not before: Mon 30 Sep 2024 08:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Oct 2024 14:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:14:23:e7:f7:f2:03:90:6d:d5:9b:8f:cc:66:88:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 30 08:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36082c3c84cb0d79ee94b3b6644734719ddd623a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a1:39:7e:0e:1c:96:b7:a6:49:bf:b1:04:33:
2e:e2:fe:19:9d:ce:a2:4b:09:ca:44:dc:79:f8:7e:
46:63:06:3e:9d:22:00:72:b8:23:a1:5e:be:e3:89:
49:08:a6:5b:3e:33:cb:24:c1:b2:31:1c:66:38:4d:
60:8d:6a:7f:2f:12:2f:84:09:d3:63:8d:2e:40:a3:
0a:20:89:0b:ec:66:db:1b:a0:0c:b8:cf:a6:fb:dd:
fc:ed:6e:dd:83:ec:a4:6d:c0:9e:ea:47:74:d9:da:
c3:82:bd:00:c5:7e:21:08:5f:11:20:ec:78:2d:6e:
c4:55:a3:e4:97:ff:38:63:5c:24:ee:77:69:c1:8a:
ea:9f:17:d9:72:f4:bc:fc:5f:6b:5f:c8:e8:e7:cb:
ca:2f:e0:a4:68:72:ac:9d:29:0d:eb:53:ef:22:4e:
b5:36:4e:e3:b9:10:fd:0c:c2:67:13:eb:34:32:f4:
3e:10:f6:43:c5:d4:62:d3:0f:cc:6e:5c:68:dc:6d:
77:2e:9b:fe:59:a5:7d:b1:04:49:f9:64:63:64:61:
5c:be:cf:49:b2:27:65:56:a4:3e:92:b4:fc:6a:05:
29:11:01:e2:f5:22:9a:d4:89:fd:d4:a3:fa:b5:69:
5a:a1:48:c1:67:d4:3c:e4:4a:85:72:39:78:0f:f1:
ad:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:08:2C:3C:84:CB:0D:79:EE:94:B3:B6:64:47:34:71:9D:DD:62:3A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/NggsPITLDXnulLO2ZEc0cZ3dYjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.58.0/23
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0-163.5.140.255
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.247.0-163.5.248.255
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:a5:71:b4:76:c2:7f:21:62:d2:5c:15:97:09:25:6f:50:e3:
ca:b0:56:9c:91:1a:82:4f:27:d4:27:98:e7:5c:c6:0d:44:34:
f8:aa:67:5a:17:90:ff:1b:44:0f:60:06:96:0c:f9:c0:0a:3d:
db:68:9c:e8:56:f5:f8:61:29:3e:03:ed:5b:f9:7c:c1:a2:a6:
78:81:46:9e:c5:1c:10:60:e1:d3:f2:19:c6:c8:72:8e:6c:d3:
f2:d7:38:6a:a1:60:a7:96:47:41:a3:f9:73:04:97:99:ce:1f:
5c:2a:bc:cb:22:cb:d5:f8:2d:49:d6:49:26:af:8f:3d:81:07:
14:da:c6:d5:3b:70:ca:cd:11:ab:6a:0e:c3:5b:0f:70:c2:b3:
88:82:1f:fe:55:d5:77:f5:63:b8:f2:93:4a:10:fc:bb:60:7a:
a5:2c:13:a1:28:fb:f7:9c:31:31:e6:c9:a4:41:0a:60:96:42:
b3:0f:99:af:8b:4a:68:56:01:21:59:95:c4:d2:34:3b:ce:14:
9a:c2:db:b7:0c:39:c3:e5:03:8d:d0:1b:1b:2d:6d:49:70:0a:
5d:0c:0e:f5:10:12:f9:e2:ba:54:3a:25:ce:dc:52:3a:1a:e4:
ad:5c:71:7b:50:a9:b3:c7:42:a6:33:53:ce:2c:df:2b:1f:1d:
f4:4a:f1:cd
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAZJCFCPn9/IDkG3Vm4/MZohNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwOTMwMDgzNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjA4MmMzYzg0Y2IwZDc5ZWU5NGIzYjY2NDQ3MzQ3MTlkZGQ2MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaE5fg4clremSb+xBDMu4v4Znc6i
SwnKRNx5+H5GYwY+nSIAcrgjoV6+44lJCKZbPjPLJMGyMRxmOE1gjWp/LxIvhAnT
Y40uQKMKIIkL7GbbG6AMuM+m+9387W7dg+ykbcCe6kd02drDgr0AxX4hCF8RIOx4
LW7EVaPkl/84Y1wk7ndpwYrqnxfZcvS8/F9rX8jo58vKL+CkaHKsnSkN61PvIk61
Nk7juRD9DMJnE+s0MvQ+EPZDxdRi0w/Mblxo3G13Lpv+WaV9sQRJ+WRjZGFcvs9J
sidlVqQ+krT8agUpEQHi9SKa1In91KP6tWlaoUjBZ9Q85EqFcjl4D/GtBQIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFDYILDyEyw157pSztmRHNHGd3WI6MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTmdnc1BJVExEWG51bExPMlpFYzBjWjNkWWpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQA
owUeAwQBowU6AwQAowVJAwQAowVZAwQAowVcMAwDBAGjBW4DBAGjBXADBAGjBXYD
BACjBXkDBACjBX4DBAGjBYADBACjBYQwDAMEAKMFiwMEAKMFjDAMAwQAowWPAwQA
owWQAwQAowWSAwQAowWXAwQAowWgAwQAowWiAwQAowWnAwQAowWtAwQAowWyAwQA
owW2AwQBowW8AwQAowW/AwQBowXIMAwDBACjBcsDBACjBc4DBACjBdoDBACjBeAD
BACjBeQDBACjBfEwDAMEAKMF9wMEAKMF+AMEAKMF+gMEAKMF/TANBgkqhkiG9w0B
AQsFAAOCAQEATKVxtHbCfyFi0lwVlwklb1DjyrBWnJEagk8n1CeY51zGDUQ0+Kpn
WheQ/xtED2AGlgz5wAo922ic6Fb1+GEpPgPtW/l8waKmeIFGnsUcEGDh0/IZxshy
jmzT8tc4aqFgp5ZHQaP5cwSXmc4fXCq8yyLL1fgtSdZJJq+PPYEHFNrG1Ttwys0R
q2oOw1sPcMKziIIf/lXVd/VjuPKTShD8u2B6pSwToSj795wxMebJpEEKYJZCsw+Z
r4tKaFYBIVmVxNI0O84UmsLbtww5w+UDjdAbGy1tSXAKXQwO9RAS+eK6VDolztxS
OhrkrVxxe1Cps8dCpjNTzizfKx8d9ErxzQ==
-----END CERTIFICATE-----
Generated at Tue Oct 1 18:42:35 2024 by rpki-client on console-fra.rpki-client.org