Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PR4uZpSlj8nsUgF9L18M4nnsv6g.roa
File: PR4uZpSlj8nsUgF9L18M4nnsv6g.roa (raw, json)
Hash identifier: 57HPx+kYslSFnhWy90SFQ5hlCIS7013TC+7qIpQRUoQ=
Subject key identifier: 3D:1E:2E:66:94:A5:8F:C9:EC:52:01:7D:2F:5F:0C:E2:79:EC:BF:A8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01910A70691B6AF6BB0BAC74888D058A0850
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PR4uZpSlj8nsUgF9L18M4nnsv6g.roa
Signing time: Wed 31 Jul 2024 20:17:04 +0000
ROA not before: Wed 31 Jul 2024 20:17:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 07:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0a:70:69:1b:6a:f6:bb:0b:ac:74:88:8d:05:8a:08:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 31 20:17:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d1e2e6694a58fc9ec52017d2f5f0ce279ecbfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:12:af:8c:47:8d:fe:24:0f:40:eb:d8:35:66:
ed:1f:69:eb:bf:04:44:a1:16:e8:e0:75:3b:12:aa:
cd:7b:78:8c:0b:e9:c1:2c:ce:28:c3:15:5a:84:e2:
19:90:5e:e9:00:14:05:d9:f4:9d:94:37:88:db:16:
bd:fd:b7:a7:ff:3c:46:a9:40:05:2f:0f:ee:dd:5b:
eb:3a:68:66:79:59:66:e1:22:d4:46:dd:cf:e3:93:
38:39:e0:e1:24:24:22:d0:67:e8:24:b4:ae:07:75:
80:e6:d4:80:8e:5e:55:8b:61:23:32:46:fd:16:0a:
1d:7e:47:c5:f0:87:08:60:d0:a1:02:14:99:78:8c:
58:0a:fc:f2:81:47:0e:61:76:d6:fa:c7:ab:43:8e:
fc:e5:0a:a1:b8:b7:5c:0f:ce:21:95:86:1a:84:c3:
43:0f:6b:2f:a4:f7:98:43:31:2a:90:23:86:04:cc:
57:ec:9d:ee:6c:dc:ea:8c:d1:f6:3d:5b:58:4e:6a:
53:e1:65:a3:cc:59:88:90:53:30:a5:56:28:97:9e:
bd:9e:a9:d0:66:33:ae:e5:3c:9c:66:c5:99:7a:a3:
28:1a:fa:b3:ac:63:ef:ff:b0:14:05:6c:f1:b1:78:
a2:1c:bf:f1:8b:96:11:6f:20:c9:51:48:cd:41:b5:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:2E:66:94:A5:8F:C9:EC:52:01:7D:2F:5F:0C:E2:79:EC:BF:A8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PR4uZpSlj8nsUgF9L18M4nnsv6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.199.0-163.5.201.255
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.218.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
39:48:4f:19:90:7b:46:bc:58:69:44:65:2a:0c:2f:b8:e1:d4:
5a:6e:67:81:e2:ac:83:aa:b4:3f:53:c4:4c:8c:b3:da:5a:12:
da:1f:e6:bd:69:0e:8c:f9:71:94:c5:c0:32:dd:ae:4b:6a:69:
30:86:b6:35:56:02:da:4b:75:79:e3:66:a1:9b:56:c8:2f:df:
38:a7:36:3f:21:73:dc:3a:20:23:63:3f:a8:10:fd:1e:14:cb:
16:34:4b:a5:fa:93:b0:69:02:1a:f5:1f:26:94:a0:a8:cc:b3:
44:71:1d:f6:25:6f:4d:90:5b:12:c9:0a:67:a8:14:db:58:46:
6e:e3:e4:de:87:b8:53:b7:c8:0c:96:71:3f:22:1f:28:60:1f:
a3:4e:4e:d2:18:95:ce:65:d1:69:31:e3:12:5d:6d:4b:ea:ad:
7f:64:5a:f2:4c:3a:e9:ba:a1:21:36:a5:aa:5b:ff:de:62:6a:
cf:26:76:d5:82:eb:20:46:70:24:46:df:4e:9b:35:2b:87:5e:
83:6f:28:fc:93:eb:28:7b:e3:fc:03:7a:55:a3:d4:e0:f9:63:
f0:9a:b4:0b:9e:fb:df:db:c7:b3:73:77:93:4d:d2:f0:cd:5f:
54:4c:d4:fc:91:d6:24:22:d3:9a:53:54:6a:67:ac:6c:93:82:
bc:c8:80:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 09:12:38 2024 by rpki-client on console-fra.rpki-client.org