Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q-jngOy0s4x3l-pnFYLbVkuVuqw.roa
File: Q-jngOy0s4x3l-pnFYLbVkuVuqw.roa (raw, json)
Hash identifier: 4vhAUUhkMyHs3dKxsielKuksgHokZST7ZDts5+62Tfk=
Subject key identifier: 43:E8:E7:80:EC:B4:B3:8C:77:97:EA:67:15:82:DB:56:4B:95:BA:AC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194236A26BD93EBFCD246A5475D98635BC1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q-jngOy0s4x3l-pnFYLbVkuVuqw.roa
Signing time: Wed 01 Jan 2025 19:49:06 +0000
ROA not before: Wed 01 Jan 2025 19:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 08:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:26:bd:93:eb:fc:d2:46:a5:47:5d:98:63:5b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43e8e780ecb4b38c7797ea671582db564b95baac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c9:34:24:e9:62:de:26:91:93:37:64:1a:59:
61:6d:c3:ac:0a:83:83:1f:cf:8f:4a:14:06:28:70:
02:f5:9d:cf:87:08:e8:d5:91:f4:41:00:be:d2:1d:
04:a6:3e:4d:df:26:e0:11:9e:83:c6:1d:c8:69:68:
c0:8b:e4:2c:9d:08:b3:a5:b8:06:1d:93:5f:e1:f8:
de:e8:d7:98:c5:c7:87:97:d2:9d:c6:9e:b4:1b:f2:
ab:19:05:d6:26:f0:22:eb:0f:58:07:5e:30:f5:f8:
7b:72:69:d6:3d:18:68:bf:30:6b:8a:5b:70:e5:a6:
6c:6e:ea:38:a1:0d:c6:4d:65:3e:95:68:70:ef:24:
5e:e0:23:c0:61:35:a6:83:73:8c:ff:af:e8:47:00:
ac:86:61:43:81:74:a1:f2:71:6e:87:16:47:23:44:
e2:74:9b:f2:fa:58:d9:eb:eb:f9:c9:8d:15:05:66:
f2:5d:26:e3:b0:4b:54:cc:80:9a:34:3f:52:de:a9:
f3:c4:fb:1e:2d:5f:19:84:aa:59:6f:66:19:7c:64:
c2:9a:cd:fe:e0:66:48:78:a2:84:d6:c0:9b:52:d8:
0b:66:d3:e2:fe:00:d2:70:3d:02:69:eb:e5:e1:c6:
57:f9:ab:57:9b:e1:95:d6:bb:ce:2f:ad:fe:d9:f5:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E8:E7:80:EC:B4:B3:8C:77:97:EA:67:15:82:DB:56:4B:95:BA:AC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q-jngOy0s4x3l-pnFYLbVkuVuqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.31.0/24
163.5.46.0/24
163.5.62.0/24
163.5.144.0/24
163.5.149.0/24
163.5.173.0/24
163.5.179.0/24
163.5.187.0/24
163.5.209.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
41:02:41:cc:2f:c1:60:c8:27:ff:f3:c7:13:c1:86:92:57:71:
fe:4b:89:45:4b:00:b3:c1:48:7a:69:bc:69:6d:6d:79:1b:42:
d5:0a:96:c4:15:72:17:2e:ee:7c:2a:b9:66:59:73:62:59:ee:
4d:ec:27:ae:44:cf:79:f3:19:f2:42:9a:97:e7:18:a0:8f:70:
14:53:47:0a:e0:74:55:05:79:b1:13:a5:ee:c4:6c:31:80:4f:
a1:40:6f:15:ee:9d:70:8a:a7:87:d8:c7:c6:3d:86:67:a9:d6:
3f:db:50:7e:d7:f6:67:99:32:e0:86:e8:ac:09:57:f3:95:b3:
7c:34:e9:43:bb:58:af:43:69:e6:26:0e:fd:bd:53:d1:7d:9a:
32:5c:70:0b:29:a5:84:07:6e:a8:d7:fb:48:e7:16:a7:aa:27:
49:35:40:5a:07:8f:71:48:d1:f0:e6:a6:c9:31:06:3f:9a:bc:
64:5d:37:f1:2d:5d:5d:27:da:8c:b3:26:e8:69:9b:ca:f6:a5:
12:a5:6c:2d:d0:1a:91:9b:a7:e6:16:1f:a0:d9:b0:9c:2e:d3:
69:d0:c1:94:0a:30:30:a9:af:9c:d3:25:ee:96:97:2a:8b:bd:
73:04:73:37:c5:4a:5b:eb:49:c5:bd:fd:d6:93:e8:a6:07:d2:
5a:ed:f2:41
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZQjaia9k+v80kalR12YY1vBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2U4ZTc4MGVjYjRiMzhjNzc5N2VhNjcxNTgyZGI1NjRiOTViYWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMk0JOli3iaRkzdkGllhbcOsCoOD
H8+PShQGKHAC9Z3Phwjo1ZH0QQC+0h0Epj5N3ybgEZ6Dxh3IaWjAi+QsnQizpbgG
HZNf4fje6NeYxceHl9Kdxp60G/KrGQXWJvAi6w9YB14w9fh7cmnWPRhovzBriltw
5aZsbuo4oQ3GTWU+lWhw7yRe4CPAYTWmg3OM/6/oRwCshmFDgXSh8nFuhxZHI0Ti
dJvy+ljZ6+v5yY0VBWbyXSbjsEtUzICaND9S3qnzxPseLV8ZhKpZb2YZfGTCms3+
4GZIeKKE1sCbUtgLZtPi/gDScD0Caevl4cZX+atXm+GV1rvOL63+2fXRJwIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFEPo54DstLOMd5fqZxWC21ZLlbqsMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUS1qbmdPeTBzNHgzbC1wbkZZTGJWa3VWdXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAowUWAwQA
owUfAwQAowUuAwQAowU+AwQAowWQAwQAowWVAwQAowWtAwQAowWzAwQAowW7AwQA
owXRAwQAowX3MA0GCSqGSIb3DQEBCwUAA4IBAQBBAkHML8FgyCf/88cTwYaSV3H+
S4lFSwCzwUh6abxpbW15G0LVCpbEFXIXLu58KrlmWXNiWe5N7CeuRM958xnyQpqX
5xigj3AUU0cK4HRVBXmxE6XuxGwxgE+hQG8V7p1wiqeH2MfGPYZnqdY/21B+1/Zn
mTLghuisCVfzlbN8NOlDu1ivQ2nmJg79vVPRfZoyXHALKaWEB26o1/tI5xanqidJ
NUBaB49xSNHw5qbJMQY/mrxkXTfxLV1dJ9qMsyboaZvK9qUSpWwt0BqRm6fmFh+g
2bCcLtNp0MGUCjAwqa+c0yXulpcqi71zBHM3xUpb60nFvf3Wk+imB9Ja7fJB
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:50:43 2025 by rpki-client