Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sj8STKSJ7FeMlF6jw1agAMCdiv4.roa
File: Sj8STKSJ7FeMlF6jw1agAMCdiv4.roa (raw, json)
Hash identifier: 8PZJjooNtbLHPn7HPW9tv2SFIScqWHf2aBHCfvQJLvM=
Subject key identifier: 4A:3F:12:4C:A4:89:EC:57:8C:94:5E:A3:C3:56:A0:00:C0:9D:8A:FE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196AC7943D8B89E7DC32338BD0EAEC000DB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sj8STKSJ7FeMlF6jw1agAMCdiv4.roa
Signing time: Wed 07 May 2025 20:39:10 +0000
ROA not before: Wed 07 May 2025 20:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 05:57:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:79:43:d8:b8:9e:7d:c3:23:38:bd:0e:ae:c0:00:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 20:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a3f124ca489ec578c945ea3c356a000c09d8afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b7:89:b3:4d:4d:b0:d6:51:0a:00:56:98:5a:
09:90:9e:3b:de:fe:56:fb:b6:5c:74:4d:e1:4c:f8:
1a:bc:11:ab:36:62:87:4f:eb:a6:a7:30:97:e7:9a:
23:da:72:0b:59:a5:fc:5b:0f:f9:4d:ee:04:3b:89:
2a:d4:f5:d3:44:85:2c:f8:3d:2b:26:f3:7b:dc:b7:
92:fb:9e:8d:ee:f9:02:ee:d3:e6:06:08:37:0d:dd:
c9:4b:20:80:7a:87:f4:5e:98:b8:6e:2e:2c:96:05:
94:d4:72:4b:e1:66:a2:e1:be:10:e2:52:ed:4a:0d:
33:85:a6:09:26:89:e3:86:b1:72:33:fb:7f:2b:ff:
bc:0e:7a:27:e8:3e:17:1f:c6:90:db:3f:fa:32:44:
3f:2d:8d:5a:c7:47:72:04:57:a8:be:cf:80:9e:c7:
a9:d9:2a:31:70:f8:c4:80:07:9c:ad:c9:8d:02:00:
73:89:c7:08:7a:03:16:d4:e4:8b:5e:22:7f:27:8b:
5e:7b:83:5d:8f:5c:7f:e3:c0:62:26:19:91:68:8f:
04:72:f2:fb:42:4c:37:79:01:a8:1b:84:24:8e:b4:
b9:0d:49:ba:29:48:ea:91:a4:fd:12:be:80:d5:da:
55:37:a1:ac:cf:d6:96:5c:b8:a2:b4:1a:6f:51:4f:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:12:4C:A4:89:EC:57:8C:94:5E:A3:C3:56:A0:00:C0:9D:8A:FE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sj8STKSJ7FeMlF6jw1agAMCdiv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.92.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.184.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c6:61:55:ea:ca:f6:7d:35:3e:c1:4a:75:f9:d3:dc:b1:9d:
24:d0:b2:8a:9c:b9:b8:ab:e0:5a:fc:7b:13:89:68:b6:25:76:
7c:7f:77:f6:5a:0a:1b:be:0a:76:db:b0:b2:18:97:4b:97:1c:
76:7f:0e:99:4f:62:8b:a8:2f:ea:1a:da:05:fd:8d:68:98:19:
12:fa:33:66:7d:c4:92:38:9c:35:ce:c2:c0:a7:bb:75:a1:d3:
63:ca:d5:b5:d3:56:46:6f:70:ee:d3:40:c1:59:34:0a:07:51:
ab:a4:7c:81:27:b6:13:1e:5d:be:3e:f8:ab:7f:80:74:c7:0a:
10:7d:94:1f:ab:d9:34:3e:ec:9c:7d:af:be:89:97:43:e9:a8:
19:27:98:25:28:14:06:c0:7d:dd:78:05:ff:0a:a1:2e:8f:86:
03:48:05:73:2e:ff:98:9f:8e:4f:84:81:09:60:20:4e:99:4b:
62:ff:60:e3:0b:2d:8d:a8:42:37:00:60:76:34:3c:6d:b0:05:
bb:93:f0:b3:42:13:73:99:39:a7:ce:08:70:1a:70:a0:82:1e:
d8:5e:34:e6:0b:6d:15:f4:4b:e4:93:6c:24:37:bb:dc:81:1e:
1c:73:2c:dc:22:61:79:0c:70:e4:93:89:36:bb:94:68:83:b0:
9e:53:6a:3b
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgISAZaseUPYuJ59wyM4vQ6uwADbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNTA3MjAzOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTNmMTI0Y2E0ODllYzU3OGM5NDVlYTNjMzU2YTAwMGMwOWQ4YWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9reJs01NsNZRCgBWmFoJkJ473v5W
+7ZcdE3hTPgavBGrNmKHT+umpzCX55oj2nILWaX8Ww/5Te4EO4kq1PXTRIUs+D0r
JvN73LeS+56N7vkC7tPmBgg3Dd3JSyCAeof0Xpi4bi4slgWU1HJL4Wai4b4Q4lLt
Sg0zhaYJJonjhrFyM/t/K/+8Dnon6D4XH8aQ2z/6MkQ/LY1ax0dyBFeovs+Ansep
2SoxcPjEgAecrcmNAgBziccIegMW1OSLXiJ/J4tee4Ndj1x/48BiJhmRaI8EcvL7
Qkw3eQGoG4QkjrS5DUm6KUjqkaT9Er6A1dpVN6Gsz9aWXLiitBpvUU/EyQIDAQAB
o4IC8TCCAu0wHQYDVR0OBBYEFEo/EkykiexXjJReo8NWoADAnYr+MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvU2o4U1RLU0o3RmVNbEY2ancxYWdBTUNkaXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBQYIKwYBBQUHAQcBAf8EgfUwgfIwge8EAgABMIHoAwQA
owUeAwQAowU7AwQAowVCAwQAowVJAwQAowVcAwQBowVwAwQAowV3AwQAowV5AwQB
owWAAwQBowWKMAwDBAGjBY4DBACjBZADBACjBZIDBACjBZcDBACjBaADBACjBaID
BACjBaQDBACjBacDBACjBaoDBACjBa0DBACjBbIDBACjBbYDBACjBbgDBACjBboD
BACjBb0DBACjBb8DBAGjBcgwDAMEAKMFywMEAKMFzgMEAKMF0QMEAKMF2AMEAKMF
2gMEAKMF4AMEAKMF5AMEAKMF5gMEAKMF6QMEAKMF7QMEAKMF8TANBgkqhkiG9w0B
AQsFAAOCAQEAZ8ZhVerK9n01PsFKdfnT3LGdJNCyipy5uKvgWvx7E4lotiV2fH93
9loKG74KdtuwshiXS5ccdn8OmU9ii6gv6hraBf2NaJgZEvozZn3EkjicNc7CwKe7
daHTY8rVtdNWRm9w7tNAwVk0CgdRq6R8gSe2Ex5dvj74q3+AdMcKEH2UH6vZND7s
nH2vvomXQ+moGSeYJSgUBsB93XgF/wqhLo+GA0gFcy7/mJ+OT4SBCWAgTplLYv9g
4wstjahCNwBgdjQ8bbAFu5Pws0ITc5k5p84IcBpwoIIe2F405gttFfRL5JNsJDe7
3IEeHHMs3CJheQxw5JOJNruUaIOwnlNqOw==
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:34:26 2025 by rpki-client