Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SuZLpCQQmH55jVklpRJORR_RPAo.roa
File: SuZLpCQQmH55jVklpRJORR_RPAo.roa (raw, json)
Hash identifier: 9bB5nSMGY6jQIshwyCDoPyy2xmrTAg9y173jua6w6Zo=
Subject key identifier: 4A:E6:4B:A4:24:10:98:7E:79:8D:59:25:A5:12:4E:45:1F:D1:3C:0A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CC9C0659A5FB8E32DE1869FAC103606FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SuZLpCQQmH55jVklpRJORR_RPAo.roa
Signing time: Tue 02 Jan 2024 10:37:58 +0000
ROA not before: Tue 02 Jan 2024 10:37:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:c0:65:9a:5f:b8:e3:2d:e1:86:9f:ac:10:36:06:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 2 10:37:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ae64ba42410987e798d5925a5124e451fd13c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:61:1c:1b:58:b2:f0:51:b1:ec:1e:99:06:
70:61:d0:bb:66:6c:fa:67:86:b7:73:f9:5f:a6:fd:
ab:51:29:cc:dc:86:78:d3:47:06:85:7c:fa:af:bd:
c1:f3:b8:56:9c:bf:f9:53:98:f3:2c:7e:ff:93:fb:
0d:ef:49:50:dc:0a:e8:72:57:e6:a3:a3:d9:5b:98:
20:bc:d6:87:be:aa:b8:ba:4c:90:41:6a:65:81:66:
b5:97:83:42:a5:23:7d:eb:07:17:d9:f5:eb:ea:b3:
2c:45:1b:07:b2:79:2d:c0:22:2d:b3:17:4d:f8:c1:
03:93:b7:32:62:62:8a:2b:1d:12:21:c4:d7:86:c0:
4f:f0:b7:ff:cd:5e:08:9c:4a:c3:ae:d3:ca:3a:8b:
3e:dc:de:76:a7:d6:aa:61:98:58:14:97:d7:e6:e5:
31:07:d3:6f:fb:a5:48:d8:b1:45:ab:13:87:67:a9:
a1:18:7d:55:5d:14:aa:07:90:7e:47:58:a6:b6:da:
e4:09:00:17:ff:9a:52:af:83:4f:55:d5:51:bb:49:
54:b5:cb:cc:9e:dd:90:48:b6:8d:d0:64:55:3f:f6:
94:c1:92:92:d9:2e:8e:0d:e6:ad:ce:fc:a1:e2:b4:
cc:b0:4a:95:6d:cd:e3:77:85:4a:e3:90:fa:57:c8:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E6:4B:A4:24:10:98:7E:79:8D:59:25:A5:12:4E:45:1F:D1:3C:0A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SuZLpCQQmH55jVklpRJORR_RPAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.106.0/24
163.5.110.0-163.5.113.255
163.5.118.0/24
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d4:17:2b:5b:e0:90:81:6f:9f:dd:33:a1:04:8f:65:66:92:
88:90:a5:68:2a:0a:01:df:7e:87:e0:96:38:1c:b8:03:ba:db:
60:e6:ef:d9:1a:8c:10:34:94:7c:0a:3b:67:2d:35:1e:0a:e2:
ec:0c:9a:95:c3:6b:ca:00:c3:b0:89:ed:ff:30:88:7a:99:d1:
09:e6:0d:48:d0:72:e8:48:d0:cf:b8:9a:d9:21:8c:26:1a:88:
3e:b4:3f:7b:15:9a:17:c5:76:bb:8e:82:3a:9f:ba:37:bf:51:
74:d3:3b:86:0e:19:be:27:75:40:d2:66:d2:cc:89:41:ba:66:
ce:64:34:13:ea:b3:ec:6e:d3:f2:90:91:4c:63:03:05:22:ef:
32:89:dd:d7:cb:a4:5f:6d:f8:9b:fc:cc:f0:ab:08:dc:29:5f:
5f:90:25:fd:6d:d0:b0:a9:1d:0e:4f:4b:c0:a3:fa:f4:65:80:
28:4b:0d:12:bc:35:b6:35:ad:d9:e8:84:52:c2:6f:68:32:91:
d6:fc:1a:29:76:f4:76:7d:71:87:83:29:20:7d:c1:53:b3:27:
86:b0:82:54:d1:99:95:86:88:9d:38:e3:26:7c:9e:09:c1:86:
55:21:3e:5d:79:7c:97:29:92:7e:28:97:ce:bb:19:d6:c3:25:
4d:b7:39:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 4 07:41:26 2024 by rpki-client on console-fra.rpki-client.org