Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TaUedcep40_mvbzk4xhdBQWgQJw.roa
File: TaUedcep40_mvbzk4xhdBQWgQJw.roa (raw, json)
Hash identifier: 3IPiOrP5zRK71yY1JTbGepO//FK5Kk2xCk2f8XBHmIU=
Subject key identifier: 4D:A5:1E:75:C7:A9:E3:4F:E6:BD:BC:E4:E3:18:5D:05:05:A0:40:9C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0193086DD8EA1A09552D8E6C754E7C06CDE8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TaUedcep40_mvbzk4xhdBQWgQJw.roa
Signing time: Thu 07 Nov 2024 21:00:36 +0000
ROA not before: Thu 07 Nov 2024 21:00:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.17.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 18:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:08:6d:d8:ea:1a:09:55:2d:8e:6c:75:4e:7c:06:cd:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 7 21:00:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4da51e75c7a9e34fe6bdbce4e3185d0505a0409c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:db:9b:c7:90:3e:11:94:eb:92:cb:f7:2c:
6b:47:9d:6b:87:e8:04:6b:6d:f5:97:18:13:df:5f:
6a:9b:a4:94:88:ca:af:5c:65:8b:12:6b:e0:2e:37:
e4:a7:ff:a0:2f:c8:93:6e:12:9e:7f:75:20:29:96:
cc:11:37:fd:ba:0c:3c:82:26:74:b8:5e:5e:bb:80:
8e:4c:21:93:45:4f:34:74:eb:7e:3b:27:e5:03:f4:
a7:72:27:ff:1c:7a:0a:35:bf:7b:88:ac:b8:df:99:
45:43:b1:6d:aa:83:0d:90:04:19:c6:d3:81:0b:c8:
80:60:93:85:cc:99:2b:19:f5:89:c1:72:e1:7d:fd:
84:0b:f4:f7:c8:e9:4f:16:75:34:d5:76:40:b0:06:
80:c3:4c:15:6f:a0:07:3b:35:aa:a7:9c:9e:57:92:
b0:e5:ee:2b:b8:8c:33:6a:7c:15:26:01:4b:b3:76:
ff:c2:44:29:86:58:a0:b8:b0:0c:02:de:70:c4:bd:
c9:7e:53:47:77:f5:49:8d:39:de:2a:ae:ab:c0:21:
9c:f6:17:73:c1:5a:8a:77:83:0c:e7:b1:f4:3f:b4:
d9:73:35:9d:91:b3:f2:7e:c8:c8:21:f0:de:22:b3:
2d:6a:c5:5d:c8:7e:31:cb:3d:8b:48:51:4c:e0:69:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A5:1E:75:C7:A9:E3:4F:E6:BD:BC:E4:E3:18:5D:05:05:A0:40:9C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TaUedcep40_mvbzk4xhdBQWgQJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.17.0/24
163.5.30.0/24
163.5.59.0/24
163.5.62.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a7:47:28:ec:83:26:54:17:d1:a9:d0:12:d1:c2:de:18:b1:
25:87:23:dc:f6:1a:b6:ca:46:fe:98:f3:ac:22:ba:f1:61:36:
83:f5:c1:0f:ca:aa:f8:0c:71:2d:6e:4d:8a:8b:7e:c7:05:f4:
9d:18:d1:6d:3b:fd:4f:64:1c:a1:f2:5c:9d:1a:88:7b:3a:e2:
4b:18:64:da:76:60:15:75:6b:29:57:20:62:64:19:fe:35:11:
56:a4:cc:c8:f9:55:aa:45:34:f6:97:56:ec:2a:53:26:fd:09:
8c:8a:17:60:c4:47:92:56:29:62:63:eb:1b:ad:0c:00:b4:91:
98:13:3f:70:fa:12:d1:c1:9f:1d:14:11:f8:b6:76:fa:7d:b0:
42:c7:59:00:8b:5d:d0:a7:3b:cf:64:79:d2:6a:0c:db:a1:51:
6a:06:d5:3b:05:82:8a:5e:90:94:cc:a8:02:61:f5:de:5c:2c:
b9:2d:13:b2:29:52:10:6d:54:91:cd:c4:34:a7:f5:34:59:c0:
12:29:cc:25:a7:55:22:32:ca:2b:70:9b:45:7b:a3:e3:e9:29:
0a:db:d2:03:3a:af:a0:e2:da:17:22:0b:f2:db:f8:22:30:e6:
85:2b:00:18:20:bf:1b:67:99:57:b2:f6:2c:4a:e7:f5:cf:1c:
e4:4e:7f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 19:53:16 2024 by rpki-client on console-ams.rpki-client.org