Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W-HZ5XMFXAhG-MuZiiDcaMmwtpo.roa
File: W-HZ5XMFXAhG-MuZiiDcaMmwtpo.roa (raw, json)
Hash identifier: oL4n985yNeZPAydZJGMdiWAsXeGgyFeoWIpB84FOJyQ=
Subject key identifier: 5B:E1:D9:E5:73:05:5C:08:46:F8:CB:99:8A:20:DC:68:C9:B0:B6:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019078C55CD9979342EA8159F73A248D0C17
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W-HZ5XMFXAhG-MuZiiDcaMmwtpo.roa
Signing time: Wed 03 Jul 2024 13:25:18 +0000
ROA not before: Wed 03 Jul 2024 13:25:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 16:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:78:c5:5c:d9:97:93:42:ea:81:59:f7:3a:24:8d:0c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 3 13:25:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5be1d9e573055c0846f8cb998a20dc68c9b0b69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:0a:f2:84:d8:d3:f8:1c:74:2f:00:9c:0b:
ae:e1:ea:72:f1:30:55:e2:49:1f:4a:05:e1:91:13:
28:2f:dc:3e:a0:f0:ab:02:50:3f:c3:05:74:b1:c6:
d6:04:00:03:75:55:4c:07:58:d2:22:d7:5b:2e:05:
97:29:fd:70:28:5a:3b:66:e0:83:fe:fc:e7:41:04:
37:63:08:d4:c3:4f:50:5d:a1:b0:98:31:62:57:de:
9a:b4:a7:c0:ae:5b:35:30:e3:83:9f:c4:c3:94:91:
45:c3:85:f9:66:86:d0:10:5e:40:57:41:6a:96:36:
62:33:e3:c1:da:9f:d3:3d:a3:69:b5:67:32:b1:f4:
25:fd:68:d3:57:2e:7b:ae:f6:65:9e:a4:af:ca:20:
cc:ff:41:97:47:ff:95:4d:ad:88:2d:f6:44:1f:88:
f9:69:78:32:a8:c6:7f:de:38:17:dc:d2:b8:ca:19:
c1:7c:67:88:d6:81:44:f9:2e:eb:57:13:c5:4f:6d:
c4:15:09:f2:c2:69:a9:e5:68:3c:96:2f:b7:d6:cf:
a4:37:b6:da:5b:04:0c:ab:b8:75:96:2d:2c:48:a1:
20:6b:45:93:d4:ce:de:22:f4:be:e2:4c:74:1f:8d:
2a:a0:4b:c1:bc:1b:ef:e7:66:04:77:10:a9:69:71:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:D9:E5:73:05:5C:08:46:F8:CB:99:8A:20:DC:68:C9:B0:B6:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W-HZ5XMFXAhG-MuZiiDcaMmwtpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.71.0/24
163.5.73.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.154.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e8:82:17:06:c4:65:52:5f:83:95:2e:c8:04:3c:dd:64:af:
d2:e8:73:57:41:0c:05:57:c8:04:c0:87:81:c4:4c:c8:d2:98:
3c:c6:f9:65:75:c8:ed:a9:f2:4e:6a:53:7f:8c:a2:7e:d9:47:
5e:16:c6:a7:99:2e:0f:c9:47:d4:b3:1f:9b:75:59:86:42:83:
22:e8:f7:b7:8c:5d:86:6a:8b:ad:53:61:40:85:19:2b:10:ab:
b7:11:41:50:f0:02:11:00:bf:ac:fa:37:9f:6c:34:35:6a:55:
0d:41:f5:2f:69:2f:22:cf:78:b3:ba:a7:f2:da:88:82:4f:7c:
fb:6d:d2:c7:d8:c7:4b:32:70:44:22:da:74:65:b3:d9:ad:18:
35:ec:4e:46:ca:b3:1e:45:89:fb:01:3a:2a:8d:9b:b4:8b:63:
e9:02:1b:8f:e6:bc:71:22:c7:94:53:29:5d:86:74:da:20:64:
da:dc:d0:14:e6:5d:dc:6a:d3:ca:9b:8e:0c:f7:db:f4:12:30:
41:80:c1:af:51:e2:c5:0d:e7:bb:68:29:22:31:3c:ee:cd:5a:
f4:77:3f:22:32:97:75:04:e9:d4:21:fb:7f:4f:ad:94:1a:da:
c8:d1:1f:68:33:87:6e:a4:75:7a:61:41:9f:15:a1:52:f0:d1:
33:ff:89:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 18:41:39 2024 by rpki-client on console-fra.rpki-client.org