Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W6d09Ef2J_8J1Dc3QwTh0Iu3WtY.roa
File: W6d09Ef2J_8J1Dc3QwTh0Iu3WtY.roa (raw, json)
Hash identifier: Ju4lI35s+kO+rDz6xTqYXEO4OxyHwJmY0gc+07fw8qA=
Subject key identifier: 5B:A7:74:F4:47:F6:27:FF:09:D4:37:37:43:04:E1:D0:8B:B7:5A:D6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196AAAAED129DC80704AE5F0D57EF64BE8B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W6d09Ef2J_8J1Dc3QwTh0Iu3WtY.roa
Signing time: Wed 07 May 2025 12:14:10 +0000
ROA not before: Wed 07 May 2025 12:14:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.34.0/24 maxlen: 24
163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 31 May 2025 07:16:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:aa:ed:12:9d:c8:07:04:ae:5f:0d:57:ef:64:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 7 12:14:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ba774f447f627ff09d437374304e1d08bb75ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:80:82:c9:65:d1:2e:c2:c1:a6:26:fc:fd:
21:2f:b2:8e:57:ea:f7:8d:b0:ee:8b:8b:f9:1e:47:
78:e1:e7:77:e5:7c:07:d8:20:94:d3:e5:19:1e:ed:
53:10:0e:b9:b4:dc:2f:83:3d:82:85:ac:df:2d:53:
25:d8:05:08:06:50:6a:35:19:5d:27:76:f4:73:77:
4e:54:a3:52:32:b0:40:ed:2b:29:65:30:eb:59:49:
49:66:6b:20:ef:8a:e0:24:47:7b:de:89:0d:ae:1f:
05:a2:0e:a0:ac:bb:29:10:f9:bd:9e:10:2b:8f:45:
6a:4b:d8:62:0b:f5:7a:ff:f3:33:0c:70:a9:38:ac:
6a:43:72:98:6b:fd:18:6b:21:79:53:09:59:e4:db:
94:88:a3:d9:6d:7a:31:13:c4:0e:5e:0f:02:cd:d7:
ca:1b:4a:9a:24:e4:47:42:2c:f0:85:1b:06:19:db:
33:f4:7d:50:c5:1a:22:b1:a2:9f:ab:15:90:b9:98:
76:de:68:d0:fc:4d:18:2d:f5:05:e7:03:c2:32:98:
61:5d:82:45:cf:93:63:69:65:46:e9:04:35:4e:3f:
d1:81:69:05:26:78:7a:9a:1b:d3:95:e4:89:4c:1e:
36:a1:83:2f:4d:76:5e:79:ad:77:c2:85:7e:5c:80:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A7:74:F4:47:F6:27:FF:09:D4:37:37:43:04:E1:D0:8B:B7:5A:D6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/W6d09Ef2J_8J1Dc3QwTh0Iu3WtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.34.0/24
163.5.38.0/23
163.5.60.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.130.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.228.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:55:1b:76:2c:c9:e1:dc:82:cf:25:1d:4e:b4:9c:eb:ed:29:
eb:c7:d4:6d:60:0f:fa:45:96:5f:f7:98:50:fe:ca:2e:c9:c7:
3b:9c:4f:7b:12:8a:b5:61:0b:a5:f0:16:72:d6:4d:fe:1a:a4:
50:b6:25:a9:a5:b6:74:c2:32:41:5e:d2:1e:74:3b:4f:bb:63:
21:1e:63:9d:4e:58:46:57:24:5c:af:08:0f:24:c9:9a:38:d8:
60:28:41:9e:0d:9f:40:53:e4:f3:dd:6c:a3:9c:ed:a6:23:b7:
cf:fd:e9:ee:60:45:73:bf:4e:74:90:60:2d:63:73:e7:8c:9b:
a8:18:4f:8e:d7:c3:f5:00:9f:64:12:8a:eb:2c:6b:cb:8c:32:
d9:dd:c5:ab:9c:9b:d6:e2:12:8e:d5:f2:a7:d8:82:b5:03:55:
e5:dd:15:a5:e8:6c:f5:53:30:d1:28:37:5c:10:5d:ff:94:5e:
ad:58:33:0e:a1:2a:8a:69:26:9c:d1:f3:44:a7:ac:4d:1d:a1:
8f:6d:05:fd:8b:47:7a:e4:e3:d4:9e:f4:47:12:31:cb:54:9f:
75:ca:94:c3:ad:eb:08:79:02:11:6a:35:9e:05:c3:60:27:1d:
9c:1e:08:4c:f7:69:27:02:cf:48:13:7b:b9:5f:a0:26:6d:06:
f5:4d:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:32:39 2025 by rpki-client