Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XpxjsWlC03CNEpLKfJqAKHO64uY.roa
File: XpxjsWlC03CNEpLKfJqAKHO64uY.roa (raw, json)
Hash identifier: w41TjG4D/ECfWa6zX7HIeWcOKOzbPt4/74aGENx9FGY=
Subject key identifier: 5E:9C:63:B1:69:42:D3:70:8D:12:92:CA:7C:9A:80:28:73:BA:E2:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0194C339682E8197B9F261A9F761F2925462
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XpxjsWlC03CNEpLKfJqAKHO64uY.roa
Signing time: Sat 01 Feb 2025 20:35:06 +0000
ROA not before: Sat 01 Feb 2025 20:35:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 163.5.31.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Feb 2025 11:37:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:39:68:2e:81:97:b9:f2:61:a9:f7:61:f2:92:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 1 20:35:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e9c63b16942d3708d1292ca7c9a802873bae2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:38:06:cd:ef:dd:e8:63:e8:25:e5:03:57:a9:
9f:b6:17:15:b1:34:75:d0:19:fb:32:f7:67:0b:f4:
4e:49:a8:0a:ef:4c:e9:00:73:ef:2a:df:d6:a7:fd:
07:8d:7b:70:91:34:9c:96:4a:5b:31:31:77:3d:b9:
0c:1f:54:26:c1:85:ac:0f:ae:19:87:fb:fa:35:53:
e1:9f:e9:1c:ad:25:eb:3f:6e:97:fd:a3:69:22:e8:
d0:6e:c0:f8:31:44:02:95:71:2d:44:02:42:3d:97:
df:1e:d1:b6:4c:70:b4:c4:21:c9:1f:7e:c5:19:11:
0b:fd:b5:0c:b8:43:8a:cf:a6:0a:c8:cb:eb:98:81:
b1:8d:a6:61:66:ff:a2:fb:b1:10:69:2b:c8:d5:61:
b9:f3:19:73:56:ac:a1:b5:7c:8a:0d:66:93:98:6c:
83:89:89:21:d6:63:47:d6:67:ce:0c:73:0c:2d:1b:
35:d9:3f:7c:4f:1a:16:de:c1:40:f4:4c:06:b9:3c:
53:1a:0d:94:4c:d8:c0:0f:86:b5:35:1b:63:dc:c8:
69:d4:08:e8:29:e9:ef:17:a3:b8:df:1b:5b:b1:a9:
4b:ab:06:1a:5e:8b:e5:9e:18:f8:37:6e:43:93:0e:
72:c3:e8:b5:e0:6a:dc:2a:28:13:f9:cf:ed:e7:f6:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9C:63:B1:69:42:D3:70:8D:12:92:CA:7C:9A:80:28:73:BA:E2:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XpxjsWlC03CNEpLKfJqAKHO64uY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.46.0/24
163.5.62.0/24
163.5.149.0/24
163.5.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8d:e8:07:0c:e5:c0:f0:af:cd:bf:b5:c0:08:bf:37:1a:ca:
95:9e:e6:4c:cc:c1:48:7d:6d:a4:d0:57:5f:d4:66:b8:d2:f5:
83:6f:77:dd:66:6d:26:e4:f9:84:28:ba:ca:4a:e0:01:7a:2c:
8a:9f:22:8d:b3:66:cd:ef:58:b2:f5:23:33:1f:98:7d:d7:c8:
04:0c:58:df:45:11:da:a8:cd:30:55:b9:6a:1c:fb:f3:be:3c:
2f:c3:19:11:b5:81:b3:ac:f8:46:f8:26:3b:48:49:62:0d:bb:
52:8a:52:0a:4b:39:81:15:42:86:4b:6f:00:3e:95:2b:0d:7b:
94:fb:28:0f:c5:14:a7:d0:2f:1c:ad:36:05:05:e6:8f:10:d8:
c1:c6:9d:29:27:d5:5a:f6:1f:8c:df:42:c2:ed:d3:a0:6d:e9:
b4:3c:4a:4d:41:dc:1c:00:93:a4:02:c7:58:ea:06:87:99:45:
78:16:6b:1b:58:07:ba:df:94:53:8d:52:22:23:af:44:dc:1a:
02:e8:cd:dd:7c:7d:0a:b5:6b:61:e5:e1:b5:2c:75:ef:b6:19:
01:82:bc:2d:81:c9:47:1b:07:4f:f9:04:8d:9f:da:f3:39:9d:
98:4b:e3:d8:0c:52:ab:ec:1f:41:78:18:ca:2a:5f:ff:af:16:
fc:7e:4d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:53:03 2025 by rpki-client