Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y0Gn2jq5HmUhrDKtzO-oiTSndsY.roa
File: Y0Gn2jq5HmUhrDKtzO-oiTSndsY.roa (raw, json)
Hash identifier: gC7wjZbd2GcvThX7k14FhVhagYAapnf0fDL817KcvFg=
Subject key identifier: 63:41:A7:DA:3A:B9:1E:65:21:AC:32:AD:CC:EF:A8:89:34:A7:76:C6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01914116E300CF14CC644C6D0F31C32190DD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y0Gn2jq5HmUhrDKtzO-oiTSndsY.roa
Signing time: Sun 11 Aug 2024 10:58:24 +0000
ROA not before: Sun 11 Aug 2024 10:58:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 07:17:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:16:e3:00:cf:14:cc:64:4c:6d:0f:31:c3:21:90:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 11 10:58:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6341a7da3ab91e6521ac32adccefa88934a776c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:97:f7:07:4e:7e:2a:ec:e7:2b:86:4f:1a:
f1:e6:53:22:57:8b:3a:c1:92:d1:d9:ae:e0:73:54:
48:8d:b1:ae:ed:72:f1:de:af:51:6e:be:7c:71:f8:
0c:90:2d:8f:90:ca:a8:42:34:83:38:0f:b9:3d:0b:
d3:fc:a7:46:c5:50:e3:1a:40:7a:a9:ec:35:e5:c8:
29:87:de:8f:91:6a:44:7f:87:2d:86:f0:b6:10:22:
7e:b9:1c:d2:5c:57:4b:f6:0b:33:e8:58:c2:8a:d1:
98:6f:df:a0:e3:b1:dd:c1:ec:0f:a6:23:ef:74:2e:
7a:7b:c2:e4:81:2e:9a:b6:76:4e:5c:54:51:60:4e:
fb:7b:d2:ff:78:84:8c:45:a9:04:05:c6:57:d9:a9:
bc:d0:87:30:ca:52:39:6f:92:53:63:26:f6:5b:67:
b6:21:fa:c9:ed:38:4e:11:23:77:5d:f9:13:1f:84:
c1:6b:5a:b7:97:c2:fd:2a:bf:e6:96:fe:41:04:24:
62:13:3c:a6:83:c9:46:f7:a7:49:7e:4b:73:16:6e:
bd:64:1c:09:83:51:79:25:cc:bf:23:65:7d:03:ce:
9f:0a:87:3a:da:bd:60:35:df:6d:52:1e:c4:8a:f0:
c1:00:2a:15:35:ed:a5:cc:a1:28:96:5f:cf:4f:77:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:A7:DA:3A:B9:1E:65:21:AC:32:AD:CC:EF:A8:89:34:A7:76:C6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y0Gn2jq5HmUhrDKtzO-oiTSndsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.59.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.136.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.166.0-163.5.168.255
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.245.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:fa:10:6f:f9:92:17:55:72:07:b6:ae:07:80:03:f9:67:f6:
d2:2d:bc:ec:d5:26:5d:b0:eb:4d:51:f2:13:61:76:92:a2:95:
7a:de:28:34:b3:8b:f9:79:72:26:43:db:9e:48:17:af:ac:75:
e4:a9:2e:f3:64:74:0f:05:d8:eb:04:0f:ee:d6:07:0e:68:01:
9d:74:28:13:53:1f:42:57:37:d3:86:44:8c:6a:ae:61:4a:4d:
fc:bf:8a:57:de:64:ea:76:f6:66:42:91:7e:ff:0e:d7:bd:5e:
f8:a6:11:9e:18:0e:94:a2:86:a5:2a:25:1f:e8:fd:ff:9a:bf:
d4:f9:bb:3f:61:04:71:da:33:f8:2b:2b:64:b2:77:52:2f:ae:
9e:87:c2:77:b6:09:b9:82:1b:e4:79:63:94:3d:9c:ea:47:a2:
0a:2f:5c:b0:0f:b9:ee:8a:f3:40:f2:15:10:7b:b6:19:f5:77:
2e:93:a0:61:59:27:d8:50:41:ab:95:56:ad:58:c4:c4:da:2d:
2a:bc:c4:c5:9b:75:a5:86:3a:49:5d:fd:66:b0:7e:fa:7a:7e:
a4:8c:3a:a8:ce:aa:69:5b:72:61:e6:60:9d:fe:85:01:e2:a8:
32:bd:90:80:da:1b:5f:2b:72:a3:82:5b:80:d1:9c:0d:d7:08:
8c:03:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 09:22:18 2024 by rpki-client on console-fra.rpki-client.org