Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y69s8y268fItVKd9PgWLFbSZ_Vo.roa
File: Y69s8y268fItVKd9PgWLFbSZ_Vo.roa (raw, json)
Hash identifier: eq7fwUGt3XhNgSVmqBJV8DuRnJp5lHFPm3bcKO/RGkg=
Subject key identifier: 63:AF:6C:F3:2D:BA:F1:F2:2D:54:A7:7D:3E:05:8B:15:B4:99:FD:5A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01968B492BEADA59AD081959E184858BFB6F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y69s8y268fItVKd9PgWLFbSZ_Vo.roa
Signing time: Thu 01 May 2025 09:59:10 +0000
ROA not before: Thu 01 May 2025 09:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 May 2025 12:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:49:2b:ea:da:59:ad:08:19:59:e1:84:85:8b:fb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 1 09:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63af6cf32dbaf1f22d54a77d3e058b15b499fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:ae:2d:06:ab:12:a4:59:86:9e:aa:a5:be:
cf:34:11:e0:cb:4f:3e:01:25:cb:fc:55:42:be:24:
f4:05:6a:fe:80:44:a4:5d:6d:c7:5b:d0:1b:b2:fb:
04:d1:5a:39:3c:e2:63:dc:46:55:a3:18:6b:6b:d6:
fe:d5:f8:68:81:7a:8a:41:cb:8d:28:50:fa:95:0f:
d3:cb:1a:9d:62:62:1f:8f:16:d4:f0:ab:35:33:49:
7e:b1:71:03:aa:4f:9a:5e:54:6d:6a:32:a3:7c:2f:
dd:0e:ed:60:0b:80:ad:b0:84:55:dc:43:63:da:e2:
aa:d1:cb:e2:6a:a7:6c:bd:22:33:46:3a:38:2d:22:
00:ab:c1:5f:3a:ca:b0:f6:0e:ce:f7:1f:57:1a:bc:
e7:95:84:85:d1:61:73:82:57:59:d1:50:23:2a:15:
9f:f1:d2:a1:37:3d:9b:97:c3:a4:8a:f4:ff:8b:2b:
08:6a:05:8e:1d:de:42:26:11:bc:6a:51:fc:9e:4e:
3e:e5:45:d3:d2:bc:e4:0f:52:4c:29:26:b5:e8:cc:
87:03:14:ed:82:11:8e:15:e6:f7:e2:32:f6:13:97:
da:c4:03:b7:29:3e:7d:d2:53:9a:4b:6d:78:31:57:
09:3a:27:69:11:89:0a:34:ed:d1:c3:2a:07:a7:65:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AF:6C:F3:2D:BA:F1:F2:2D:54:A7:7D:3E:05:8B:15:B4:99:FD:5A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Y69s8y268fItVKd9PgWLFbSZ_Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.133.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.184.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:02:fd:db:45:10:aa:bf:b9:3f:29:20:4d:6b:1f:a3:fb:1d:
ee:b8:58:c1:7b:b9:69:d4:05:02:ee:c5:72:49:2c:40:1a:62:
a5:07:00:c3:03:f4:7d:b9:4c:4c:9c:d8:10:dd:3e:cc:70:21:
a6:13:07:54:a2:ac:e5:ac:56:92:9d:4f:70:a6:69:24:20:35:
21:1a:bf:c8:c1:7b:01:54:83:a5:c5:b7:25:70:de:1b:30:58:
ee:43:a5:67:d4:dd:fb:88:17:5c:bc:36:40:2a:1b:49:aa:4b:
9c:b0:8f:18:8a:d7:86:08:9e:ed:1b:1d:8f:7b:5d:c8:66:14:
78:61:e6:c7:c0:f2:d7:aa:d7:8b:d2:d6:12:e1:cf:50:44:dd:
f4:22:3f:df:3b:63:36:72:ac:ee:7a:2b:00:cb:d7:bf:6a:5f:
b2:2f:f6:ab:84:d1:60:60:81:ab:4e:fd:70:2b:80:81:56:3e:
67:67:72:28:41:d1:ab:d6:5a:b4:0c:c2:1a:28:f3:bd:9e:b9:
91:d8:1e:00:0b:9c:4c:8a:55:36:e3:ad:f1:ab:8b:2a:86:57:
c8:7c:a6:2d:70:2a:60:ce:23:54:3b:da:e1:c8:b9:95:fb:bd:
2a:f0:93:df:5a:ac:a4:a5:15:ee:41:94:66:e6:e2:c9:5b:98:
58:61:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:14:44 2025 by rpki-client