Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YWpZol69ixdfJOaY8DfoaHjwtfU.roa
File: YWpZol69ixdfJOaY8DfoaHjwtfU.roa (raw, json)
Hash identifier: 06oPBkGebIqTYU3vgXkhfzFd1hMwIRT+HCe+aTgsYgk=
Subject key identifier: 61:6A:59:A2:5E:BD:8B:17:5F:24:E6:98:F0:37:E8:68:78:F0:B5:F5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01920AAF897B19D8CAAB738F519A22340668
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YWpZol69ixdfJOaY8DfoaHjwtfU.roa
Signing time: Thu 19 Sep 2024 14:28:49 +0000
ROA not before: Thu 19 Sep 2024 14:28:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Sep 2024 10:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0a:af:89:7b:19:d8:ca:ab:73:8f:51:9a:22:34:06:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 14:28:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=616a59a25ebd8b175f24e698f037e86878f0b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ad:59:2b:dd:17:ba:54:64:23:72:80:c3:49:
44:fe:a0:e5:3d:81:0d:f4:59:c6:84:73:f4:ff:85:
ac:49:b6:9e:3a:50:07:78:45:29:e0:85:ac:4a:46:
7e:5e:74:02:82:27:b1:96:d9:49:64:8d:5c:d2:17:
86:27:d5:be:7c:f5:78:13:56:e3:ca:87:18:05:0e:
e9:32:db:3a:d9:5a:41:32:c3:f1:ec:94:26:1c:62:
17:fa:2b:f8:06:1f:06:08:18:ee:6f:74:68:0a:24:
c3:06:19:6d:3e:fc:30:f0:21:90:7c:cc:95:71:b1:
64:c4:3a:dd:34:56:ab:ab:3a:5b:31:d7:35:26:13:
13:c6:6a:f6:1e:85:62:d5:18:ac:80:80:d0:3c:40:
b8:7a:14:58:a1:84:f1:51:d8:c8:66:a5:b2:83:69:
ec:9c:04:5a:81:66:1b:6c:6a:d0:e3:38:1c:b0:64:
42:d7:39:ea:bb:93:ec:7d:41:07:e3:9d:e0:4e:ae:
5b:88:1b:bd:6e:a1:d2:47:3c:c7:15:0f:bc:fb:49:
58:fa:1c:10:27:cf:67:14:b5:b6:37:0d:9c:c6:92:
29:1c:18:f6:ec:42:f1:21:c4:41:45:f0:36:51:10:
53:a9:71:2b:a2:6f:6e:f7:62:69:18:05:b4:dd:bf:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6A:59:A2:5E:BD:8B:17:5F:24:E6:98:F0:37:E8:68:78:F0:B5:F5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YWpZol69ixdfJOaY8DfoaHjwtfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.58.0/23
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.247.0-163.5.248.255
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:51:21:dc:b6:87:1e:9d:5a:5b:63:2a:1a:41:59:a2:59:71:
5f:43:14:cd:88:7b:7e:e9:2d:10:a5:17:2f:2d:56:90:a2:a6:
2c:e7:7a:1d:fa:20:fe:1e:cc:76:f8:49:71:d2:ff:2a:5a:dd:
6b:f6:2d:07:75:81:a6:49:1c:bf:b1:37:02:0c:8b:34:84:da:
a2:6b:bc:73:63:e2:6f:c0:51:c3:d4:1d:05:a0:7e:30:cd:cf:
a8:d2:b3:65:d7:3e:8c:f3:10:a6:d0:e0:30:ff:c5:5d:b4:38:
53:49:a0:a2:a2:a7:70:3f:0f:d5:20:d6:db:b6:43:66:1e:fa:
61:33:12:09:da:91:31:15:ba:7d:1b:e9:8f:90:44:d6:22:64:
f6:a7:f8:31:53:95:56:75:e7:21:d4:58:8e:cc:fc:48:60:75:
45:c1:28:27:a9:73:b8:02:6a:0d:db:f3:ce:42:e6:f3:2e:70:
de:2a:fe:03:53:b8:92:be:58:e1:aa:b9:7d:77:fa:91:94:98:
81:9f:71:c4:84:7a:06:d5:a3:42:cd:15:84:af:96:2a:70:aa:
c9:09:49:ff:7a:ce:7f:2a:49:28:44:f5:4c:b8:a0:67:e7:72:
c6:d3:e3:b1:94:71:12:27:14:c0:d4:d0:2e:96:d0:70:85:3b:
85:48:54:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 21 12:54:39 2024 by rpki-client on console-fra.rpki-client.org