Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zl_CHWf8fTQUwiWEDelTtGD0DuE.roa
File: Zl_CHWf8fTQUwiWEDelTtGD0DuE.roa (raw, json)
Hash identifier: 8idj8tBZgoDraYQqmsfDsmyCm+GO11iFkphWj3YR8iU=
Subject key identifier: 66:5F:C2:1D:67:FC:7D:34:14:C2:25:84:0D:E9:53:B4:60:F4:0E:E1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196EE7115BF488B6A6B0E048B0FC37D4154
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zl_CHWf8fTQUwiWEDelTtGD0DuE.roa
Signing time: Tue 20 May 2025 16:05:10 +0000
ROA not before: Tue 20 May 2025 16:05:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 02:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ee:71:15:bf:48:8b:6a:6b:0e:04:8b:0f:c3:7d:41:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 20 16:05:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=665fc21d67fc7d3414c225840de953b460f40ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e3:58:52:ab:1f:6c:c2:b0:a5:a6:00:7b:aa:
ca:ba:20:89:fe:5e:4c:15:82:b9:dd:72:ac:e5:e3:
d6:5c:90:56:d1:c7:23:35:b0:28:0a:50:3d:e0:03:
4f:b2:c0:d8:f1:75:37:61:d8:23:ff:aa:a7:36:e1:
0b:45:09:00:92:50:ba:23:f7:b6:19:f4:5d:30:9e:
92:18:8d:56:eb:9e:f2:f5:ba:be:4e:3b:0c:47:25:
87:f4:43:9b:3c:7f:03:e1:22:ba:ac:0f:b9:0c:68:
bc:6b:77:95:08:69:dd:4d:1c:ce:01:9f:66:41:73:
85:7e:d0:21:6c:d4:97:5b:9e:df:6b:22:c2:a6:6f:
64:7b:bd:9f:29:12:0c:ab:b0:b5:c0:06:ae:c3:57:
bf:0d:41:2a:04:e1:47:7f:f3:c1:c4:06:79:8b:7f:
95:bc:f1:6d:29:34:ad:c3:43:b3:f9:77:6a:35:b0:
db:09:80:bb:e5:17:5a:cc:6f:dd:a0:e8:3e:aa:38:
32:70:48:39:65:e3:5d:58:a1:b9:e8:75:0b:7a:62:
e5:3b:8d:ee:71:c6:ec:48:9c:46:5d:65:fe:3e:36:
c4:d8:8e:51:c2:16:61:24:48:ae:30:50:ac:13:84:
aa:d9:7e:f2:7d:53:01:ca:8f:d2:26:c3:f6:53:63:
05:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5F:C2:1D:67:FC:7D:34:14:C2:25:84:0D:E9:53:B4:60:F4:0E:E1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Zl_CHWf8fTQUwiWEDelTtGD0DuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.86.0/24
163.5.111.0/24
163.5.155.0-163.5.156.255
163.5.170.0/24
163.5.175.0/24
163.5.219.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bb:55:7c:1a:36:8f:59:c2:f4:e0:26:1b:21:51:8e:c3:5c:
f5:82:87:ef:46:9d:06:d4:f3:56:f4:50:64:69:35:c2:52:21:
5d:ef:ae:6c:aa:99:73:c5:fe:f9:72:24:ef:0b:ba:f7:7d:b4:
8d:43:82:1a:a9:2a:59:01:e6:d0:40:29:84:17:8f:1e:39:73:
cf:41:6f:4d:65:c3:53:79:4a:6a:39:97:35:dc:b8:4d:5f:a7:
38:1d:50:6a:d5:74:8a:d8:5a:6f:09:4b:f9:88:c6:f7:9f:05:
3e:4a:03:66:f6:a9:97:2f:b4:81:cd:10:f8:20:2c:d4:64:9e:
02:4d:d5:b7:14:ca:57:fe:1f:40:80:2e:7c:19:5f:67:f2:74:
3d:32:03:87:2d:51:25:f1:41:fb:0e:de:18:9b:58:3b:ce:ee:
56:fa:cf:b3:47:8c:62:73:3b:c7:4e:78:e5:d1:d6:20:8b:db:
b1:5e:22:89:67:9a:34:b8:b6:e1:22:78:f8:02:0a:bd:ec:d6:
79:02:02:04:88:ce:b2:0a:de:78:eb:31:4f:f6:4e:2f:a6:e0:
6a:22:aa:b4:dc:90:47:4c:e8:c4:78:50:c8:86:75:8c:9d:fa:
fb:ba:8b:2a:4b:c1:8b:dd:97:58:db:fe:01:24:8b:2e:93:63:
58:00:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 19:29:45 2025 by rpki-client