Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/akN0ULrBPVLC8r80ppkUHr7X95A.roa
File: akN0ULrBPVLC8r80ppkUHr7X95A.roa (raw, json)
Hash identifier: ZGcYfvtBd4fVH4RJu/QXuqOhKdJ4SHAdnp0ZhIwb8I4=
Subject key identifier: 6A:43:74:50:BA:C1:3D:52:C2:F2:BF:34:A6:99:14:1E:BE:D7:F7:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190E0CEC285656F41DB3761F8DF378BB343
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/akN0ULrBPVLC8r80ppkUHr7X95A.roa
Signing time: Tue 23 Jul 2024 18:16:04 +0000
ROA not before: Tue 23 Jul 2024 18:16:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 10:08:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e0:ce:c2:85:65:6f:41:db:37:61:f8:df:37:8b:b3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 23 18:16:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a437450bac13d52c2f2bf34a699141ebed7f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a9:98:ee:70:3e:e2:ae:83:47:56:25:c3:8f:
b3:da:24:22:26:79:85:21:a4:a0:0a:5c:c9:a4:19:
39:ca:b5:58:98:5a:af:2b:6c:bd:50:8b:09:7e:59:
50:aa:b9:a0:ec:85:3d:c4:4d:28:dd:32:f7:3b:e2:
cd:55:bf:ba:30:3e:2c:38:b4:79:dc:d1:37:43:5b:
a6:7d:e9:01:00:fb:55:47:83:16:9f:d9:cd:c9:af:
3e:8c:1a:15:19:7e:3e:77:13:75:a2:84:6f:75:54:
da:11:e0:9f:62:d9:4c:2c:14:7f:62:72:9d:9e:ee:
79:d7:3b:75:7f:ab:4c:af:d9:2b:a8:19:0c:b8:d1:
24:bf:02:97:c9:9f:47:fe:e2:55:bc:eb:d1:e6:94:
d2:5a:e8:0e:00:ee:ef:c3:bd:f2:5e:e8:9f:3a:3e:
e3:e4:78:99:e5:12:89:5b:6f:bf:bb:73:48:df:93:
70:f7:2c:8a:18:fd:31:aa:74:0a:17:2d:1a:11:1e:
e3:5c:66:cb:a8:79:3d:30:06:28:ea:f1:21:20:82:
a5:66:75:0b:3b:bd:ad:2f:5f:24:b7:12:67:40:b6:
13:6e:9f:3d:46:b5:5b:59:32:94:af:93:a0:74:6c:
22:a6:0c:53:d4:f9:02:64:1c:0a:89:db:1a:47:04:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:43:74:50:BA:C1:3D:52:C2:F2:BF:34:A6:99:14:1E:BE:D7:F7:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/akN0ULrBPVLC8r80ppkUHr7X95A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.194.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.215.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2b:5e:10:9e:3a:10:6e:97:06:2b:a7:4f:7f:68:83:d2:b3:
2a:ef:5d:02:7a:cc:42:f0:7a:1c:ba:bd:c1:be:eb:3c:a3:55:
11:9d:fe:c9:e9:9a:94:36:f5:aa:19:70:d8:48:28:6d:c6:85:
03:99:6e:33:ce:32:44:e5:8d:ad:39:6a:cf:5f:34:62:0d:49:
7d:b3:65:32:3d:51:cb:61:19:75:18:ef:90:c7:b1:38:2f:2d:
fb:42:68:2c:46:7d:12:dc:21:87:66:df:e6:7b:f0:59:e8:4f:
1f:b3:15:70:b7:f8:68:b9:2a:79:af:51:5b:a6:d9:2f:78:60:
52:4b:68:6c:86:0e:28:aa:6d:cc:bb:09:20:52:f8:55:db:3c:
ec:07:de:11:36:4d:66:be:d1:da:79:67:c9:df:88:3c:1a:5f:
52:ff:09:e2:c9:8d:5f:b7:be:5f:a1:1d:ae:59:d2:19:9c:e1:
b1:e0:35:05:7f:2c:bb:86:ff:cd:da:a5:34:ab:2d:d4:ef:75:
0d:44:1b:85:13:c6:aa:a0:17:e2:ce:30:c1:d0:81:d7:ed:83:
4b:77:a7:70:d5:fe:b2:95:f2:80:94:d9:a6:54:33:fa:ce:cd:
36:fe:81:1c:0b:f5:ee:cf:d6:61:d0:49:9d:d7:10:21:93:46:
67:9a:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:48 2024 by rpki-client on console-ams.rpki-client.org