Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bK26eglPZSK8jQhMFzY13TsjtTM.roa
File: bK26eglPZSK8jQhMFzY13TsjtTM.roa (raw, json)
Hash identifier: J9Qii8AhkToSezJC4Xb2jO5DNoqf3vOrpns4LKHx7vY=
Subject key identifier: 6C:AD:BA:7A:09:4F:65:22:BC:8D:08:4C:17:36:35:DD:3B:23:B5:33
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019290E027DC9E8F602D2F1E7A058133ACF8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bK26eglPZSK8jQhMFzY13TsjtTM.roa
Signing time: Tue 15 Oct 2024 15:51:02 +0000
ROA not before: Tue 15 Oct 2024 15:51:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 06:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e0:27:dc:9e:8f:60:2d:2f:1e:7a:05:81:33:ac:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 15 15:51:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cadba7a094f6522bc8d084c173635dd3b23b533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:cc:8b:95:17:f2:81:39:e0:b0:84:2c:3c:27:
e3:f4:84:dd:d0:0a:37:9b:31:35:ba:c2:c7:e8:fa:
36:b9:79:ed:57:88:0f:7c:ed:38:73:91:99:9b:5d:
7b:34:7a:88:c1:ab:e0:f3:11:44:1a:08:ff:89:8e:
87:e2:40:74:8b:b5:c6:86:f2:e2:a2:75:94:3e:b6:
21:6e:be:90:4e:00:47:21:3e:ca:1b:b5:e2:ad:d9:
58:6c:fa:0d:87:c0:14:7a:00:b1:76:2e:1c:1f:ca:
f1:08:b9:da:93:09:37:d7:0e:a9:a4:04:29:db:c1:
49:3c:9b:7c:78:63:19:48:02:eb:cc:b4:07:92:fd:
34:c5:6d:9a:04:52:2d:c6:22:df:2e:1f:14:b0:81:
00:82:b3:e0:b1:17:b1:72:98:25:29:58:95:7b:51:
13:88:60:b6:57:3d:74:a0:7e:5a:48:b9:4e:c6:c3:
90:d1:d4:77:a9:a5:c3:3e:4c:e9:ec:1a:65:61:ec:
9b:d5:90:30:51:94:94:68:e1:f5:5e:14:d5:ab:87:
4f:39:24:e6:07:74:da:87:eb:74:ef:99:06:ea:aa:
e2:b5:e7:4a:ca:1e:de:5a:62:08:1d:6f:b8:77:40:
da:3c:61:ab:f6:11:92:5c:cb:4b:66:d1:9b:5f:fd:
3a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AD:BA:7A:09:4F:65:22:BC:8D:08:4C:17:36:35:DD:3B:23:B5:33
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bK26eglPZSK8jQhMFzY13TsjtTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.44.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d4:0c:37:c2:df:5e:71:2c:dd:43:29:60:71:35:30:9b:0a:
1d:d0:a4:31:a0:7c:7b:4f:e2:d4:c4:a0:77:ea:ea:e3:dd:22:
f5:e2:12:fe:7a:7c:df:01:f2:28:cc:7e:f0:88:a1:4c:4d:3a:
a9:7c:60:be:44:ba:2b:8f:17:b9:ae:9e:5f:46:b3:d2:f1:67:
d7:07:3f:49:8b:da:ca:82:99:0d:d9:32:93:1f:7d:25:83:5a:
58:80:0b:27:d9:c0:55:bc:a7:15:5b:83:76:e0:95:4d:ea:e2:
4b:b0:6d:bc:34:a4:c7:a4:c4:6d:72:4c:39:b6:5a:ec:18:74:
b6:2b:d0:0e:ef:1d:41:19:c6:69:fa:35:d1:72:55:c2:a3:0c:
26:52:69:5b:2d:c5:bd:09:38:57:7a:70:71:db:76:db:3b:94:
b0:f9:38:ec:ae:b7:74:25:43:ac:3b:4d:fb:1d:a6:0b:32:72:
88:99:4e:c0:ca:24:dc:9c:41:50:b0:1e:96:cc:40:0f:80:bb:
01:55:8e:84:58:5d:94:aa:38:98:f3:25:4c:7a:68:f5:28:45:
0e:6d:f8:ee:4e:2d:56:62:c4:e4:b4:9c:6e:c8:30:aa:f5:61:
33:34:f3:51:61:78:19:da:ca:c4:31:76:cc:06:ea:30:b0:c3:
af:69:fa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 09:01:22 2024 by rpki-client on console-fra.rpki-client.org