Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cLAwpxCA50ZzcCMxfrqG85yjGPY.roa
File: cLAwpxCA50ZzcCMxfrqG85yjGPY.roa (raw, json)
Hash identifier: RrldCyrDhoEL0kAY7JOlKAQdT3hvk48Ql4ouRSfP9KU=
Subject key identifier: 70:B0:30:A7:10:80:E7:46:73:70:23:31:7E:BA:86:F3:9C:A3:18:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01972B3AFB1B898590B787BCADBE3BBE7013
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cLAwpxCA50ZzcCMxfrqG85yjGPY.roa
Signing time: Sun 01 Jun 2025 11:22:55 +0000
ROA not before: Sun 01 Jun 2025 11:22:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jun 2025 12:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:2b:3a:fb:1b:89:85:90:b7:87:bc:ad:be:3b:be:70:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 1 11:22:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70b030a71080e746737023317eba86f39ca318f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:57:0d:41:f8:91:28:22:d6:9c:10:08:93:
40:c7:58:14:90:1e:2c:5f:c6:c8:65:8c:f0:25:55:
1e:46:af:c9:18:e7:6d:74:09:90:85:cf:9c:2d:02:
77:22:7f:e0:0a:1b:8d:15:13:09:e7:14:a9:7e:0a:
9e:39:79:dc:a2:dc:da:b0:9c:f0:4a:44:11:1c:a2:
be:cb:5f:1e:9e:b7:e3:df:4a:3e:df:b2:b3:ba:48:
71:b5:c4:40:a6:9a:56:04:1f:9d:dd:2d:e6:d8:d6:
e7:77:3c:bf:7c:38:3a:14:7d:08:6d:87:e4:df:52:
67:13:81:bf:a5:3a:1b:57:83:21:11:fd:e8:1b:3d:
b5:ad:bd:7f:30:41:dd:53:ab:b7:9c:dc:07:75:d3:
03:3c:58:38:f5:9a:9a:3e:a8:fc:8b:70:49:fc:d5:
43:8f:64:2b:d3:99:b7:b3:a0:02:d6:22:cc:aa:9e:
02:fe:26:c0:66:8b:0f:58:02:7b:fc:2c:20:04:1e:
b4:84:10:0b:05:f8:e6:9e:32:c6:e5:39:5b:22:98:
ed:a6:eb:f3:c5:ef:10:7e:05:2f:ea:ed:71:8d:6a:
f5:2a:1b:3c:ac:85:61:c7:cb:bb:e5:1a:b3:01:5c:
d3:e8:e0:c2:37:58:b1:e7:23:e9:13:a3:d7:5c:b6:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:30:A7:10:80:E7:46:73:70:23:31:7E:BA:86:F3:9C:A3:18:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cLAwpxCA50ZzcCMxfrqG85yjGPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.59.0/24
163.5.73.0/24
163.5.109.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7b:42:29:fd:0b:49:ee:9f:13:36:bf:9b:c4:9c:d4:5e:a6:
39:69:67:ef:00:04:d0:1a:66:d2:06:3c:55:59:6d:f9:47:0c:
dc:b9:78:ad:87:34:c0:4f:c5:4e:c4:e3:20:60:02:25:41:fa:
5b:7f:56:e3:5f:9d:85:7f:d5:e8:79:d9:c8:87:6f:39:30:0b:
e8:8f:73:4b:96:38:fa:1c:97:43:06:c6:f8:5c:d1:f4:59:91:
f5:c2:1e:5d:6e:b2:65:15:90:a8:f5:de:7c:a6:6c:d3:5b:cd:
df:e1:dd:dd:24:2b:53:d5:03:b6:c1:0b:30:f0:9b:f1:a4:d4:
c6:58:97:5f:d5:65:cb:5c:80:eb:9a:ab:21:11:73:5e:ca:53:
f7:b0:28:22:77:97:8d:49:28:31:5d:fc:5f:5c:75:ed:47:5e:
18:24:05:10:75:db:dd:bb:80:c0:86:29:d3:bb:88:af:95:26:
9c:7d:ad:ec:05:ed:9a:e2:21:15:50:9e:d6:c8:92:16:1e:eb:
3e:0a:f7:cc:ab:15:64:19:6c:f7:33:97:9a:5d:53:ba:4f:81:
6b:82:30:94:99:da:d5:32:28:b4:0a:f0:f8:b7:e6:3b:87:f0:
95:1d:ad:75:8a:30:48:f0:4d:66:78:b9:c9:e7:7d:16:af:65:
a8:43:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:32:18 2025 by rpki-client