Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dfn3WV8vZbJFGzleYRna27a_hf0.roa
File: dfn3WV8vZbJFGzleYRna27a_hf0.roa (raw, json)
Hash identifier: 4HLlQ0q4btkgBJZU1waMq/agiARRsUrQii72qA7XjiM=
Subject key identifier: 75:F9:F7:59:5F:2F:65:B2:45:1B:39:5E:61:19:DA:DB:B6:BF:85:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192CD18F2667D38846620D126BA52D32FCA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dfn3WV8vZbJFGzleYRna27a_hf0.roa
Signing time: Sun 27 Oct 2024 08:30:17 +0000
ROA not before: Sun 27 Oct 2024 08:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Oct 2024 11:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:18:f2:66:7d:38:84:66:20:d1:26:ba:52:d3:2f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 08:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=75f9f7595f2f65b2451b395e6119dadbb6bf85fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e2:1b:c3:3b:bf:1b:a6:a5:00:91:9f:51:0d:
81:10:28:c8:a0:68:90:cb:4c:84:e9:9f:b7:b7:a5:
46:90:cc:1b:48:48:1e:49:d7:e0:36:4a:90:ad:09:
e3:8b:73:6c:f1:f2:90:cf:80:d5:b6:de:54:6b:72:
f1:19:00:ee:2b:63:11:b8:a9:85:fc:87:9b:d0:09:
6b:7e:bb:38:2f:4f:a8:f2:db:24:78:cd:86:a2:8d:
b0:52:38:e5:18:af:db:3f:13:1e:a9:85:56:fa:c8:
3c:87:12:46:f9:7f:6e:17:c7:77:77:f1:0e:94:c5:
3f:ee:b5:b3:89:94:3a:db:5d:9c:c4:c1:f6:df:fe:
b8:cd:26:5d:30:64:06:e1:3c:48:e6:0b:30:0d:d2:
e9:b0:01:9e:f9:5f:9b:20:d9:5a:e0:9e:29:ae:a4:
2d:f5:c4:4e:c1:ae:4c:fe:d1:11:dc:77:04:e2:3a:
ca:be:0d:0b:a7:31:3a:c6:70:6c:d2:d3:bb:dc:55:
87:15:ec:5f:2b:18:a5:93:e8:8c:8f:9c:91:35:91:
91:39:0c:5f:a8:0a:93:87:b9:20:f4:b4:29:1c:51:
f8:6c:18:3b:5b:ae:57:a4:ce:cf:e3:19:3f:c4:0a:
59:f6:dc:bc:17:4a:bd:1b:55:28:4e:7e:91:34:fb:
9d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F9:F7:59:5F:2F:65:B2:45:1B:39:5E:61:19:DA:DB:B6:BF:85:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dfn3WV8vZbJFGzleYRna27a_hf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.44.0/24
163.5.59.0/24
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.215.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.237.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
71:d4:b9:69:81:f3:44:8d:e3:fe:b8:c7:27:b8:f4:ae:4b:be:
e7:3b:15:a0:21:39:10:ef:c6:88:1d:27:d8:e6:0c:60:42:c6:
8a:3d:04:56:97:72:3c:b9:7c:86:f2:29:35:81:48:d3:b4:ee:
91:fa:01:13:0c:c0:5a:f2:3f:d0:13:be:7b:c0:09:b9:d3:fe:
07:52:73:fb:09:46:2c:af:d0:b7:63:55:78:e9:58:9e:71:16:
4d:7f:4b:e3:f2:1b:c0:0c:d1:34:a0:8c:fb:cf:19:9b:63:9f:
aa:52:ad:e3:4d:55:4a:f1:35:b6:61:01:c0:d7:57:9b:26:c7:
4a:ab:bc:7b:76:76:ec:f5:c8:d1:fc:d1:c4:13:51:9c:09:67:
c3:03:6f:b2:8b:8a:5e:6f:c1:d0:aa:6b:6d:12:0a:08:7e:a8:
90:28:43:c0:c3:57:bf:2f:d6:e9:29:2f:54:4c:52:ee:fe:5b:
60:72:32:8c:12:6b:c7:90:ec:76:83:22:f0:32:f1:04:e1:b6:
7f:4a:0a:32:1b:e6:eb:8d:4c:d7:e4:22:47:76:ea:8c:43:12:
b6:14:ac:8b:1a:30:31:78:df:56:ec:6e:2c:99:ac:c7:c9:28:
c3:6e:b8:d3:42:69:82:a4:af:e1:44:43:64:4b:1b:45:a2:b4:
e0:d7:18:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 14:33:53 2024 by rpki-client on console-ams.rpki-client.org