Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kRhUmfvwt88GVDwOOBlGX1ECjgU.roa
File: kRhUmfvwt88GVDwOOBlGX1ECjgU.roa (raw, json)
Hash identifier: prArYJxFbkKrZLCy7BaSt2704r1KRoI6zbVesOLpTC4=
Subject key identifier: 91:18:54:99:FB:F0:B7:CF:06:54:3C:0E:38:19:46:5F:51:02:8E:05
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01909ADE3E98C276CDF448EB7A92FA1FFF55
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kRhUmfvwt88GVDwOOBlGX1ECjgU.roa
Signing time: Wed 10 Jul 2024 04:19:34 +0000
ROA not before: Wed 10 Jul 2024 04:19:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 21:41:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:de:3e:98:c2:76:cd:f4:48:eb:7a:92:fa:1f:ff:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 10 04:19:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91185499fbf0b7cf06543c0e3819465f51028e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:86:d3:02:97:fd:ef:26:de:e8:72:e5:4a:
b3:0a:af:dd:62:55:34:91:79:68:56:5e:24:30:52:
51:54:0f:be:3e:cc:fb:ed:31:5f:96:1d:83:04:a0:
79:c8:aa:08:d1:4d:1c:0f:02:a5:af:79:64:93:17:
4d:cc:4d:bb:a8:9b:27:69:3b:e3:80:87:11:24:be:
90:3c:c5:d0:af:ce:34:5e:da:ce:ba:5c:c4:83:db:
05:ba:7c:bc:d7:43:7b:e2:9e:99:34:de:2b:84:1d:
1a:5b:f6:21:4c:89:68:ad:b3:2f:23:56:8d:6c:9b:
1b:f6:8e:7b:42:4a:88:90:b2:44:77:5b:7a:c6:79:
00:14:8c:be:06:aa:b9:80:62:db:e0:4d:9c:16:f9:
6d:07:86:25:4d:de:12:56:b6:3d:6a:b6:ce:f9:38:
f7:1c:b5:04:b6:c9:5c:01:b5:93:11:af:28:79:f2:
11:f0:99:d8:d2:51:b4:f6:ee:72:d1:66:b5:b9:ee:
1f:21:2b:01:68:00:9c:c8:a0:e3:c6:62:ef:6c:0b:
c3:53:8e:89:fc:ba:70:1b:05:63:25:c8:b8:ea:a2:
ff:ca:79:9a:cd:a1:7c:b4:01:97:e7:33:cd:9d:14:
60:7b:f2:88:d1:8d:f0:a1:f7:40:62:8b:5f:fd:53:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:18:54:99:FB:F0:B7:CF:06:54:3C:0E:38:19:46:5F:51:02:8E:05
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kRhUmfvwt88GVDwOOBlGX1ECjgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.71.0/24
163.5.89.0/24
163.5.94.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.185.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c2:ec:3d:78:79:8e:d7:e3:79:aa:2d:ef:09:c0:33:db:c3:
39:f6:84:ef:8a:a8:5c:8a:68:2f:c6:97:ed:aa:ff:4f:aa:ea:
49:b6:7c:06:75:a6:e7:3f:5b:bb:09:29:77:b4:b2:23:b2:e7:
d8:50:ca:05:98:bd:87:fc:2e:3e:33:d9:9c:9d:43:96:82:8e:
61:11:3f:4f:72:45:8d:e0:2f:4b:c4:77:b5:86:de:76:03:16:
6a:9a:05:43:6e:26:e8:77:1f:f6:76:42:a4:3b:56:35:1c:78:
a7:f0:a0:95:11:ba:cb:f0:a2:a4:ab:e3:17:ee:bf:71:87:41:
be:b2:74:8b:f7:8e:64:62:8d:f8:50:8b:5a:70:35:89:b7:e9:
c1:0a:3e:8c:80:17:8e:b7:ad:99:64:50:ca:11:0b:a4:2a:ee:
57:43:5a:00:64:cb:9f:72:8d:7b:45:29:10:93:49:00:fe:39:
14:06:3e:2d:e8:10:db:5e:e8:f7:39:78:f2:c4:b8:34:b3:01:
7a:91:9e:ba:35:2c:18:5b:e8:ed:f6:a1:c6:14:1a:3b:f4:35:
ac:2b:94:98:74:08:40:da:28:10:16:0d:8a:87:58:62:87:98:
50:49:8c:ae:0a:c6:6e:2c:19:21:60:07:6a:f7:e6:24:8a:88:
71:a8:6f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 23:54:30 2024 by rpki-client on console-fra.rpki-client.org