Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kyoB4OLuaHv8C5Xu3PvTCWQX2nM.roa
File: kyoB4OLuaHv8C5Xu3PvTCWQX2nM.roa (raw, json)
Hash identifier: +P1EEYmAMUG1q2G0x/1XqJjvUUkLoLvGurs3PZOFE2w=
Subject key identifier: 93:2A:01:E0:E2:EE:68:7B:FC:0B:95:EE:DC:FB:D3:09:64:17:DA:73
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196FAE10C8EB1157D2E1BC9BB07D01DBA0F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kyoB4OLuaHv8C5Xu3PvTCWQX2nM.roa
Signing time: Fri 23 May 2025 02:02:54 +0000
ROA not before: Fri 23 May 2025 02:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 May 2025 16:36:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fa:e1:0c:8e:b1:15:7d:2e:1b:c9:bb:07:d0:1d:ba:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 23 02:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=932a01e0e2ee687bfc0b95eedcfbd3096417da73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f9:de:39:4b:a6:df:1d:7a:82:fd:aa:6a:98:
f7:45:73:b2:b6:f0:f7:9a:b6:bf:d5:b5:e3:af:54:
f7:4f:ed:19:65:77:58:de:fc:20:45:b2:04:c1:26:
f9:2f:ab:c8:8f:18:c6:a6:ad:75:0e:91:9e:1c:ca:
42:ee:f9:49:fa:0e:f7:d1:41:a1:6e:92:0c:fb:39:
12:62:79:f1:21:16:d0:4b:b1:a0:94:e2:40:1c:db:
30:65:ad:16:27:45:c8:1a:59:90:12:d7:9d:09:1e:
15:54:be:da:34:a3:85:67:46:3f:80:df:fb:26:81:
ba:79:f5:92:6a:ee:5e:b8:91:47:30:32:ac:6e:ff:
65:3c:3c:a5:21:13:46:b5:4d:84:d7:80:76:ee:ae:
e5:45:ff:4f:9b:c0:eb:6e:85:7c:15:0c:7b:e3:21:
fd:4c:a8:92:61:91:b8:ad:21:c9:c0:cc:39:6a:3c:
bb:69:df:cb:32:92:1c:4d:57:c6:80:42:2b:27:3c:
db:0b:97:95:ba:64:cd:ee:bd:bf:ef:c1:10:e6:08:
73:0c:25:31:df:7e:9f:18:72:91:c0:c1:82:84:2c:
0a:af:2b:6a:65:fb:35:68:26:46:4f:4f:23:c8:71:
96:6d:ca:c8:7c:6f:e3:52:38:e7:4a:69:71:37:8e:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2A:01:E0:E2:EE:68:7B:FC:0B:95:EE:DC:FB:D3:09:64:17:DA:73
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/kyoB4OLuaHv8C5Xu3PvTCWQX2nM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.86.0/24
163.5.111.0/24
163.5.155.0-163.5.156.255
163.5.170.0/24
163.5.175.0/24
163.5.219.0/24
163.5.230.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
24:60:97:ed:b6:70:ed:10:e3:43:db:58:33:c6:c9:64:1a:b2:
94:c1:cb:80:10:90:c5:ec:61:13:1a:9a:e7:28:38:50:d6:b7:
6f:4a:ba:23:e0:ad:5a:e0:33:6f:94:41:46:40:48:c2:c9:a5:
f5:ba:d3:25:a0:d3:3c:05:34:9e:46:7b:85:79:6b:20:d1:3e:
f7:c8:d5:bf:e1:9a:d6:d3:83:46:21:8a:61:30:bd:73:e9:c1:
30:6f:68:a2:9c:69:09:03:1a:fe:1a:51:98:c2:5a:52:65:82:
66:af:83:8e:03:9f:95:08:bf:f2:a6:c0:96:38:44:1e:13:97:
0a:83:08:33:fb:30:24:bf:27:05:ac:8d:8e:02:5c:b1:ad:96:
c4:a3:95:28:f2:0e:c0:38:d3:5a:af:58:62:a7:15:65:1e:7b:
f1:13:52:fa:97:bd:7e:a6:93:f7:ab:b3:db:9b:cb:ce:83:32:
70:8f:44:d5:7e:b3:b8:95:a7:1b:c4:c1:06:b4:d6:42:b9:5c:
d6:08:7b:ad:83:28:89:44:63:f2:18:8b:74:70:05:3e:36:d3:
41:10:d3:73:eb:04:0b:30:f0:1d:c6:2f:43:26:5f:53:12:c3:
89:74:ab:4f:53:74:ec:52:08:16:1f:f9:41:70:90:75:fe:7e:
ea:c1:2e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:29:02 2025 by rpki-client