Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l6R1v_7O3lExI54_yn3_v-O9-aM.roa
File: l6R1v_7O3lExI54_yn3_v-O9-aM.roa (raw, json)
Hash identifier: aCzsyTzUD3rxOg6QkWNqgqpzPy5W/AIUTSz87YDmbqs=
Subject key identifier: 97:A4:75:BF:FE:CE:DE:51:31:23:9E:3F:CA:7D:FF:BF:E3:BD:F9:A3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01900DA153FC9F52145C61764EB9D8FEF13A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l6R1v_7O3lExI54_yn3_v-O9-aM.roa
Signing time: Wed 12 Jun 2024 18:06:34 +0000
ROA not before: Wed 12 Jun 2024 18:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 20:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:a1:53:fc:9f:52:14:5c:61:76:4e:b9:d8:fe:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 12 18:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=97a475bffecede5131239e3fca7dffbfe3bdf9a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:9b:10:1a:b2:e5:33:47:43:f2:dd:41:a2:
4b:29:e1:eb:0e:01:88:a7:3a:c4:1f:e8:6e:69:32:
c3:c4:60:45:7f:be:f8:70:f3:b0:6d:93:6f:1e:9b:
e1:fc:ab:02:82:8a:27:b1:c8:f0:6b:cf:06:00:a5:
25:a0:5e:4f:c5:d0:cd:e1:33:61:46:1e:5d:e4:a8:
6e:d8:ae:df:45:c4:47:78:7d:d1:3b:56:d0:3b:5f:
33:83:f2:9a:c3:4e:f4:47:6a:f4:5b:5f:07:9c:ff:
8a:3c:67:c3:9d:e7:08:37:9a:4e:4c:0f:d1:4f:9c:
50:af:9f:3e:57:8b:d5:0d:7b:ae:7a:7b:f5:cc:de:
69:0a:9d:ae:e7:f2:6b:c2:3a:8f:3b:99:07:47:d2:
92:bc:96:16:db:7f:c7:d4:72:a5:a5:fa:a1:bd:b1:
ee:61:64:ac:6f:2f:26:e7:a7:76:9e:1e:cb:ad:a0:
59:d8:13:47:a6:e4:a3:36:cb:7c:ad:aa:93:c0:ac:
9f:b7:2b:28:16:3c:68:ec:88:e7:3e:e8:f2:65:c6:
ed:44:e2:68:cc:24:d4:2d:02:e2:12:f9:90:ac:95:
7c:24:69:1a:cf:d7:37:12:2a:41:d8:c8:a7:70:47:
7e:a4:1a:70:e3:94:d2:0e:61:42:ba:f4:61:42:df:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:75:BF:FE:CE:DE:51:31:23:9E:3F:CA:7D:FF:BF:E3:BD:F9:A3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l6R1v_7O3lExI54_yn3_v-O9-aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.119.0/24
163.5.130.0/23
163.5.133.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
00:3b:fe:7d:57:df:ef:a9:6d:18:4c:1b:78:12:1b:7f:32:ea:
91:54:93:63:cb:b0:dc:a7:38:b4:f8:a5:d7:d1:51:04:a6:5e:
85:20:6b:3e:b1:53:a7:c3:85:75:b9:0b:7a:2e:37:51:90:e4:
68:1d:3d:b2:c7:90:c8:b1:17:81:0d:b5:29:76:86:66:4a:ca:
19:46:af:24:5f:6a:e1:dd:d7:27:ed:64:36:f9:77:30:03:73:
f5:8f:df:f0:69:33:43:41:ef:61:4c:11:c5:bf:fc:a2:f5:61:
45:64:11:54:1a:c4:34:0f:8c:fb:ae:78:e8:cc:fc:c1:5e:98:
63:8d:97:f1:64:41:cb:39:53:9d:d2:bf:0f:81:9f:60:b9:87:
e4:b6:27:f2:6b:1c:45:15:0a:72:23:63:18:4e:40:35:ef:09:
b0:13:a7:d1:94:9d:7d:a0:e0:96:18:bc:06:c0:fc:7a:85:7f:
40:49:24:80:ed:94:4a:13:47:21:58:a1:cd:82:80:eb:dc:ef:
6d:1e:02:bd:9f:19:64:8d:5d:fc:c1:e8:8f:dc:2f:85:f6:b3:
1e:95:63:5b:d1:f6:19:d4:8f:2d:04:6c:4d:c1:fe:00:54:71:
35:13:e6:c1:d4:4d:fd:de:8b:0d:1b:64:12:28:6f:9f:bf:b5:
bb:4a:d0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 9 22:06:09 2024 by rpki-client on console-ams.rpki-client.org