Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE-dnvmkYbSPjamIiNmT2nofdJ4.roa
File: mE-dnvmkYbSPjamIiNmT2nofdJ4.roa (raw, json)
Hash identifier: kfQ/ps1szQAg4Kp1Uq699aPr3k2s3UbGvM0rNyKlCLA=
Subject key identifier: 98:4F:9D:9E:F9:A4:61:B4:8F:8D:A9:88:88:D9:93:DA:7A:1F:74:9E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01944F4BDC5B40E22EB613DB504453D6EBB3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE-dnvmkYbSPjamIiNmT2nofdJ4.roa
Signing time: Fri 10 Jan 2025 08:19:19 +0000
ROA not before: Fri 10 Jan 2025 08:19:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.12.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 10:28:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:4f:4b:dc:5b:40:e2:2e:b6:13:db:50:44:53:d6:eb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 10 08:19:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=984f9d9ef9a461b48f8da98888d993da7a1f749e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7f:df:52:53:62:f4:23:31:d5:13:c8:54:25:
21:cf:09:3d:5f:04:fb:1a:c1:71:89:96:10:1e:f2:
80:14:f8:2f:ed:95:b0:a8:1e:05:40:5f:17:3e:59:
34:39:e0:3f:94:80:66:54:7c:c2:59:0e:1f:61:e3:
68:99:c5:76:ab:60:a6:0f:57:7e:fa:9f:98:e3:fc:
59:74:e0:c0:8f:e9:01:92:81:da:a1:43:72:28:a7:
60:8a:25:1c:a6:3a:0c:48:12:d1:20:ac:7f:c0:98:
cc:43:7e:01:da:9b:f7:4b:f5:15:71:c3:12:f8:20:
b0:2f:54:fa:c8:92:e4:f1:01:fe:70:4a:3c:ce:04:
70:f7:57:9a:79:47:30:1a:46:03:51:b7:be:c7:71:
24:ff:83:46:f1:7f:47:d0:a0:8c:1b:f7:48:45:22:
2d:5d:ee:4b:81:de:59:f6:8e:68:8e:4b:e3:41:a1:
5e:74:88:6a:78:45:0c:06:59:a8:fa:d9:d1:85:fd:
1f:44:ef:fb:d7:51:a1:dc:a1:c3:b5:c3:ca:2a:a1:
5c:d9:13:72:fd:35:e9:53:20:ee:c9:2c:35:4c:f8:
b0:d6:e8:58:77:b0:d7:b0:dd:4b:31:17:b3:0e:25:
0f:33:a1:bd:e5:6b:b1:72:d0:d6:38:e0:82:83:d2:
e9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:9D:9E:F9:A4:61:B4:8F:8D:A9:88:88:D9:93:DA:7A:1F:74:9E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mE-dnvmkYbSPjamIiNmT2nofdJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.12.0/24
163.5.30.0/24
163.5.59.0/24
163.5.73.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.138.0/23
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.167.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.185.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.212.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.231.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
81:91:a9:a1:e8:9a:67:c9:6b:83:d9:5a:0f:6b:ba:44:68:10:
43:8c:cb:a6:fa:a1:c6:b5:c9:e5:c3:83:8a:71:7f:e6:d0:d6:
f8:3f:26:60:5b:cf:1d:19:6f:6d:66:01:44:65:eb:78:fe:2d:
54:0e:b7:d6:f1:af:25:61:d4:81:07:89:68:28:20:68:0e:d2:
23:2d:72:3b:46:0e:81:5e:e0:5d:b5:9d:48:b2:f5:33:3c:bf:
13:61:57:36:f6:29:cb:e8:cf:80:55:e5:e6:fb:a3:df:51:2f:
0f:c1:68:ca:45:88:8d:70:92:40:86:93:6d:28:1a:c1:0c:1e:
db:a2:4f:9d:13:26:68:3a:ca:b7:50:39:65:fb:d1:5e:92:88:
c7:e8:e5:60:2a:37:d6:b5:c9:22:eb:3f:c4:6d:99:ca:b5:eb:
de:31:b9:6c:03:2a:4b:06:f9:8b:48:bb:a0:8a:ab:de:2d:e3:
0f:c8:ed:33:c8:80:e9:f5:8a:93:07:dc:27:10:63:22:3c:dd:
45:06:d9:ab:30:ff:bd:49:12:6f:6a:03:6c:32:6a:8f:15:60:
40:ab:e7:f2:8f:67:82:5c:be:1d:3d:8f:50:fe:4f:16:ab:ec:
a3:c0:3b:79:35:6f:7c:5e:12:79:f5:3a:86:25:6d:4a:b6:fe:
08:53:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:55:08 2025 by rpki-client