Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mcUXVwq5472FdkT53Yj0FvJxAXg.roa
File: mcUXVwq5472FdkT53Yj0FvJxAXg.roa (raw, json)
Hash identifier: 73DoOUChO/ja1GUBbAUG4U8NImG4xt/YdG/cRcl1rfA=
Subject key identifier: 99:C5:17:57:0A:B9:E3:BD:85:76:44:F9:DD:88:F4:16:F2:71:01:78
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018DB673D9CDF0AA6E8DB809204DA7CD7ADA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mcUXVwq5472FdkT53Yj0FvJxAXg.roa
Signing time: Sat 17 Feb 2024 09:44:22 +0000
ROA not before: Sat 17 Feb 2024 09:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 19:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b6:73:d9:cd:f0:aa:6e:8d:b8:09:20:4d:a7:cd:7a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Feb 17 09:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99c517570ab9e3bd857644f9dd88f416f2710178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ce:73:7a:48:f3:3e:64:8c:64:05:60:46:83:
f1:a8:49:38:74:25:35:28:99:52:a9:79:b5:37:d8:
5d:65:33:57:e2:20:e4:2b:8b:7b:fd:09:ee:b6:86:
f6:cb:e4:07:2e:0c:f3:1b:42:42:c7:88:34:2b:9c:
a5:84:3c:c1:dc:ee:f5:1b:89:cd:55:1d:d0:f1:9e:
71:31:86:2b:33:7a:3f:a5:e6:47:fb:25:4c:6d:19:
ad:09:e7:37:74:b1:49:19:12:8a:5e:8a:72:e4:8f:
f9:70:21:b4:67:80:bf:19:99:e6:65:1e:01:ee:d3:
86:e0:4e:b5:3b:9a:c9:f2:5e:20:c8:24:c0:d2:4f:
53:16:fc:f0:90:c5:9a:b9:c8:53:ca:76:38:40:0f:
f4:1d:a6:14:95:e3:9d:1b:94:20:bf:55:49:e0:ba:
df:3f:1f:28:8d:95:8c:99:ca:d2:9b:ec:26:0d:83:
7d:86:a8:9f:5c:1e:1a:5c:9e:04:78:eb:84:9d:84:
eb:03:f5:30:7e:b7:20:f4:f6:2a:39:d9:7a:0a:84:
ef:89:65:e9:12:4a:2c:09:dd:20:94:68:f1:6a:b1:
56:d9:f3:c3:d5:b5:8c:28:46:62:9b:90:b4:43:f9:
ae:a1:14:96:63:af:d5:fc:a3:02:1c:b6:05:04:bc:
fa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C5:17:57:0A:B9:E3:BD:85:76:44:F9:DD:88:F4:16:F2:71:01:78
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/mcUXVwq5472FdkT53Yj0FvJxAXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.119.0/24
163.5.130.0/23
163.5.133.0-163.5.134.255
163.5.147.0/24
163.5.171.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.230.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.245.0-163.5.246.255
Signature Algorithm: sha256WithRSAEncryption
95:99:96:db:c1:0e:65:98:8d:92:92:ec:e6:7b:e3:c5:0b:aa:
6f:85:47:81:32:13:45:38:0d:c9:4e:b1:a0:ec:26:44:d2:11:
87:d5:fe:04:cf:03:d6:6e:9c:7c:e3:37:ef:d0:7d:60:2a:4e:
55:0f:a1:a6:b8:33:4d:dc:cf:b3:b1:23:c4:3b:ae:07:44:aa:
c1:5d:f7:57:76:93:68:d3:57:f2:c0:fe:2f:bb:27:7b:39:e6:
42:4d:ed:9b:d7:cb:15:88:84:6f:5e:d4:71:dd:44:6e:aa:30:
52:9b:38:67:23:cb:99:11:d2:0f:2e:01:57:5d:d3:ef:7d:c9:
1c:80:89:4c:ec:0f:b0:27:4d:5f:4f:73:0d:12:ab:59:72:0b:
26:9c:fa:80:f9:0b:76:5a:e9:2b:28:a5:71:4d:a5:ce:d5:db:
da:e5:e5:f9:56:3d:53:ed:42:4e:84:0a:54:ec:16:1c:ea:fd:
1e:9e:7b:43:cb:a0:36:84:30:af:6a:26:28:bd:d4:a6:d6:b3:
63:4b:96:3f:93:2c:78:3e:0d:72:2b:a4:d7:e5:03:69:85:69:
86:76:49:8a:35:47:a4:e5:0f:47:7e:ee:c8:64:d9:45:1d:d1:
ad:f3:91:30:d2:4d:c2:d6:6e:17:00:c1:01:f4:7d:39:61:07:
9b:f7:2a:51
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgISAY22c9nN8KpujbgJIE2nzXraMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwMjE3MDk0NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWM1MTc1NzBhYjllM2JkODU3NjQ0ZjlkZDg4ZjQxNmYyNzEwMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo85zekjzPmSMZAVgRoPxqEk4dCU1
KJlSqXm1N9hdZTNX4iDkK4t7/Qnutob2y+QHLgzzG0JCx4g0K5ylhDzB3O71G4nN
VR3Q8Z5xMYYrM3o/peZH+yVMbRmtCec3dLFJGRKKXopy5I/5cCG0Z4C/GZnmZR4B
7tOG4E61O5rJ8l4gyCTA0k9TFvzwkMWauchTynY4QA/0HaYUleOdG5Qgv1VJ4Lrf
Px8ojZWMmcrSm+wmDYN9hqifXB4aXJ4EeOuEnYTrA/Uwfrcg9PYqOdl6CoTviWXp
EkosCd0glGjxarFW2fPD1bWMKEZim5C0Q/muoRSWY6/V/KMCHLYFBLz62QIDAQAB
o4ICsjCCAq4wHQYDVR0OBBYEFJnFF1cKueO9hXZE+d2I9BbycQF4MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbWNVWFZ3cTU0NzJGZGtUNTNZajBGdkp4QVhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAGj
BSYDBACjBTwDBACjBT8DBACjBVgDBACjBVoDBACjBV0wDAMEAqMFZAMEAKMFZgME
AaMFbAMEAKMFcgMEAaMFdAMEAKMFdwMEAaMFgjAMAwQAowWFAwQAowWGAwQAowWT
AwQAowWrAwQAowWuAwQAowW9AwQAowXAMAwDBACjBeEDBACjBeYDBACjBe4DBACj
BfADBACjBfMwDAMEAKMF9QMEAKMF9jANBgkqhkiG9w0BAQsFAAOCAQEAlZmW28EO
ZZiNkpLs5nvjxQuqb4VHgTITRTgNyU6xoOwmRNIRh9X+BM8D1m6cfOM379B9YCpO
VQ+hprgzTdzPs7EjxDuuB0SqwV33V3aTaNNX8sD+L7sneznmQk3tm9fLFYiEb17U
cd1EbqowUps4ZyPLmRHSDy4BV13T733JHICJTOwPsCdNX09zDRKrWXILJpz6gPkL
dlrpKyilcU2lztXb2uXl+VY9U+1CToQKVOwWHOr9Hp57Q8ugNoQwr2omKL3Uptaz
Y0uWP5MseD4Nciuk1+UDaYVphnZJijVHpOUPR37uyGTZRR3RrfORMNJNwtZuFwDB
AfR9OWEHm/cqUQ==
-----END CERTIFICATE-----
Generated at Sun Mar 24 20:55:04 2024 by rpki-client on console-fra.rpki-client.org