Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oPbj0Bf7GsOIv9_0Vxf-QrSPOtQ.roa
File: oPbj0Bf7GsOIv9_0Vxf-QrSPOtQ.roa (raw, json)
Hash identifier: 8ZIAfEZcQwO5r6HSzrHZQ+o/h0lXW4bS850sAOa/ubo=
Subject key identifier: A0:F6:E3:D0:17:FB:1A:C3:88:BF:DF:F4:57:17:FE:42:B4:8F:3A:D4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CDAF4D80AA9EF0349A8F9E03E68BAE376
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oPbj0Bf7GsOIv9_0Vxf-QrSPOtQ.roa
Signing time: Fri 05 Jan 2024 18:48:48 +0000
ROA not before: Fri 05 Jan 2024 18:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:f4:d8:0a:a9:ef:03:49:a8:f9:e0:3e:68:ba:e3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 5 18:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0f6e3d017fb1ac388bfdff45717fe42b48f3ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:61:63:2f:8b:17:17:21:b1:10:65:4f:d4:
24:ed:f6:36:a0:a9:b6:db:c6:6c:52:1a:4b:e5:c3:
7f:46:01:9b:75:af:e3:58:08:9d:1a:5d:de:95:b3:
6e:2f:e8:37:b0:01:d6:42:8f:ff:ff:9e:70:15:ba:
ea:21:1d:40:ac:1d:b2:a7:16:31:d6:f1:bc:89:d2:
a1:39:b7:0a:b6:ed:c1:c0:7d:02:a9:3a:75:7d:28:
e1:24:d9:9f:83:a5:36:ac:b0:d6:a9:51:7f:fd:35:
d0:82:d4:2d:75:ec:6a:8d:b4:b5:8c:96:20:57:6a:
34:f7:4f:a1:81:a5:21:38:29:4a:f9:a0:09:fe:e6:
66:d7:3e:f6:b9:40:e5:31:1a:0b:30:fc:cf:a5:c1:
c9:7f:d5:90:64:ed:bf:f0:1b:79:68:55:a5:da:e3:
f2:0a:5f:ff:b8:df:c8:a0:77:33:b0:19:ab:ef:0f:
f5:86:43:e2:1a:a8:5c:cc:ec:6d:0e:c6:66:2b:e1:
2c:c2:cf:25:13:b4:05:5d:d9:07:96:6d:a7:a1:da:
8f:0c:74:20:6b:9c:2d:e0:97:ba:cd:da:4f:58:e2:
e7:9e:d3:9f:b8:fa:de:a5:ad:9e:56:eb:59:8e:58:
50:a9:3e:e2:d6:15:23:c4:ca:94:b7:0d:be:46:2c:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F6:E3:D0:17:FB:1A:C3:88:BF:DF:F4:57:17:FE:42:B4:8F:3A:D4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/oPbj0Bf7GsOIv9_0Vxf-QrSPOtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.95.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.188.0/23
163.5.191.0/24
163.5.201.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1e:1e:d2:9a:7e:af:7c:12:2a:ad:e7:8d:ed:bc:b0:a6:8d:
4e:66:57:c6:d3:30:ec:0c:fa:91:ee:ba:ca:ea:b8:58:02:30:
12:17:d9:7f:7d:bc:a6:c3:db:78:aa:c0:0a:cb:17:fd:0f:7a:
26:6e:44:c4:a5:e1:13:02:96:0c:b2:b5:bb:78:ba:95:3d:ed:
f2:f4:2a:97:69:20:2e:cf:2a:79:66:10:ec:29:78:db:77:f0:
fe:ce:68:68:ba:27:2f:14:c7:17:0a:7d:f9:85:ec:5e:8f:ed:
9d:85:9c:72:80:85:c6:e2:63:f0:a3:0f:d9:73:b2:96:89:ef:
77:ad:3c:ab:7b:d7:e6:17:4f:5a:93:e7:a6:71:10:55:b1:fa:
4a:df:7b:87:fe:e5:53:65:6d:9a:0b:6e:4a:76:99:7b:8c:46:
aa:0f:10:09:43:21:8c:fa:7e:a8:52:4c:d4:90:01:e8:a5:e6:
38:a1:b7:b9:a4:f3:0f:cf:84:fe:6a:90:18:6f:15:a1:aa:0a:
2e:1a:c5:db:a1:c6:4b:c0:40:b9:5e:dc:3e:7f:68:be:18:74:
75:ef:39:96:9b:49:fe:0c:a5:a7:16:ca:ff:18:ac:96:a2:62:
e2:a1:fb:2b:63:59:b5:fc:b6:f5:73:ab:c8:8d:e9:a5:4e:20:
2f:7a:07:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jan 6 20:47:37 2024 by rpki-client on console-fra.rpki-client.org