Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/p1yKGaAZY_XqzPmlEJ9K7hS0dBc.roa
File: p1yKGaAZY_XqzPmlEJ9K7hS0dBc.roa (raw, json)
Hash identifier: Y1cVxbDVRb4O6PcDUJOqt/LRmwhrlLwknQmA6oGwWZI=
Subject key identifier: A7:5C:8A:19:A0:19:63:F5:EA:CC:F9:A5:10:9F:4A:EE:14:B4:74:17
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018E3909C4CD5BBEA0771B9F0F58C0316790
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/p1yKGaAZY_XqzPmlEJ9K7hS0dBc.roa
Signing time: Wed 13 Mar 2024 18:18:45 +0000
ROA not before: Wed 13 Mar 2024 18:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Mar 2024 15:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:39:09:c4:cd:5b:be:a0:77:1b:9f:0f:58:c0:31:67:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 18:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a75c8a19a01963f5eaccf9a5109f4aee14b47417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:10:52:8d:36:e0:f5:ce:0e:71:85:3a:8a:36:
60:9f:bf:bc:3c:f7:51:af:bb:9b:1b:ed:7b:78:75:
ea:9f:05:8a:66:5d:cc:18:18:6d:3f:de:8a:85:6e:
74:a5:38:8e:36:40:6d:db:17:20:a1:49:b6:8b:8c:
ac:3b:15:52:1e:3c:35:93:28:e1:e1:e8:fe:9a:38:
dd:27:97:15:df:6f:75:6e:1a:6d:56:4f:cb:cc:1a:
bd:8e:d8:a3:3a:5b:d2:c6:22:7f:16:f0:bf:14:90:
51:76:12:2a:92:17:e1:2a:5b:e7:04:d0:7e:16:d5:
5c:90:9f:98:32:20:86:e7:58:31:59:a5:66:34:c5:
2f:d3:19:cb:23:e6:ea:ed:f8:bb:da:be:70:ab:74:
ec:b8:2b:34:af:c1:6f:0f:c2:46:5d:d4:ee:ec:14:
03:f6:12:fb:18:61:1f:ef:b0:a2:53:50:98:99:62:
ab:ec:9f:ce:da:85:bb:59:3f:53:9a:40:b2:b0:f1:
30:38:b2:50:30:b7:33:f3:7c:c0:9c:40:68:cf:9f:
39:28:bf:db:a6:67:ca:6d:2b:8a:9a:00:5f:73:49:
dd:db:cf:f1:76:13:5b:93:b8:96:29:ef:12:41:f8:
62:2a:dc:58:fe:f9:c8:37:0a:ff:03:fc:75:ad:44:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5C:8A:19:A0:19:63:F5:EA:CC:F9:A5:10:9F:4A:EE:14:B4:74:17
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/p1yKGaAZY_XqzPmlEJ9K7hS0dBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.79.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.160.0-163.5.162.255
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.248.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f4:5c:71:8e:36:b1:e4:47:7d:ab:a6:12:29:5f:b3:e2:63:
5f:10:2f:5e:47:d0:08:d5:8d:7a:62:51:45:c9:0f:0a:5a:32:
30:49:9e:77:32:c7:10:55:53:7d:b9:40:73:c5:48:5c:60:b4:
ff:95:f3:80:40:8a:71:11:8e:0b:28:a6:4a:02:71:7d:30:86:
29:d1:7a:bd:b3:c4:b3:c3:23:e7:e9:46:e7:f8:30:f8:41:b3:
46:95:86:4e:b2:c7:69:b5:3d:15:4e:2d:91:c0:b3:99:d5:6b:
b8:ad:c3:0a:cf:96:6d:e7:e0:bc:87:06:bf:74:be:c0:2f:4f:
50:26:f9:da:bc:00:37:2a:8c:7d:b6:a2:61:ec:15:13:a0:cc:
66:94:75:2f:8a:32:4d:c1:89:da:94:3d:00:41:8b:c6:35:d5:
bb:84:fb:f5:03:80:ec:be:15:e2:e2:9d:98:26:55:8a:e8:8c:
76:b7:a6:23:4d:c7:79:3b:c3:4f:13:64:f8:de:4b:f0:af:94:
d2:12:3f:ab:c8:7e:a9:2e:d8:5a:0c:3b:5e:34:1e:af:90:18:
c6:d5:96:8e:6a:e7:49:0c:8e:65:32:1d:88:3a:cf:60:78:ee:
78:15:06:b1:25:f1:b6:71:61:76:e1:cb:6a:76:30:9b:c7:bd:
48:85:1f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 17 16:10:44 2024 by rpki-client on console-fra.rpki-client.org