Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qCgvSRbJhaaRxu6ZONGmFoZCTv0.roa
File: qCgvSRbJhaaRxu6ZONGmFoZCTv0.roa (raw, json)
Hash identifier: Aml0VS0DMVvIPaQ+ADI4qq7WajEI4SzH5cKqYrMN3So=
Subject key identifier: A8:28:2F:49:16:C9:85:A6:91:C6:EE:99:38:D1:A6:16:86:42:4E:FD
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01955C1F25CC11CAFCE23E289301F6CC9717
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qCgvSRbJhaaRxu6ZONGmFoZCTv0.roa
Signing time: Mon 03 Mar 2025 13:08:19 +0000
ROA not before: Mon 03 Mar 2025 13:08:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.22.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Mar 2025 11:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:1f:25:cc:11:ca:fc:e2:3e:28:93:01:f6:cc:97:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 3 13:08:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8282f4916c985a691c6ee9938d1a61686424efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:a2:ba:1f:ff:20:4b:6a:83:a0:95:48:c5:
a3:7e:a5:a3:94:29:2f:92:2b:ec:bc:66:f5:14:da:
78:41:b4:f6:92:77:40:23:23:68:95:43:34:90:da:
61:08:2e:21:59:dc:d1:28:f8:68:4c:60:d1:cc:6b:
3f:37:04:42:8f:03:8a:79:b8:09:6b:ac:38:53:5b:
3d:58:19:8a:10:34:b1:d7:45:b3:f3:3f:19:9b:b6:
79:42:14:5d:85:85:ad:9b:c5:42:49:8b:c8:af:f2:
8f:c1:f6:dc:b1:0c:e8:ea:f9:5d:62:35:b3:16:92:
6e:f3:f1:32:4d:52:87:55:5a:9f:01:c5:92:3b:4b:
57:c0:c8:5e:62:2b:65:b4:98:ec:5e:b6:e0:32:8f:
b7:70:84:64:0f:5b:28:2f:60:d8:f6:79:f3:16:28:
6e:29:f8:6f:b7:d4:db:4c:ea:87:20:2e:9d:72:06:
1e:fe:88:60:ca:a0:67:93:5a:d1:cc:17:c4:5f:ce:
08:52:6d:08:c7:9e:ec:04:6b:37:af:f2:70:ab:06:
7e:76:7d:63:15:50:24:e6:fe:8c:d0:19:1b:3d:9a:
e3:2a:11:bf:fe:fd:c6:f2:1f:2b:44:17:38:2e:82:
c0:ed:f1:67:0c:93:8f:80:3d:46:ef:ac:98:c1:5f:
39:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:28:2F:49:16:C9:85:A6:91:C6:EE:99:38:D1:A6:16:86:42:4E:FD
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qCgvSRbJhaaRxu6ZONGmFoZCTv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.22.0/24
163.5.30.0/23
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.111.0-163.5.113.255
163.5.118.0-163.5.121.255
163.5.123.0/24
163.5.128.0/23
163.5.131.0/24
163.5.133.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.155.0-163.5.156.255
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.212.0/24
163.5.218.0/24
163.5.220.0/24
163.5.224.0/24
163.5.228.0/23
163.5.233.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
31:dd:68:14:7c:f7:28:67:10:df:7f:78:7a:30:12:1e:fc:7d:
a6:d6:b6:37:fc:d8:04:b5:b2:c3:54:a3:2a:2a:32:e5:db:3d:
df:e4:5a:22:6a:b8:88:81:d4:0f:1e:d2:7e:42:24:44:1f:60:
68:08:10:37:2a:fc:4a:96:b1:5f:62:0d:5d:1b:fd:4c:bc:84:
2c:9e:5c:95:81:a2:e8:12:a6:d9:21:23:d3:39:4a:2e:70:22:
2b:e1:f1:73:bc:67:1a:b3:d5:e6:c8:90:b2:e1:cd:30:3c:8f:
e7:35:a5:d5:78:b5:c6:e9:bc:32:79:b1:2f:f0:38:0c:c5:b8:
e4:28:53:e9:10:cd:c4:cf:43:2b:e4:a3:c1:bb:ef:cd:08:1d:
33:10:1e:88:ca:b8:d6:36:48:6f:a7:44:7f:24:21:cc:03:54:
08:6e:c9:71:b7:18:6c:6d:2b:1a:53:85:29:da:7c:ef:7e:a9:
a2:13:64:28:a6:9b:75:2d:e1:1b:28:6a:4d:a9:98:49:8d:5b:
0e:d2:db:c0:8b:1e:5e:b0:90:df:f5:8c:94:9d:8d:d0:23:1c:
a6:55:b3:35:33:29:59:d1:1a:22:24:1c:56:8a:18:35:a2:76:
2a:03:16:0d:72:60:ef:cd:7c:b7:c4:e5:e8:ee:76:98:b3:3d:
db:c1:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:41:32 2025 by rpki-client