Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qG6JktAeKEjlhW1ik53ta6FQjX8.roa
File: qG6JktAeKEjlhW1ik53ta6FQjX8.roa (raw, json)
Hash identifier: bfYqCAER9s8K1vAxlV3F30bZ4Pg/IOWlD8VLn5zbTYU=
Subject key identifier: A8:6E:89:92:D0:1E:28:48:E5:85:6D:62:93:9D:ED:6B:A1:50:8D:7F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191EB792A3820967BC5FA36B71247626819
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qG6JktAeKEjlhW1ik53ta6FQjX8.roa
Signing time: Fri 13 Sep 2024 13:01:11 +0000
ROA not before: Fri 13 Sep 2024 13:01:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 11:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:79:2a:38:20:96:7b:c5:fa:36:b7:12:47:62:68:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 13 13:01:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a86e8992d01e2848e5856d62939ded6ba1508d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:33:0b:a2:2a:a6:be:03:9b:23:e6:14:fe:
2f:f9:cf:10:4d:de:cf:4e:91:68:31:3a:cd:97:6a:
30:01:2d:2c:18:3b:65:75:bb:ba:00:24:e0:30:71:
be:45:9c:1b:ed:6f:22:4a:69:27:fa:d7:df:14:55:
2d:03:70:c2:f5:f3:4e:00:8c:d3:31:cb:f6:cb:67:
e9:c8:a0:ac:e5:4a:b8:ab:00:59:1d:bd:2b:6e:4c:
92:2b:98:31:f5:46:79:95:0c:a2:d8:47:6d:84:13:
46:d7:74:a2:f1:f7:32:8d:22:d0:b5:eb:e6:a3:00:
d4:1a:e4:6f:b6:55:88:ce:e8:2a:18:ab:9f:23:61:
a3:fc:bb:5d:b8:92:f6:0d:e9:b6:3f:d4:df:f0:7d:
8e:57:54:6a:7b:64:dd:61:ab:ef:84:57:52:64:ab:
a4:03:8d:95:41:07:ec:34:55:f5:15:69:62:a7:09:
72:99:2c:d6:ac:23:b6:34:3e:88:a4:26:50:40:b5:
5a:d2:54:5d:91:ed:16:9e:b8:64:5d:a7:21:a9:9a:
4d:0d:f1:0f:da:80:6c:43:65:0e:2d:71:3c:d6:ff:
37:b1:da:4d:4f:93:e3:19:56:b1:d9:d0:8c:68:95:
c4:b2:4d:e2:54:b7:e0:4d:bd:28:ad:aa:e5:e6:88:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6E:89:92:D0:1E:28:48:E5:85:6D:62:93:9D:ED:6B:A1:50:8D:7F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qG6JktAeKEjlhW1ik53ta6FQjX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/24
163.5.59.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/23
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/24
163.5.230.0/24
163.5.241.0/24
163.5.245.0/24
163.5.247.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
06:a4:07:dc:8d:54:3b:59:15:b3:2d:c0:d7:54:96:cc:ae:89:
cf:12:3d:1b:76:c2:bb:0a:50:97:c0:8a:89:0c:57:c7:37:06:
a5:50:c9:ac:b1:02:75:bc:43:7a:8d:2b:1e:0f:d8:f5:1b:68:
f5:b3:9c:df:9e:42:d1:94:55:4f:20:2c:60:5d:37:17:34:3c:
09:23:42:d5:17:06:c5:62:d8:56:0d:e0:54:ad:67:77:fd:e3:
66:09:7c:c5:3c:91:39:34:74:5c:04:6c:a6:c6:4b:64:a6:4e:
bb:91:21:a7:44:36:a2:12:07:d1:b1:c8:ec:65:51:f6:39:4a:
eb:b7:2e:98:7c:2a:a9:d8:a6:f8:84:99:0f:5b:5c:94:84:08:
7e:87:12:3e:f6:77:ee:68:e0:23:2b:a1:14:3b:3a:ed:1f:5e:
4d:0b:bc:63:73:42:68:95:ca:5c:78:be:fb:47:42:13:f2:53:
e2:86:b6:3a:c8:d8:87:bb:3f:fb:c9:ab:98:0c:55:96:a4:e9:
b0:b4:32:a5:51:1c:ab:70:42:23:21:b7:d2:8c:d8:20:22:d7:
0e:13:e8:8d:e9:9c:45:c3:6d:97:49:32:b9:0e:46:0b:f8:70:
2d:9f:a5:b1:87:29:6a:dd:8e:03:e9:fc:43:4e:f4:b4:c7:ca:
b2:32:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 13:24:21 2024 by rpki-client on console-fra.rpki-client.org