Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qg7R6XNkks0zbVHVn7lhMIop2fI.roa
File: qg7R6XNkks0zbVHVn7lhMIop2fI.roa (raw, json)
Hash identifier: VkZ9qtFEmveqUopoPU8U61q9h1DAKGE61nzLUIjTFmw=
Subject key identifier: AA:0E:D1:E9:73:64:92:CD:33:6D:51:D5:9F:B9:61:30:8A:29:D9:F2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018EDBDC3B5A27E44A7A8512E1CAC72FED5B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qg7R6XNkks0zbVHVn7lhMIop2fI.roa
Signing time: Sun 14 Apr 2024 09:07:07 +0000
ROA not before: Sun 14 Apr 2024 09:07:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 19:40:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:db:dc:3b:5a:27:e4:4a:7a:85:12:e1:ca:c7:2f:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 14 09:07:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa0ed1e9736492cd336d51d59fb961308a29d9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:3f:69:72:3e:e1:19:5b:3c:6f:73:75:14:
32:ee:e0:7d:75:2e:88:c3:71:93:9d:6d:ad:f7:9b:
4b:8d:51:6f:ae:0f:49:c5:44:bc:e5:83:cd:bd:1a:
c2:91:bf:83:4b:14:b8:bf:9c:5a:0d:fa:3b:c8:a2:
9a:21:00:23:70:1f:14:d5:3b:07:c2:d1:80:73:ad:
d1:ef:f3:d4:fc:d9:4a:ce:ec:9c:df:c4:b9:e3:d4:
d7:b9:34:61:39:9c:99:0c:f1:cc:bc:0b:7b:b1:50:
fd:c0:06:3f:a9:f8:1d:c1:f9:d0:3f:13:e8:6c:e4:
ba:26:45:aa:45:5a:cc:1b:b6:33:f4:d2:fe:f1:ff:
20:17:d9:ac:88:0b:8b:9b:30:4c:47:3c:54:5f:08:
11:74:26:4f:83:4d:97:de:05:78:a4:3a:46:d2:95:
e9:bf:9e:3a:99:3d:67:b3:6f:27:50:ea:26:05:01:
62:0d:3c:f0:3e:d3:fc:d6:9c:29:cb:a1:50:80:c8:
df:93:3f:31:ee:ba:4d:e3:89:9f:5b:73:f6:4f:0f:
d5:9c:4d:7a:04:5c:44:4c:e1:74:2b:cf:c3:e1:59:
28:44:0d:02:7e:3c:57:83:f2:30:92:66:07:cf:77:
2c:d2:90:1b:3b:60:22:26:b0:20:89:3a:aa:01:df:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0E:D1:E9:73:64:92:CD:33:6D:51:D5:9F:B9:61:30:8A:29:D9:F2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qg7R6XNkks0zbVHVn7lhMIop2fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.124.0/24
163.5.126.0/24
163.5.128.0/23
163.5.134.0/24
163.5.139.0-163.5.140.255
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.148.0/24
163.5.151.0/24
163.5.154.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.171.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:20:47:90:54:56:f3:a0:d5:14:15:33:d6:d5:d8:45:be:81:
3c:ff:df:a5:2a:60:a2:16:aa:6f:41:4e:7e:6b:60:db:2d:73:
2f:64:df:6d:96:d7:ca:29:01:24:af:30:87:6c:0c:38:19:0c:
bd:ad:26:c8:38:08:7d:ee:02:ea:37:fd:53:df:3f:de:97:a7:
1d:54:21:90:e4:02:28:ce:a1:9f:7a:0b:d5:76:a8:37:c1:60:
b2:41:db:d0:51:72:95:35:db:ed:99:52:1f:91:9e:0e:6a:0c:
91:0d:a2:05:fb:d3:4c:18:8e:39:7e:0c:2b:8d:fc:99:a7:cb:
25:d1:f1:d5:57:53:f4:f3:80:9c:76:37:2a:c4:b1:e2:ad:65:
16:ca:31:67:53:09:61:15:a1:d6:8b:bd:09:38:26:52:57:4b:
f5:10:a7:ea:d1:4a:a4:b7:f4:e3:48:a3:a5:24:e1:b9:4c:66:
4c:0b:3b:75:8f:c8:18:ce:29:89:6e:d4:7d:98:a6:1f:de:10:
4e:1f:51:1d:3a:7d:9e:bd:25:fb:04:90:73:78:ac:c4:05:67:
23:ed:69:47:50:8f:90:03:e4:54:61:6f:13:3c:17:d3:17:0a:
34:27:19:dc:61:ae:34:5b:24:7a:3f:e3:a3:a5:ff:00:4e:07:
46:04:cf:fa
-----BEGIN CERTIFICATE-----
MIIF0DCCBLigAwIBAgISAY7b3DtaJ+RKeoUS4crHL+1bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwNDE0MDkwNzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTBlZDFlOTczNjQ5MmNkMzM2ZDUxZDU5ZmI5NjEzMDhhMjlkOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbU/aXI+4RlbPG9zdRQy7uB9dS6I
w3GTnW2t95tLjVFvrg9JxUS85YPNvRrCkb+DSxS4v5xaDfo7yKKaIQAjcB8U1TsH
wtGAc63R7/PU/NlKzuyc38S549TXuTRhOZyZDPHMvAt7sVD9wAY/qfgdwfnQPxPo
bOS6JkWqRVrMG7Yz9NL+8f8gF9msiAuLmzBMRzxUXwgRdCZPg02X3gV4pDpG0pXp
v546mT1ns28nUOomBQFiDTzwPtP81pwpy6FQgMjfkz8x7rpN44mfW3P2Tw/VnE16
BFxETOF0K8/D4VkoRA0CfjxXg/IwkmYHz3cs0pAbO2AiJrAgiTqqAd8UcwIDAQAB
o4IC3DCCAtgwHQYDVR0OBBYEFKoO0elzZJLNM21R1Z+5YTCKKdnyMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcWc3UjZYTmtrczB6YlZIVm43bGhNSW9wMmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHxBggrBgEFBQcBBwEB/wSB4TCB3jCB2wQCAAEwgdQDBACj
BR4DBACjBVkwDAMEAaMFbgMEAaMFcAMEAKMFeQMEAKMFfAMEAKMFfgMEAaMFgAME
AKMFhjAMAwQAowWLAwQAowWMMAwDBACjBY8DBACjBZADBACjBZIDBACjBZQDBACj
BZcDBACjBZoDBACjBaADBAGjBaIDBACjBacDBACjBasDBACjBbIDBACjBbYDBAGj
BbwDBACjBb8DBACjBckwDAMEAKMFywMEAaMFzAMEAKMF2gMEAKMF4AMEAKMF5AME
AKMF8QMEAKMF+gMEAKMF/TANBgkqhkiG9w0BAQsFAAOCAQEAoiBHkFRW86DVFBUz
1tXYRb6BPP/fpSpgohaqb0FOfmtg2y1zL2TfbZbXyikBJK8wh2wMOBkMva0myDgI
fe4C6jf9U98/3penHVQhkOQCKM6hn3oL1XaoN8FgskHb0FFylTXb7ZlSH5GeDmoM
kQ2iBfvTTBiOOX4MK438mafLJdHx1VdT9POAnHY3KsSx4q1lFsoxZ1MJYRWh1ou9
CTgmUldL9RCn6tFKpLf040ijpSThuUxmTAs7dY/IGM4piW7UfZimH94QTh9RHTp9
nr0l+wSQc3isxAVnI+1pR1CPkAPkVGFvEzwX0xcKNCcZ3GGuNFskej/jo6X/AE4H
RgTP+g==
-----END CERTIFICATE-----
Generated at Tue Apr 16 22:05:09 2024 by rpki-client on console-ams.rpki-client.org