Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qgDLw9DC4Rb-JIimWDYf7DV7DYQ.roa
File: qgDLw9DC4Rb-JIimWDYf7DV7DYQ.roa (raw, json)
Hash identifier: JZMw+jTz55Z6Kn0r7uv79gMlcYWE+3FTzZxj1XwjLI0=
Subject key identifier: AA:00:CB:C3:D0:C2:E1:16:FE:24:88:A6:58:36:1F:EC:35:7B:0D:84
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0190EE85CE0348A28C21E80F28FB881CA9EA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qgDLw9DC4Rb-JIimWDYf7DV7DYQ.roa
Signing time: Fri 26 Jul 2024 10:11:04 +0000
ROA not before: Fri 26 Jul 2024 10:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 09:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:85:ce:03:48:a2:8c:21:e8:0f:28:fb:88:1c:a9:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 26 10:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa00cbc3d0c2e116fe2488a658361fec357b0d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b3:d6:a1:a4:dd:a7:9f:3e:74:54:e1:b9:91:
c6:bb:a3:c6:69:a2:91:79:99:44:c7:96:c3:ae:cb:
f5:0b:6d:aa:33:70:ba:af:d5:be:72:eb:a8:2c:e7:
2c:f3:1a:bc:bb:e2:a5:bd:d3:3c:6e:c4:ed:50:1a:
30:18:bf:ae:15:b8:3d:67:78:6d:48:86:88:14:33:
88:04:73:e9:6b:d8:e6:f9:02:cd:1d:11:6e:6e:ea:
54:b2:5a:9d:07:e5:16:40:c5:35:b4:0c:28:eb:f3:
47:a3:99:28:13:e1:f5:ae:e3:0b:12:23:46:82:f6:
3a:aa:17:62:3c:ea:25:57:43:86:13:44:b0:01:77:
31:1b:67:d7:59:ea:b7:19:3f:cc:7c:ab:f2:1b:c6:
01:6b:0c:43:45:95:0c:04:61:92:db:ae:1e:c4:bb:
73:c2:52:23:33:d1:b2:8f:65:52:b6:16:e3:cd:ff:
7e:27:36:df:9f:97:2b:1a:1b:a1:c5:d2:2a:e6:3e:
86:49:a3:c1:02:4b:1d:5c:62:76:e6:6e:09:63:6f:
c6:d1:19:f0:fb:e4:d0:41:6d:0d:c8:3e:be:44:e2:
8a:94:07:27:a0:e1:59:dc:3a:88:52:35:89:d6:ad:
3d:1e:11:ca:46:9a:76:18:2b:09:aa:c3:dd:4e:8a:
bd:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:CB:C3:D0:C2:E1:16:FE:24:88:A6:58:36:1F:EC:35:7B:0D:84
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qgDLw9DC4Rb-JIimWDYf7DV7DYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/23
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.199.0-163.5.201.255
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.215.0/24
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.247.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
44:09:7a:32:11:f5:ae:cb:09:26:76:04:8e:22:bb:a2:69:8f:
df:76:f1:99:8d:45:90:2a:9a:dd:99:6a:dd:2d:55:49:81:3c:
be:65:f0:a8:fd:bb:31:34:36:d7:26:99:36:90:bf:5c:af:72:
34:bc:cf:70:8d:4c:ef:70:dd:46:0d:6a:e8:b3:30:c3:06:43:
5e:30:07:b6:fd:6c:1e:a3:5e:bc:0f:b1:4e:3d:30:0a:ad:05:
26:0e:ee:23:23:68:b5:a2:63:31:46:d7:18:ab:93:01:fb:0c:
f7:d0:a5:13:e7:91:77:01:d1:ef:66:58:ab:8a:08:c2:4f:08:
98:47:20:ec:03:4a:19:fe:a2:44:cc:7e:55:29:02:75:6b:41:
29:00:bd:56:b5:53:93:91:23:a1:33:8b:05:fb:00:7f:8b:d7:
8b:53:ad:6a:b0:92:99:87:dd:5b:46:76:1e:82:0b:65:21:71:
8b:f7:e5:1f:66:31:6d:40:14:6a:f1:d6:cd:98:bb:9b:2a:bb:
67:a6:1d:91:09:b7:f0:a1:4e:b2:9f:06:70:36:2a:c7:83:f8:
38:84:b4:15:51:d7:37:88:d1:50:eb:95:38:9d:cc:e2:2c:a2:
0f:fa:aa:9e:bf:a0:f5:4e:27:0c:5e:23:db:45:6a:64:69:4d:
61:3d:ea:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 10:28:11 2024 by rpki-client on console-fra.rpki-client.org