Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/raE9V6xtqwMex6ggUsL3rhrgcsw.roa
File: raE9V6xtqwMex6ggUsL3rhrgcsw.roa (raw, json)
Hash identifier: T+p4tASOryabelveS8Q+8pF+pTvm10kTzjPV5CgUAjQ=
Subject key identifier: AD:A1:3D:57:AC:6D:AB:03:1E:C7:A8:20:52:C2:F7:AE:1A:E0:72:CC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019256F8A716047AC651900B52F85E0A1F82
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/raE9V6xtqwMex6ggUsL3rhrgcsw.roa
Signing time: Fri 04 Oct 2024 09:59:49 +0000
ROA not before: Fri 04 Oct 2024 09:59:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Oct 2024 14:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:56:f8:a7:16:04:7a:c6:51:90:0b:52:f8:5e:0a:1f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 4 09:59:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ada13d57ac6dab031ec7a82052c2f7ae1ae072cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:e0:f2:b9:eb:ab:73:c5:b8:eb:fd:2b:71:
8b:b8:d4:6b:30:ad:fd:f4:2b:91:8d:50:d0:7a:9e:
41:7b:69:5c:8c:cd:b1:25:b0:d7:c7:71:76:89:09:
29:8e:f1:54:c2:77:05:eb:49:fd:27:d3:dc:b5:dd:
33:86:91:9b:cf:6f:14:f5:f4:ff:25:4a:53:3a:f8:
18:84:6f:b4:79:1b:76:92:eb:37:e0:da:e1:3e:30:
58:a6:fe:c8:4b:85:f4:56:ea:b5:fa:cc:c7:44:e7:
08:3e:d3:8c:82:3d:ec:66:92:f1:6a:13:a6:dd:6f:
2f:d4:a3:d7:7c:95:56:70:89:07:6f:97:3b:b7:be:
ee:94:b3:df:05:1c:7d:fd:27:59:be:3f:22:29:9e:
10:72:3c:1f:92:e7:03:82:ad:e5:ec:1b:1b:86:30:
ed:5f:02:aa:65:31:31:a1:41:0f:16:e2:55:62:29:
d2:7d:22:03:43:da:23:15:53:ec:c1:95:1e:f8:dd:
2d:1b:c8:3c:36:05:d6:62:4b:22:32:23:70:33:4b:
9d:4d:cf:7e:38:90:0d:93:e2:4e:3f:7e:ba:13:30:
b8:d0:d9:25:00:bf:67:59:c0:62:6b:fa:ed:34:7e:
8f:b1:90:bf:1c:3e:08:db:0d:a9:ae:c3:16:50:3f:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:3D:57:AC:6D:AB:03:1E:C7:A8:20:52:C2:F7:AE:1A:E0:72:CC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/raE9V6xtqwMex6ggUsL3rhrgcsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.56.0/24
163.5.58.0/23
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.247.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:fe:17:24:48:42:2e:a8:2d:06:6a:06:b3:13:5b:4e:5d:cb:
41:52:f4:f0:40:79:67:a5:b6:a3:e8:46:dc:44:c5:a0:16:48:
6b:4d:9e:fc:25:d6:62:5e:fa:50:be:ed:25:f0:91:ea:cd:b5:
40:ab:89:19:be:63:08:9e:71:f1:8e:e1:94:e2:ab:2b:3d:cb:
df:12:02:bb:e8:88:78:9e:53:c5:12:4f:15:10:55:bd:4c:52:
8d:b5:5a:87:a4:f2:aa:8a:10:93:d6:14:0b:fe:f2:1f:c4:e7:
25:0d:cd:4e:25:36:6d:c6:71:6b:94:ab:d1:62:65:a8:06:f3:
55:b8:52:0a:05:6a:e4:fc:b7:2d:a6:60:87:c1:4d:4b:f6:42:
fd:e3:78:2f:cd:06:0d:6f:c2:3d:bd:32:69:9a:93:9d:0f:88:
e0:82:f7:5b:69:79:76:c7:eb:a1:7c:57:8d:51:c5:9e:61:0b:
f1:b8:3b:ff:74:78:5b:8e:e3:c4:8c:c9:a3:f7:62:73:9e:01:
7d:85:8d:c1:a6:ea:a5:38:48:b0:bd:f3:89:97:59:2e:51:bb:
aa:a2:63:e0:f6:c0:96:61:2f:25:c7:ce:65:ba:99:13:dc:71:
3a:76:c3:16:51:2f:bb:2d:24:2b:8b:a0:09:c2:7b:41:bd:4a:
6f:0a:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 10 18:39:26 2024 by rpki-client on console-ams.rpki-client.org