Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/shOlvE68bkg8D2g30KWQtUaEhTU.roa
File: shOlvE68bkg8D2g30KWQtUaEhTU.roa (raw, json)
Hash identifier: xxIHnICWgBx/UTdLhSt0TrixLhNefxhOo6SzrDO7mL8=
Subject key identifier: B2:13:A5:BC:4E:BC:6E:48:3C:0F:68:37:D0:A5:90:B5:46:84:85:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019127ABEE54700017E7FD25E2D29EBC96BE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/shOlvE68bkg8D2g30KWQtUaEhTU.roa
Signing time: Tue 06 Aug 2024 12:31:04 +0000
ROA not before: Tue 06 Aug 2024 12:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 Aug 2024 20:19:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:ab:ee:54:70:00:17:e7:fd:25:e2:d2:9e:bc:96:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 12:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b213a5bc4ebc6e483c0f6837d0a590b546848535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:77:8d:27:6f:6a:57:b2:a8:d4:e4:05:f0:76:
63:aa:a4:eb:31:36:5a:8a:79:2b:93:f4:58:37:f1:
fd:05:57:e1:48:e0:09:74:73:c2:2a:c4:44:b3:9a:
21:94:2e:a8:d4:c8:e8:b2:30:fa:2f:41:3a:59:07:
39:01:ac:94:0c:b9:f8:7f:eb:e3:0c:4c:28:83:91:
55:71:d7:2e:18:ef:8b:9c:39:52:2b:4b:c6:99:05:
87:de:25:47:62:c6:27:57:2f:77:85:43:a1:6a:73:
36:72:58:db:c8:93:f5:a4:a1:78:fd:74:2c:4e:23:
0b:27:46:88:ce:ac:c7:30:66:21:c0:4f:aa:81:01:
ce:d6:23:dc:2d:c3:60:67:e5:bb:ed:0b:cb:d3:00:
e7:6e:0c:30:cc:4f:9b:38:91:bb:b9:c2:05:3c:d2:
0c:8e:7b:85:8d:ea:e3:16:16:43:8c:34:29:5e:95:
b4:6a:6f:0f:21:68:23:cf:97:27:34:68:3d:e3:95:
7e:3b:a8:1b:2e:2a:92:f3:34:3f:80:eb:b5:a0:84:
97:68:3c:d7:ae:8f:b6:24:37:af:09:a5:ab:28:0a:
25:95:49:e6:c9:0e:ba:d6:24:60:dd:d7:47:1b:40:
39:3f:0e:dc:62:ec:24:eb:ba:87:cd:8a:27:3d:73:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:13:A5:BC:4E:BC:6E:48:3C:0F:68:37:D0:A5:90:B5:46:84:85:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/shOlvE68bkg8D2g30KWQtUaEhTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.167.0-163.5.168.255
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
80:fb:eb:5c:e6:2b:e6:5c:1d:60:8a:bd:c6:19:59:84:e6:01:
05:d4:03:8a:36:3e:ec:7f:fb:bf:8d:16:7f:4a:ac:d2:ee:fc:
49:c1:19:2d:3e:ce:74:3e:56:fd:45:99:ce:f6:dd:87:b1:43:
f9:4f:ba:36:f6:21:03:79:07:f0:f6:f8:80:0c:27:0b:b8:2a:
1b:62:fb:81:8f:17:7f:cd:83:53:8f:35:d3:05:ec:21:7d:78:
95:a2:57:83:24:2a:8e:5a:40:46:22:a2:c2:76:0c:1a:a9:a9:
81:8d:31:4c:93:88:64:01:07:f8:96:71:e5:ed:c7:eb:a1:90:
42:f2:12:e3:28:d6:2f:5d:9c:a3:55:09:aa:40:0d:d2:b2:d0:
70:fb:a3:41:d3:32:b8:95:07:3a:8c:14:b6:59:b9:8a:f7:f1:
32:f7:b1:44:11:2b:84:7d:f5:fc:f0:8d:e0:69:65:53:0f:4d:
08:87:37:08:07:b1:b2:86:5c:d7:69:43:df:61:10:84:e6:bf:
9f:dd:e9:6f:b9:b4:aa:6f:a5:f9:72:84:c2:24:51:f6:86:b7:
33:63:31:46:60:ea:ac:e4:e9:eb:8a:46:4a:f9:2e:85:be:c3:
34:1d:09:a6:7a:df:36:bd:d3:41:b4:34:74:22:35:c1:30:41:
83:d3:ef:b6
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAZEnq+5UcAAX5/0l4tKevJa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQwODA2MTIzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjEzYTViYzRlYmM2ZTQ4M2MwZjY4MzdkMGE1OTBiNTQ2ODQ4NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3eNJ29qV7Ko1OQF8HZjqqTrMTZa
inkrk/RYN/H9BVfhSOAJdHPCKsREs5ohlC6o1MjosjD6L0E6WQc5AayUDLn4f+vj
DEwog5FVcdcuGO+LnDlSK0vGmQWH3iVHYsYnVy93hUOhanM2cljbyJP1pKF4/XQs
TiMLJ0aIzqzHMGYhwE+qgQHO1iPcLcNgZ+W77QvL0wDnbgwwzE+bOJG7ucIFPNIM
jnuFjerjFhZDjDQpXpW0am8PIWgjz5cnNGg945V+O6gbLiqS8zQ/gOu1oISXaDzX
ro+2JDevCaWrKAollUnmyQ661iRg3ddHG0A5Pw7cYuwk67qHzYonPXM0JwIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFLITpbxOvG5IPA9oN9ClkLVGhIU1MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvc2hPbHZFNjhia2c4RDJnMzBLV1F0VWFFaFRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHnBggrBgEFBQcBBwEB/wSB1zCB1DCB0QQCAAEwgcoDBACj
BR4DBACjBTMDBACjBVkwDAMEAaMFbgMEAaMFcAMEAKMFeTAMAwQAowV9AwQAowV+
AwQBowWAAwQAowWGAwQAowWLAwQAowWPAwQAowWSAwQAowWXAwQAowWgMAwDBACj
BacDBACjBagDBACjBbIDBACjBbYDBAGjBbwDBACjBb8DBAGjBcgwDAMEAKMFywME
AKMFzgMEAKMF2jAMAwQAowXfAwQAowXgAwQAowXkAwQAowXoAwQAowXxAwQAowX6
AwQAowX9MA0GCSqGSIb3DQEBCwUAA4IBAQCA++tc5ivmXB1gir3GGVmE5gEF1AOK
Nj7sf/u/jRZ/SqzS7vxJwRktPs50Plb9RZnO9t2HsUP5T7o29iEDeQfw9viADCcL
uCobYvuBjxd/zYNTjzXTBewhfXiVoleDJCqOWkBGIqLCdgwaqamBjTFMk4hkAQf4
lnHl7cfroZBC8hLjKNYvXZyjVQmqQA3SstBw+6NB0zK4lQc6jBS2WbmK9/Ey97FE
ESuEffX88I3gaWVTD00IhzcIB7GyhlzXaUPfYRCE5r+f3elvubSqb6X5coTCJFH2
hrczYzFGYOqs5OnrikZK+S6FvsM0HQmmet82vdNBtDR0IjXBMEGD0++2
-----END CERTIFICATE-----
Generated at Fri Aug 9 22:06:09 2024 by rpki-client on console-ams.rpki-client.org