Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tXbFJpuQghczzTC0_NJX2D-1uTQ.roa
File: tXbFJpuQghczzTC0_NJX2D-1uTQ.roa (raw, json)
Hash identifier: gByDAwuhrnDouSWiHUMpVS68o/Eo5dQuljjdbfsIucs=
Subject key identifier: B5:76:C5:26:9B:90:82:17:33:CD:30:B4:FC:D2:57:D8:3F:B5:B9:34
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196B3A053AC3516CBD78C3E8FAFD80EAEDB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tXbFJpuQghczzTC0_NJX2D-1uTQ.roa
Signing time: Fri 09 May 2025 05:59:10 +0000
ROA not before: Fri 09 May 2025 05:59:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 09 May 2025 06:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a0:53:ac:35:16:cb:d7:8c:3e:8f:af:d8:0e:ae:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 9 05:59:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b576c5269b90821733cd30b4fcd257d83fb5b934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:be:5a:c5:0e:cb:4d:df:c0:19:6a:73:c9:4c:
98:42:a2:c0:49:91:5c:5c:1e:84:e1:e0:a0:37:cb:
ba:63:38:20:1a:11:a0:d4:fe:31:27:8d:81:fb:82:
2e:d4:a2:8f:7c:d4:a0:76:6e:12:1b:3a:84:85:0a:
33:53:b5:7a:30:75:c2:0d:4f:e7:3e:53:0d:64:26:
73:da:e5:d7:4f:77:45:86:30:65:20:34:f2:54:5b:
66:ef:86:db:ce:6e:2d:67:bd:a3:78:94:86:ad:9b:
2f:ff:ec:5c:e9:50:b4:91:81:2b:33:08:4d:8a:3b:
4f:1d:12:42:ff:b6:a7:a4:04:e9:32:92:f2:3e:56:
08:d4:a9:83:6a:e3:44:08:e5:dc:f7:5c:44:ab:fa:
e9:b7:72:27:22:26:31:f8:71:e8:cb:88:0f:c7:2c:
d1:ad:7e:97:72:6c:db:cf:ec:72:a4:48:be:aa:21:
e7:82:03:81:5f:81:36:28:93:61:86:be:f4:d2:1f:
2b:64:3f:d8:b9:2d:59:68:4a:ee:6b:32:bf:61:f3:
f7:c3:3f:f7:21:7b:da:1b:3d:e1:df:84:5b:dd:82:
70:6f:ee:c5:bd:c7:af:9f:af:41:62:bb:9b:28:64:
82:3d:57:d6:36:14:cd:91:fe:dd:75:c1:09:b8:39:
6b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:76:C5:26:9B:90:82:17:33:CD:30:B4:FC:D2:57:D8:3F:B5:B9:34
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tXbFJpuQghczzTC0_NJX2D-1uTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.184.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b5:a0:f2:0e:a7:8c:18:76:67:d5:bc:be:61:33:e6:2f:4c:
af:16:55:f1:18:ec:50:c1:29:1c:4d:40:42:f8:53:d6:a1:6b:
8c:1a:f3:b8:0b:3e:c7:b4:8a:09:bf:7e:c8:5a:41:8f:74:40:
86:46:2d:e3:a3:b9:fd:ac:ef:ac:51:1f:3b:fe:28:69:95:c6:
89:fe:30:db:1d:fa:32:92:29:68:23:70:70:c9:2d:9e:43:af:
a8:6d:d0:b0:7f:c2:1c:20:89:9a:05:73:c2:d0:8f:ee:87:22:
91:51:21:c9:39:22:99:7e:09:ec:bb:0f:59:70:ed:95:ab:f9:
74:aa:e0:20:0b:93:3a:47:d7:f0:9c:63:eb:e4:3c:95:ae:c7:
94:0c:57:09:cd:75:4f:a8:4a:ab:68:83:20:23:67:96:17:bd:
c0:90:26:0a:81:ca:21:ee:74:98:a3:a7:a0:a2:96:11:df:73:
ac:d9:99:b3:5f:79:6d:c4:22:46:45:eb:86:34:cd:84:51:e6:
13:b3:3f:f0:52:8f:fa:b0:37:1d:c0:08:8d:a0:26:46:f2:4e:
bf:df:af:94:bb:1a:e6:7f:45:91:4d:ed:74:4d:53:8e:d5:8e:
7f:ce:e9:db:c5:f4:62:11:0a:20:f5:2d:f7:18:c2:02:97:d1:
53:89:2b:e6
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAZazoFOsNRbL14w+j6/YDq7bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNTA5MDU1OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTc2YzUyNjliOTA4MjE3MzNjZDMwYjRmY2QyNTdkODNmYjViOTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb5axQ7LTd/AGWpzyUyYQqLASZFc
XB6E4eCgN8u6YzggGhGg1P4xJ42B+4Iu1KKPfNSgdm4SGzqEhQozU7V6MHXCDU/n
PlMNZCZz2uXXT3dFhjBlIDTyVFtm74bbzm4tZ72jeJSGrZsv/+xc6VC0kYErMwhN
ijtPHRJC/7anpATpMpLyPlYI1KmDauNECOXc91xEq/rpt3InIiYx+HHoy4gPxyzR
rX6Xcmzbz+xypEi+qiHnggOBX4E2KJNhhr700h8rZD/YuS1ZaEruazK/YfP3wz/3
IXvaGz3h34Rb3YJwb+7Fvcevn69BYrubKGSCPVfWNhTNkf7ddcEJuDlrrwIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFLV2xSabkIIXM80wtPzSV9g/tbk0MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvdFhiRkpwdVFnaGN6elRDMF9OSlgyRC0xdVRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgfEEAgABMIHqAwQA
owUeAwQAowU7AwQAowVCAwQAowVJAwQBowVwAwQAowV3AwQAowV5AwQBowWAAwQB
owWKMAwDBAGjBY4DBACjBZADBACjBZIDBACjBZcDBACjBaADBACjBaIDBACjBaQD
BACjBacDBACjBaoDBACjBa0DBACjBbIDBACjBbYDBACjBbgDBACjBboDBACjBb0D
BACjBb8DBAGjBcgwDAMEAKMFywMEAKMFzgMEAKMF0QMEAKMF2AMEAKMF2jAMAwQA
owXfAwQAowXgAwQAowXkAwQAowXmAwQAowXpAwQAowXtAwQAowXxMA0GCSqGSIb3
DQEBCwUAA4IBAQBptaDyDqeMGHZn1by+YTPmL0yvFlXxGOxQwSkcTUBC+FPWoWuM
GvO4Cz7HtIoJv37IWkGPdECGRi3jo7n9rO+sUR87/ihplcaJ/jDbHfoykiloI3Bw
yS2eQ6+obdCwf8IcIImaBXPC0I/uhyKRUSHJOSKZfgnsuw9ZcO2Vq/l0quAgC5M6
R9fwnGPr5DyVrseUDFcJzXVPqEqraIMgI2eWF73AkCYKgcoh7nSYo6egopYR33Os
2ZmzX3ltxCJGReuGNM2EUeYTsz/wUo/6sDcdwAiNoCZG8k6/36+Uuxrmf0WRTe10
TVOO1Y5/zunbxfRiEQog9S33GMICl9FTiSvm
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:43:06 2025 by rpki-client