Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xispixMPCHcdL7jghycpZ2e0FLo.roa
File: xispixMPCHcdL7jghycpZ2e0FLo.roa (raw, json)
Hash identifier: f3IOFX11X8Fj5hKARc4MZanucBogrMM1auodsUYmQ94=
Subject key identifier: C6:2B:29:8B:13:0F:08:77:1D:2F:B8:E0:87:27:29:67:67:B4:14:BA
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0192487BD91BBFA16FBD3FAC73DF8FE90C2F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xispixMPCHcdL7jghycpZ2e0FLo.roa
Signing time: Tue 01 Oct 2024 14:28:48 +0000
ROA not before: Tue 01 Oct 2024 14:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 13:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:7b:d9:1b:bf:a1:6f:bd:3f:ac:73:df:8f:e9:0c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 1 14:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c62b298b130f08771d2fb8e08727296767b414ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9a:2e:54:08:af:fd:48:cf:f5:f9:5f:ca:8d:
04:52:9d:ef:cf:1c:62:27:ef:bb:b0:47:64:c2:c4:
56:03:82:3a:c4:de:41:93:6a:8d:0d:91:ea:5c:59:
2e:bf:47:1b:74:70:65:65:60:3f:9a:8d:89:76:37:
d5:4e:5b:f1:68:01:3f:99:7a:c4:8d:ae:b1:d1:d9:
46:79:ea:5d:0a:67:f2:47:72:6c:34:4f:43:c2:19:
47:3d:38:c5:f4:0d:79:a2:16:a6:54:3c:9a:2c:8e:
95:ce:67:02:18:3a:4f:b0:65:f8:92:3c:6f:c4:d5:
21:c9:2f:29:e5:dc:74:b1:43:5a:b3:6b:3e:af:c9:
4e:20:80:41:ed:8c:ff:6d:a0:07:a8:6c:18:98:44:
c8:1e:96:dc:95:c9:9b:c6:0d:ea:28:b6:ae:4f:9d:
a7:a3:57:42:1e:20:ff:02:8f:ec:13:3c:09:3a:ab:
e3:c6:e5:ad:f3:24:a3:f7:28:96:30:2a:c8:9e:31:
bf:c8:ed:66:a3:39:fb:84:1f:cc:b7:ab:e5:e1:e4:
e0:44:5e:08:5d:78:b5:f1:5d:e8:99:98:39:cb:7d:
40:61:b2:9b:22:34:7b:cc:86:fc:9f:c7:87:e4:3d:
b9:df:50:6c:54:f0:a7:dc:55:0d:26:c3:eb:e4:52:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:29:8B:13:0F:08:77:1D:2F:B8:E0:87:27:29:67:67:B4:14:BA
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xispixMPCHcdL7jghycpZ2e0FLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.58.0/23
163.5.73.0/24
163.5.89.0/24
163.5.92.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.247.0-163.5.248.255
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:63:f7:47:e0:6a:0d:80:b4:82:86:e2:d8:17:33:04:fb:b2:
b6:62:f4:00:7d:3f:5f:a0:1b:e5:90:fe:36:de:17:4b:a8:3c:
c4:ca:4b:7a:6e:b9:2c:92:fc:73:80:df:67:41:10:df:20:0b:
5c:a2:ae:87:cb:60:39:15:0f:3c:dd:1c:e7:3e:86:6b:3f:0e:
23:4c:48:07:c9:26:db:7b:03:5c:2f:ef:8e:65:9d:bf:8a:bc:
cd:1c:4e:3f:ef:d7:bc:2d:0d:7d:00:45:f8:a3:86:2d:2d:3a:
ac:9b:9d:f6:64:fd:40:b7:df:a4:15:e9:17:3e:62:7d:5f:64:
a0:0b:bf:cf:74:1a:49:5a:da:85:8c:20:3c:48:91:19:69:04:
02:3e:0f:79:27:f9:46:b0:d2:20:17:dc:24:11:cd:b7:63:45:
25:34:2e:7e:d0:5b:5c:77:9e:94:e1:7b:68:72:17:a9:a0:2d:
30:3a:74:c0:9a:59:f7:2b:41:7f:7c:8f:c4:90:b3:d6:85:20:
4c:3d:90:37:95:13:0c:80:52:a8:e7:5d:a3:9a:3f:ab:35:03:
53:db:04:9d:a0:0c:ca:2f:c0:62:16:e2:b1:6f:17:a2:e1:68:
f5:bd:fb:b5:95:e4:bd:f9:36:77:76:55:b5:79:a7:0e:32:c5:
bb:41:39:ef
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgISAZJIe9kbv6FvvT+sc9+P6QwvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjQxMDAxMTQyODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjJiMjk4YjEzMGYwODc3MWQyZmI4ZTA4NzI3Mjk2NzY3YjQxNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZouVAiv/UjP9flfyo0EUp3vzxxi
J++7sEdkwsRWA4I6xN5Bk2qNDZHqXFkuv0cbdHBlZWA/mo2JdjfVTlvxaAE/mXrE
ja6x0dlGeepdCmfyR3JsNE9DwhlHPTjF9A15ohamVDyaLI6VzmcCGDpPsGX4kjxv
xNUhyS8p5dx0sUNas2s+r8lOIIBB7Yz/baAHqGwYmETIHpbclcmbxg3qKLauT52n
o1dCHiD/Ao/sEzwJOqvjxuWt8ySj9yiWMCrInjG/yO1mozn7hB/Mt6vl4eTgRF4I
XXi18V3omZg5y31AYbKbIjR7zIb8n8eH5D2531BsVPCn3FUNJsPr5FI1pQIDAQAB
o4IC6DCCAuQwHQYDVR0OBBYEFMYrKYsTDwh3HS+44IcnKWdntBS6MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEveGlzcGl4TVBDSGNkTDdqZ2h5Y3BaMmUwRkxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH9BggrBgEFBQcBBwEB/wSB7TCB6jCB5wQCAAEwgeADBACj
BR4DBAGjBToDBACjBUkDBACjBVkDBACjBVwwDAMEAaMFbgMEAaMFcAMEAaMFdgME
AKMFeQMEAKMFfgMEAaMFgAMEAKMFhAMEAKMFizAMAwQAowWPAwQAowWQAwQAowWS
AwQAowWXAwQAowWgAwQAowWiAwQAowWnAwQAowWtAwQAowWyAwQAowW2AwQBowW8
AwQAowW/AwQBowXIMAwDBACjBcsDBACjBc4DBACjBdoDBACjBeADBACjBeQDBACj
BfEwDAMEAKMF9wMEAKMF+AMEAKMF+gMEAKMF/TANBgkqhkiG9w0BAQsFAAOCAQEA
sGP3R+BqDYC0gobi2BczBPuytmL0AH0/X6Ab5ZD+Nt4XS6g8xMpLem65LJL8c4Df
Z0EQ3yALXKKuh8tgORUPPN0c5z6Gaz8OI0xIB8km23sDXC/vjmWdv4q8zRxOP+/X
vC0NfQBF+KOGLS06rJud9mT9QLffpBXpFz5ifV9koAu/z3QaSVrahYwgPEiRGWkE
Aj4PeSf5RrDSIBfcJBHNt2NFJTQuftBbXHeelOF7aHIXqaAtMDp0wJpZ9ytBf3yP
xJCz1oUgTD2QN5UTDIBSqOddo5o/qzUDU9sEnaAMyi/AYhbisW8XouFo9b37tZXk
vfk2d3ZVtXmnDjLFu0E57w==
-----END CERTIFICATE-----
Generated at Wed Oct 2 17:25:50 2024 by rpki-client on console-ams.rpki-client.org