Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yNE2BWYvJekx8cTA0vSK_GWo9nY.roa
File: yNE2BWYvJekx8cTA0vSK_GWo9nY.roa (raw, json)
Hash identifier: c0i7Vm1A48x0JGRgeUS6FC3xYmm6npNvEh+lBTaW3q4=
Subject key identifier: C8:D1:36:05:66:2F:25:E9:31:F1:C4:C0:D2:F4:8A:FC:65:A8:F6:76
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0191E1F0038519FE689DF2578D111BC8F077
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yNE2BWYvJekx8cTA0vSK_GWo9nY.roa
Signing time: Wed 11 Sep 2024 16:34:48 +0000
ROA not before: Wed 11 Sep 2024 16:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 15:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:f0:03:85:19:fe:68:9d:f2:57:8d:11:1b:c8:f0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 11 16:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d13605662f25e931f1c4c0d2f48afc65a8f676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:c9:1c:29:4e:e1:63:01:d7:e8:58:04:67:
06:8a:e4:1e:f7:21:0f:3a:91:ab:cf:a3:37:0a:43:
85:ae:0e:7d:fd:a7:73:c1:63:e3:4d:68:4b:86:04:
91:52:77:02:89:7c:38:1a:fc:17:98:00:67:a8:f8:
8b:81:43:db:f6:3d:02:7f:b4:55:67:bf:15:61:a6:
bc:7f:67:3a:b1:0e:c8:3f:b1:0b:40:fd:4f:cd:17:
1b:c8:d7:61:89:4a:cb:f2:59:01:d0:bd:e7:4f:22:
c4:5a:5a:98:56:c3:24:43:d9:00:1d:61:b7:fc:d4:
3d:dc:b2:0f:c0:96:3c:83:7b:d8:21:34:46:83:71:
9d:a7:31:fe:ae:92:30:c1:1b:16:20:e4:80:b1:c5:
22:80:6e:42:a5:5e:83:86:d2:7f:8a:63:6c:e3:d3:
b8:20:94:e5:22:63:33:5d:4c:4f:76:a2:ae:ed:b8:
0e:0d:65:0d:fe:71:95:26:45:79:da:97:17:f3:22:
24:bf:b8:a6:d8:60:93:ea:d1:a2:08:2b:04:48:ae:
0a:1e:bd:f1:bb:3e:c1:65:ba:c9:82:e7:0b:50:f9:
f0:5f:35:20:98:66:17:f1:2f:4a:2d:3f:30:d1:3d:
31:34:36:ef:24:95:91:46:9b:f1:d0:a6:78:7f:1d:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D1:36:05:66:2F:25:E9:31:F1:C4:C0:D2:F4:8A:FC:65:A8:F6:76
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/yNE2BWYvJekx8cTA0vSK_GWo9nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/23
163.5.59.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.118.0/23
163.5.121.0/24
163.5.126.0/24
163.5.128.0/23
163.5.132.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/23
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.211.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/24
163.5.228.0/24
163.5.230.0/24
163.5.241.0/24
163.5.244.0/23
163.5.247.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
56:72:5d:a6:c8:e0:d1:eb:92:08:3c:5b:f9:4f:d2:8d:9a:8a:
7e:54:a9:20:cc:5b:c2:a2:0b:7a:fc:c7:0f:77:34:d5:6f:69:
62:43:22:dd:64:c4:9d:80:70:13:65:f2:3c:5a:ba:a2:8e:3f:
75:2b:f3:b6:40:88:46:9f:e0:48:6f:2c:34:c1:9c:c3:03:87:
f6:de:b6:a8:c2:22:b3:f6:46:bf:db:ee:68:c0:ee:ad:1b:cc:
1c:8b:64:e6:b8:7b:07:32:0b:2c:2a:20:24:48:2e:ae:61:72:
bd:7c:21:19:38:0f:ab:1d:49:cd:de:3b:f1:20:d7:6f:8b:23:
68:94:d0:3f:ba:78:40:aa:bf:9c:55:0d:42:4c:cb:5f:c8:76:
d0:2d:f3:7f:bd:fe:f6:79:91:1a:c8:1e:99:66:9f:77:ee:68:
5c:89:e1:75:06:4b:42:36:d2:25:b5:6d:83:78:09:92:3e:60:
09:e7:0d:82:79:76:a7:d1:a4:59:1c:9f:89:0f:e1:83:43:47:
a8:1e:4e:a2:93:fd:fe:e6:30:bf:95:08:62:3f:da:7b:fc:d5:
64:7b:f8:60:c1:0d:09:fe:c2:b1:e8:4a:e9:80:d8:3d:5c:57:
7d:34:a0:fe:27:fc:81:b8:7d:24:c2:8c:62:c7:c6:d5:b0:44:
78:e8:5a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 18:44:57 2024 by rpki-client on console-ams.rpki-client.org