Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z-dbhAu1iQdIxYNKU4ZBxLO6-1w.roa
File: z-dbhAu1iQdIxYNKU4ZBxLO6-1w.roa (raw, json)
Hash identifier: m9y0WNbACU2PmlmwZaEWOWwCNASq5XBKYLEnmuPc7c0=
Subject key identifier: CF:E7:5B:84:0B:B5:89:07:48:C5:83:4A:53:86:41:C4:B3:BA:FB:5C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196FAE10C4EC90C563E57E6302307560106
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z-dbhAu1iQdIxYNKU4ZBxLO6-1w.roa
Signing time: Fri 23 May 2025 02:02:54 +0000
ROA not before: Fri 23 May 2025 02:02:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 May 2025 12:21:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fa:e1:0c:4e:c9:0c:56:3e:57:e6:30:23:07:56:01:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 23 02:02:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfe75b840bb5890748c5834a538641c4b3bafb5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:8f:3f:49:5c:e2:88:30:8d:5b:74:be:5c:
33:33:37:a8:c7:3e:58:7d:41:6b:fa:b8:ec:e0:1d:
02:61:16:d7:ec:d8:06:b8:e2:b0:44:a2:5f:fe:d8:
b2:ac:62:07:b6:21:42:2d:3d:38:29:fb:c0:dd:a9:
3d:f8:6e:03:85:70:c7:38:10:1d:7e:e1:b5:ce:1b:
43:5e:de:04:2c:48:6e:10:c4:2d:e7:8b:2f:ce:b1:
f4:91:dd:df:cd:dc:7f:dd:8a:44:87:be:54:37:45:
08:9f:0b:38:25:a1:d2:2c:25:bf:4d:dc:a9:1d:ba:
fa:2c:3f:de:98:7e:46:70:f8:1e:f0:dc:ab:38:74:
6e:48:2c:be:ea:71:e4:37:34:1a:03:cd:d9:8c:00:
ee:57:32:96:4f:36:af:d6:4f:fe:12:c8:ff:17:a6:
b0:18:4a:8c:f3:8b:b2:db:ce:c8:c8:ba:b4:c1:72:
f8:0e:4a:96:b3:aa:55:01:ea:5b:59:2f:b0:5a:7c:
11:07:fa:9a:b8:97:1a:a6:9a:f3:d6:54:69:38:e6:
35:eb:50:54:4a:b5:5a:ea:ba:b0:81:02:d3:58:56:
88:c8:e7:b4:27:ce:c2:d8:39:c6:3f:a9:3a:74:a5:
91:a3:6d:d7:78:9f:2f:a3:84:88:ea:e7:7e:38:a4:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:5B:84:0B:B5:89:07:48:C5:83:4A:53:86:41:C4:B3:BA:FB:5C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/z-dbhAu1iQdIxYNKU4ZBxLO6-1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
92:40:18:34:34:83:c0:82:48:1f:d6:17:f1:fd:5e:0f:6e:60:
80:26:71:9a:ef:8d:23:0c:19:b1:02:b0:f0:06:ff:bf:ce:ca:
1d:b4:f6:49:68:0b:b4:0a:09:eb:2f:58:0d:c9:57:cf:aa:65:
75:fd:6f:9a:2a:1e:b4:24:6f:3b:c5:7c:e2:68:2f:29:73:6b:
30:37:a4:9f:be:a2:c4:45:e8:87:bc:04:54:e3:b2:88:d1:0d:
5f:8c:64:01:7d:aa:00:57:14:94:31:df:6b:11:de:86:2f:e3:
9e:aa:7c:bb:c2:0b:66:d4:6b:8d:7c:e7:e9:8b:32:6f:b4:0f:
62:35:fc:ae:c4:0c:e5:ec:11:09:33:63:ce:f5:df:eb:4f:51:
f5:0c:25:4d:66:d3:66:c9:3f:72:62:c5:68:0d:3e:06:1d:40:
13:41:68:6f:0a:c5:7a:52:b5:54:4f:5b:00:e6:85:3e:92:47:
50:cc:e9:10:de:7c:93:9b:99:ec:3d:af:11:52:42:27:4f:40:
71:a8:8b:74:7d:3b:23:6a:b6:83:ac:7f:a5:fb:f0:2f:81:a6:
61:c9:e7:ad:3f:29:1a:e7:53:7c:4a:7f:96:65:ab:9f:eb:81:
76:81:7b:2a:28:6d:21:d5:65:30:77:7a:25:aa:68:77:92:e3:
05:7f:9b:68
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgISAZb64QxOyQxWPlfmMCMHVgEGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNTIzMDIwMjU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZmU3NWI4NDBiYjU4OTA3NDhjNTgzNGE1Mzg2NDFjNGIzYmFmYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIuPP0lc4ogwjVt0vlwzMzeoxz5Y
fUFr+rjs4B0CYRbX7NgGuOKwRKJf/tiyrGIHtiFCLT04KfvA3ak9+G4DhXDHOBAd
fuG1zhtDXt4ELEhuEMQt54svzrH0kd3fzdx/3YpEh75UN0UInws4JaHSLCW/Tdyp
Hbr6LD/emH5GcPge8NyrOHRuSCy+6nHkNzQaA83ZjADuVzKWTzav1k/+Esj/F6aw
GEqM84uy287IyLq0wXL4DkqWs6pVAepbWS+wWnwRB/qauJcapprz1lRpOOY161BU
SrVa6rqwgQLTWFaIyOe0J87C2DnGP6k6dKWRo23XeJ8vo4SI6ud+OKRmWQIDAQAB
o4ICyDCCAsQwHQYDVR0OBBYEFM/nW4QLtYkHSMWDSlOGQcSzuvtcMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvei1kYmhBdTFpUWRJeFlOS1U0WkJ4TE82LTF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHdBggrBgEFBQcBBwEB/wSBzTCByjCBxwQCAAEwgcADBAGj
BR4DBACjBTsDBACjBUIDBACjBUkDBAGjBXADBACjBXcDBACjBXkDBAGjBYADBAGj
BYowDAMEAaMFjgMEAKMFkAMEAKMFkgMEAKMFlwMEAKMFoAMEAKMFogMEAKMFpwME
AKMFrQMEAKMFsgMEAKMFtgMEAKMFugMEAKMFvQMEAaMFyDAMAwQAowXLAwQAowXO
AwQAowXRAwQAowXaAwQAowXdMAwDBACjBd8DBACjBeADBACjBeQDBACjBfEwDQYJ
KoZIhvcNAQELBQADggEBAJJAGDQ0g8CCSB/WF/H9Xg9uYIAmcZrvjSMMGbECsPAG
/7/Oyh209kloC7QKCesvWA3JV8+qZXX9b5oqHrQkbzvFfOJoLylzazA3pJ++osRF
6Ie8BFTjsojRDV+MZAF9qgBXFJQx32sR3oYv456qfLvCC2bUa4185+mLMm+0D2I1
/K7EDOXsEQkzY8713+tPUfUMJU1m02bJP3JixWgNPgYdQBNBaG8KxXpStVRPWwDm
hT6SR1DM6RDefJObmew9rxFSQidPQHGoi3R9OyNqtoOsf6X78C+BpmHJ560/KRrn
U3xKf5Zlq5/rgXaBeyoobSHVZTB3eiWqaHeS4wV/m2g=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:04:39 2025 by rpki-client