Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zMc55KKcMNVtfJOmCQDz9tdneCE.roa
File: zMc55KKcMNVtfJOmCQDz9tdneCE.roa (raw, json)
Hash identifier: 0XFg6gnB5EdFqr4XSW3MJvYIe9+9cRUEVas18+WF9Qk=
Subject key identifier: CC:C7:39:E4:A2:9C:30:D5:6D:7C:93:A6:09:00:F3:F6:D7:67:78:21
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01955C1F2690C5E1D85C6F1FDC47EB30E231
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zMc55KKcMNVtfJOmCQDz9tdneCE.roa
Signing time: Mon 03 Mar 2025 13:08:20 +0000
ROA not before: Mon 03 Mar 2025 13:08:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.38.0/23 maxlen: 23
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Mar 2025 15:26:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:1f:26:90:c5:e1:d8:5c:6f:1f:dc:47:eb:30:e2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 3 13:08:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccc739e4a29c30d56d7c93a60900f3f6d7677821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:0d:c8:f9:a4:11:2b:2a:a7:f2:a4:e3:ef:
b2:b5:24:40:2d:26:08:ec:50:43:f2:a2:a3:6d:d8:
24:1a:03:a7:92:7c:c3:0c:41:70:d9:de:8e:75:40:
8d:29:4e:11:af:93:b1:65:9d:7d:01:17:2c:82:da:
a5:4f:ac:ea:6c:a1:ed:70:c7:53:34:f2:ca:e7:ce:
0c:7b:10:f7:57:ff:63:f4:95:6f:c3:b5:4f:99:7e:
71:de:62:f9:2a:a0:e6:fc:bf:82:28:10:fd:39:b6:
d8:f3:0a:01:78:d8:15:c2:2e:2d:1b:91:e7:3f:03:
34:5d:53:57:9f:bb:e7:f5:5d:42:d0:ab:a0:55:da:
41:d8:62:77:02:bf:75:14:ae:3e:46:e7:f7:8c:1a:
62:52:13:4b:fc:f1:44:69:d2:4c:bd:d4:40:55:3d:
27:ae:71:d6:2c:40:7d:8f:69:3d:d4:a9:16:fd:24:
5a:93:d3:a9:2d:fc:4a:0f:d9:2b:06:16:e0:37:49:
71:ba:55:dd:02:7c:04:e0:88:e4:6b:f2:80:1e:9c:
c0:4f:39:ab:e5:89:4e:22:65:b3:97:73:65:d9:1b:
01:59:f8:ac:5f:cf:78:91:93:c4:bb:b8:41:97:97:
dd:82:dc:dd:62:3e:a8:31:3d:83:6f:c2:ff:b1:9d:
ab:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:39:E4:A2:9C:30:D5:6D:7C:93:A6:09:00:F3:F6:D7:67:78:21
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/zMc55KKcMNVtfJOmCQDz9tdneCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.38.0/23
163.5.60.0/24
163.5.63.0/24
163.5.88.0/24
163.5.90.0/24
163.5.93.0/24
163.5.100.0-163.5.102.255
163.5.108.0/23
163.5.114.0/24
163.5.116.0/23
163.5.130.0/24
163.5.147.0/24
163.5.174.0/24
163.5.189.0/24
163.5.192.0/24
163.5.225.0-163.5.228.255
163.5.238.0/24
163.5.240.0/24
163.5.243.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
46:cd:dd:18:a6:6f:76:e0:8f:b8:55:3b:7f:c0:bc:40:34:23:
6d:fc:c4:86:69:70:ff:51:1c:65:a0:bc:57:26:20:89:c3:d6:
3f:52:a6:0a:1e:ea:56:c7:ca:fe:6f:7e:e9:07:83:ad:c9:9c:
81:a4:5f:ef:a5:d7:e5:30:9b:84:da:35:34:c2:41:9e:e8:e9:
bc:4c:5f:77:c0:79:a4:4e:3d:c3:f1:d1:09:10:3a:c9:ea:f8:
9f:e6:63:0c:39:73:e4:58:ff:e1:1d:73:13:2d:7c:dc:72:3f:
35:95:7e:9b:a9:e6:cd:39:42:23:98:3f:1a:99:6f:ef:09:8d:
ee:37:1c:e9:32:9c:ed:db:74:c8:0f:5b:79:ac:29:96:2b:cf:
5d:3e:38:e7:26:fc:a7:f7:25:ab:e4:64:63:44:18:c7:7a:51:
46:3c:9a:72:e0:d9:a2:91:6b:74:fa:ba:04:f4:bf:f4:44:73:
57:62:e8:62:0b:a6:30:94:36:aa:b1:92:d5:70:d9:15:3c:cf:
1b:c5:32:e4:2f:ee:92:79:ff:16:e7:49:ed:5c:21:62:55:ce:
36:83:24:e1:60:29:b0:9f:4d:0a:af:b9:2a:c7:0e:97:f8:cf:
fb:40:4f:3e:25:de:64:2f:e8:bc:a7:8d:fd:a7:34:13:fc:be:
de:73:fb:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgISAZVcHyaQxeHYXG8f3EfrMOIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwMzAzMTMwODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjY2M3MzllNGEyOWMzMGQ1NmQ3YzkzYTYwOTAwZjNmNmQ3Njc3ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3YNyPmkESsqp/Kk4++ytSRALSYI
7FBD8qKjbdgkGgOnknzDDEFw2d6OdUCNKU4Rr5OxZZ19ARcsgtqlT6zqbKHtcMdT
NPLK584MexD3V/9j9JVvw7VPmX5x3mL5KqDm/L+CKBD9ObbY8woBeNgVwi4tG5Hn
PwM0XVNXn7vn9V1C0KugVdpB2GJ3Ar91FK4+Ruf3jBpiUhNL/PFEadJMvdRAVT0n
rnHWLEB9j2k91KkW/SRak9OpLfxKD9krBhbgN0lxulXdAnwE4Ijka/KAHpzATzmr
5YlOImWzl3Nl2RsBWfisX894kZPEu7hBl5fdgtzdYj6oMT2Db8L/sZ2rhwIDAQAB
o4ICkDCCAowwHQYDVR0OBBYEFMzHOeSinDDVbXyTpgkA8/bXZ3ghMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvek1jNTVLS2NNTlZ0ZkpPbUNRRHo5dGRuZUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBAGj
BSYDBACjBTwDBACjBT8DBACjBVgDBACjBVoDBACjBV0wDAMEAqMFZAMEAKMFZgME
AaMFbAMEAKMFcgMEAaMFdAMEAKMFggMEAKMFkwMEAKMFrgMEAKMFvQMEAKMFwDAM
AwQAowXhAwQAowXkAwQAowXuAwQAowXwAwQAowXzAwQAowX2MA0GCSqGSIb3DQEB
CwUAA4IBAQBGzd0Ypm924I+4VTt/wLxANCNt/MSGaXD/URxloLxXJiCJw9Y/UqYK
HupWx8r+b37pB4OtyZyBpF/vpdflMJuE2jU0wkGe6Om8TF93wHmkTj3D8dEJEDrJ
6vif5mMMOXPkWP/hHXMTLXzccj81lX6bqebNOUIjmD8amW/vCY3uNxzpMpzt23TI
D1t5rCmWK89dPjjnJvyn9yWr5GRjRBjHelFGPJpy4NmikWt0+roE9L/0RHNXYuhi
C6YwlDaqsZLVcNkVPM8bxTLkL+6Sef8W50ntXCFiVc42gyThYCmwn00Kr7kqxw6X
+M/7QE8+Jd5kL+i8p439pzQT/L7ec/vI
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:01:39 2025 by rpki-client