Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/44jFxER__LqeY4Oa7TdJYWT4LJQ.roa
File: 44jFxER__LqeY4Oa7TdJYWT4LJQ.roa (raw, json)
Hash identifier: dFt4jSnEokFFQIwThEAO4WTdMgBJZXTC2sxMuJOyV8c=
Subject key identifier: E3:88:C5:C4:44:7F:FC:BA:9E:63:83:9A:ED:37:49:61:64:F8:2C:94
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01967B99AB179DFA14C29F19E486E3F1454E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/44jFxER__LqeY4Oa7TdJYWT4LJQ.roa
Signing time: Mon 28 Apr 2025 08:53:10 +0000
ROA not before: Mon 28 Apr 2025 08:53:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 May 2025 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:99:ab:17:9d:fa:14:c2:9f:19:e4:86:e3:f1:45:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 28 08:53:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e388c5c4447ffcba9e63839aed37496164f82c94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d9:3e:27:cb:ed:f4:f1:57:50:6f:7d:75:15:
eb:95:04:0f:20:f9:91:a0:57:82:cc:83:89:5e:f3:
ad:58:80:13:1f:6c:93:de:fe:cc:cb:f5:71:9c:06:
b6:06:d5:5d:22:54:59:16:04:40:4a:75:d9:d2:3f:
7f:e9:79:6f:96:96:16:bb:d1:7d:62:14:f8:0a:af:
50:de:d6:1f:4b:05:2c:61:96:95:0c:44:61:86:0c:
b5:85:c1:ba:a9:2e:5c:52:e4:b3:3f:c2:35:15:51:
50:e6:04:f9:69:ba:66:82:78:24:39:6b:a9:cc:00:
ca:82:92:ce:85:4b:76:58:71:40:20:09:75:e0:72:
bc:a6:b8:d3:50:89:3e:e8:f3:7b:ce:02:16:e0:a6:
0e:42:44:10:f4:48:6d:8a:58:26:92:16:3c:9c:68:
79:0a:4b:2b:cb:90:1d:01:3c:1c:ae:19:7f:ba:e8:
f2:7d:4e:14:46:44:a5:e8:e3:c3:b8:1f:61:33:ba:
7a:a4:5b:ea:6e:02:1b:7b:3b:82:43:94:1f:90:bf:
9b:1c:37:24:7c:63:d3:a9:a5:cf:d6:ef:d1:bb:45:
2c:7a:27:9b:c9:0b:b0:e3:4d:5c:2f:25:f7:8f:6f:
ae:99:71:af:a8:15:a7:90:71:fd:20:d6:e1:a1:6e:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:C5:C4:44:7F:FC:BA:9E:63:83:9A:ED:37:49:61:64:F8:2C:94
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/44jFxER__LqeY4Oa7TdJYWT4LJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.133.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/24
163.5.182.0/24
163.5.184.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
29:00:a8:3f:cc:6b:47:b1:2f:a2:18:1e:e5:d6:f5:4a:fc:36:
13:19:5a:1b:6a:b4:76:6d:b1:ed:c1:d8:0b:ce:55:36:06:54:
5e:b2:7a:f9:83:c3:b5:ea:9c:c8:e1:cc:12:da:84:f0:28:09:
e6:e6:36:15:6a:b2:83:3d:79:14:83:4c:6b:46:a4:e1:ba:5d:
44:4f:e3:55:b1:f2:fb:d1:8e:40:ee:c6:17:8f:71:a4:a0:90:
a7:b9:83:fc:50:da:42:5c:49:2b:eb:c7:41:07:41:bc:a2:7d:
c8:40:53:74:36:fb:3e:19:fd:a5:f7:a2:83:2d:6b:15:fb:a9:
e8:b8:79:5f:ea:a8:b9:6c:5b:d2:a9:55:da:92:0f:f2:77:20:
8e:a6:0e:b2:a4:69:a6:14:eb:e5:55:95:64:1d:f4:84:7b:87:
e9:92:00:98:85:f3:4f:13:22:a9:e8:f3:2d:61:dc:33:27:e3:
c2:50:71:a0:5b:69:36:39:38:fc:5e:4a:3a:ef:b2:56:a0:bf:
be:78:ab:3c:11:4e:47:16:0e:8f:e4:c4:d8:41:25:37:80:c3:
86:56:3d:a6:94:d7:be:cd:2b:c4:c2:66:68:da:89:70:93:bc:
9e:f7:17:65:e1:2d:01:7a:e9:b2:94:12:ae:a3:a4:d6:30:5c:
b4:59:7d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:19 2025 by rpki-client