Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OJGiPTPe19H0q6rzxg18xAcrDWQ.roa
File: OJGiPTPe19H0q6rzxg18xAcrDWQ.roa (raw, json)
Hash identifier: P/Q3ZKl4ZmR/EXEd/IygZ+IAqI0qLSaXIIBMXw5vYFs=
Subject key identifier: 38:91:A2:3D:33:DE:D7:D1:F4:AB:AA:F3:C6:0D:7C:C4:07:2B:0D:64
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196B3A3108157E5F65AF0659EAA68996645
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OJGiPTPe19H0q6rzxg18xAcrDWQ.roa
Signing time: Fri 09 May 2025 06:02:10 +0000
ROA not before: Fri 09 May 2025 06:02:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 May 2025 10:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a3:10:81:57:e5:f6:5a:f0:65:9e:aa:68:99:66:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 9 06:02:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3891a23d33ded7d1f4abaaf3c60d7cc4072b0d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:1b:04:58:a7:0f:af:ba:73:af:ce:39:ef:
5c:76:e7:7f:31:80:f2:21:8a:fe:dd:6f:aa:a1:a6:
e1:fe:f4:c8:99:1a:7c:12:ce:05:47:c7:2f:0a:50:
9a:2c:f1:06:11:20:3f:ac:b8:fd:c7:30:5b:12:b6:
19:1a:c1:7d:07:b8:34:1a:cb:ca:76:38:d9:c7:a3:
e7:01:ae:af:d3:89:6a:e4:1f:26:ec:42:75:ef:e0:
5b:d2:51:83:63:06:88:31:d6:34:65:5f:34:45:70:
81:a7:e6:99:9e:24:5c:4d:c3:e2:03:5e:dd:7b:81:
f0:a5:89:01:c5:67:32:8e:d9:fb:08:3d:ee:81:62:
fd:b5:d6:f4:3a:e9:cb:b6:62:68:0c:d4:8b:b4:9b:
0d:3a:25:0b:83:3f:f4:be:db:29:ea:01:82:ac:7a:
32:e9:66:bc:6d:3e:ff:e8:88:86:ca:59:35:9b:4c:
df:c0:7b:60:8c:c0:c8:69:a9:58:2a:37:82:ca:7e:
37:04:53:9a:a8:bc:f5:d3:17:86:03:b8:35:85:f1:
02:eb:db:8f:87:c5:29:28:4d:b9:f2:22:67:b2:4b:
15:dc:29:c3:0c:bc:20:29:97:50:30:7d:b4:69:1d:
e2:10:a6:1e:6e:4f:7e:81:8b:51:8e:ee:3a:a6:d4:
de:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:91:A2:3D:33:DE:D7:D1:F4:AB:AA:F3:C6:0D:7C:C4:07:2B:0D:64
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/OJGiPTPe19H0q6rzxg18xAcrDWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
11:60:9f:2e:bc:63:81:56:6b:6b:e8:b4:63:cf:0c:ca:38:30:
38:24:fa:c8:54:ca:5d:1b:ce:fd:11:f2:28:51:b1:aa:13:c4:
27:cc:81:b4:97:e9:57:7a:ee:d4:5e:a4:23:bc:0c:01:60:d6:
c2:54:e2:a7:13:70:11:52:ff:f4:0a:0e:2d:19:7e:c2:2f:c2:
8d:a6:17:88:a3:9a:90:97:75:be:0a:46:7d:be:90:a9:dc:9c:
91:43:d1:b0:12:d9:33:70:a6:80:de:5d:14:eb:ab:e9:26:a6:
85:19:2f:43:54:ac:12:a2:81:11:18:e1:10:6a:ef:74:46:84:
e7:84:6b:4f:00:42:16:c4:ed:11:e7:8e:a1:b7:2d:0a:f4:93:
a6:b9:c7:55:92:f8:91:0a:48:cf:db:a8:9b:33:60:11:db:57:
2c:c2:cb:30:13:50:ae:51:e9:fd:3f:79:d8:da:e0:22:62:59:
35:b5:91:87:16:a7:d9:c3:5a:6b:ef:5a:75:d1:e5:8b:36:ce:
ee:35:aa:ea:8f:7f:4d:a2:c2:d4:e8:f8:34:5b:f6:3c:54:73:
4d:ca:64:e7:cf:15:ab:0e:3d:30:3e:7d:95:a6:9d:ba:17:99:
ca:dc:15:b6:bb:eb:6f:6e:a3:03:1f:ef:46:f7:6b:6a:ae:25:
b4:b8:5e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:44:43 2025 by rpki-client