Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SrgNC2UFi5yKzNTBDofhcLTbdnY.roa
File: SrgNC2UFi5yKzNTBDofhcLTbdnY.roa (raw, json)
Hash identifier: 6Ns0AIS58DAugPlLldjJMaawHHghTlFXyg4fOf/+Vzo=
Subject key identifier: 4A:B8:0D:0B:65:05:8B:9C:8A:CC:D4:C1:0E:87:E1:70:B4:DB:76:76
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195F2D303793BDB607CBEEC5452CB2EC21E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SrgNC2UFi5yKzNTBDofhcLTbdnY.roa
Signing time: Tue 01 Apr 2025 19:27:49 +0000
ROA not before: Tue 01 Apr 2025 19:27:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Apr 2025 16:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f2:d3:03:79:3b:db:60:7c:be:ec:54:52:cb:2e:c2:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 1 19:27:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ab80d0b65058b9c8accd4c10e87e170b4db7676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:b0:4e:ea:f2:7b:23:9f:01:20:35:cc:d5:
6f:1e:29:20:8b:49:5b:fe:12:04:28:0c:b8:31:b9:
08:b3:ed:00:da:65:9a:32:ea:a1:01:14:0b:c9:ae:
b4:c7:d6:1d:3c:a7:a7:b9:e8:57:c6:c0:d1:aa:52:
83:4e:d9:8f:66:2e:39:18:52:0b:bb:11:b9:61:f4:
2b:cf:f6:84:a7:21:54:50:74:01:e3:08:b3:af:29:
b4:70:58:d4:a1:d9:e2:7b:a3:1b:1b:47:96:a8:09:
3e:04:f5:6c:5a:e2:16:a8:8a:f9:3c:e3:59:42:01:
3c:eb:d0:08:82:0d:2f:10:bd:6d:83:65:d6:f0:37:
04:36:b6:17:46:1e:ba:8c:41:49:91:f0:77:07:a5:
67:ca:9e:60:35:42:cf:80:25:ea:2b:7d:09:93:ff:
ce:e3:8f:e2:1b:61:fc:44:6a:56:a1:41:d6:b2:a4:
32:1a:e2:73:9a:fa:ac:50:f1:7f:76:e5:6f:5e:be:
58:c8:38:95:40:4e:46:52:f4:21:70:42:1e:51:1e:
fb:8c:d1:d9:bf:5f:96:eb:d4:4f:7c:19:52:88:17:
1f:2e:d4:f6:ed:6d:a3:21:9a:a8:8c:e3:ea:d3:eb:
e4:d8:b7:6d:89:53:aa:03:e7:e8:e5:02:ab:ce:52:
79:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B8:0D:0B:65:05:8B:9C:8A:CC:D4:C1:0E:87:E1:70:B4:DB:76:76
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SrgNC2UFi5yKzNTBDofhcLTbdnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/24
163.5.46.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.97.0/24
163.5.112.0/23
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.131.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.156.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/23
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
163.5.246.0-163.5.248.255
Signature Algorithm: sha256WithRSAEncryption
49:de:0f:d4:6d:9d:ec:98:cd:ad:ab:ce:cd:0f:3d:ea:7d:74:
0c:e5:9c:ec:fa:40:25:81:f2:96:3f:f8:b9:1e:e3:88:31:d2:
c1:3e:70:4d:43:cd:04:96:73:3f:bb:15:a8:99:89:f2:1d:24:
d3:89:46:88:f5:6d:e2:40:c6:7d:94:a4:19:f5:f4:a8:d0:ae:
2b:37:da:83:85:fd:c7:23:e6:1a:82:9a:4d:f5:ed:ac:26:5c:
a7:01:b7:37:05:fe:8a:53:87:d4:68:75:68:8a:63:11:68:b9:
d2:0c:56:6b:92:93:1a:11:bf:52:ed:0d:56:37:44:cc:b1:3f:
61:6d:b8:a6:fd:9f:87:0f:f2:b2:1d:e5:d1:b4:bc:14:56:14:
d7:69:fd:78:d6:b9:97:81:ef:ef:8a:e1:6c:74:c0:fb:bc:e1:
c0:30:76:6c:32:ce:aa:7a:9d:79:52:93:89:5b:2a:03:3a:be:
77:e1:d9:e7:06:82:e7:62:ff:ce:60:86:ba:22:25:f3:d7:2e:
40:53:f4:33:e4:cd:9e:64:13:aa:eb:4e:ac:1b:5f:88:ab:51:
8e:8f:8d:77:d3:ea:9f:87:4f:a1:02:69:fe:54:b7:85:c1:12:
4f:85:d4:b2:96:12:89:62:91:a5:10:2a:e6:32:46:c6:b6:bc:
03:40:de:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:21:11 2025 by rpki-client