Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X4FUJa3XwhsMG3PJJBZ21H5WHCc.roa
File: X4FUJa3XwhsMG3PJJBZ21H5WHCc.roa (raw, json)
Hash identifier: CHYQAKnZJCdrMqzsEXL8oySxQHaPDEg6bLHgv5TYiiM=
Subject key identifier: 5F:81:54:25:AD:D7:C2:1B:0C:1B:73:C9:24:16:76:D4:7E:56:1C:27
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0196C413BF75B00DF0496B6373663E4EF909
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X4FUJa3XwhsMG3PJJBZ21H5WHCc.roa
Signing time: Mon 12 May 2025 10:39:10 +0000
ROA not before: Mon 12 May 2025 10:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 May 2025 16:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:13:bf:75:b0:0d:f0:49:6b:63:73:66:3e:4e:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 12 10:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f815425add7c21b0c1b73c9241676d47e561c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:dc:42:fe:b8:d4:01:05:3c:13:c9:36:32:
80:6d:45:9d:63:8e:ad:c7:c2:ec:a6:cf:3a:f7:17:
44:2e:93:82:73:cc:c0:41:5a:70:d8:67:ac:3e:c7:
b9:73:6c:b7:47:d8:a1:32:ac:0c:2a:12:f7:e1:23:
78:57:b0:1f:bb:a4:c1:ca:9b:89:16:b1:6f:e3:f2:
5a:a5:90:c4:97:58:a9:1d:25:a4:1e:68:ba:98:81:
03:06:d7:26:9f:13:10:53:8a:16:aa:a4:de:bf:d4:
f8:2e:11:9d:72:4c:35:86:19:1a:fe:0a:88:38:6f:
01:c0:9f:cf:41:1b:fa:9c:64:46:ee:2b:9e:81:d0:
3a:f2:52:bc:80:72:67:b9:99:6e:ab:d1:c4:0c:64:
54:0b:3f:83:f8:cf:ce:89:3f:33:d5:47:3f:13:3c:
4b:d2:2c:52:0f:b9:fc:37:7c:08:eb:34:db:43:ac:
26:6e:7a:b3:3e:c5:8a:68:f2:48:40:1f:3d:26:a5:
f8:fd:30:e5:7b:87:36:ed:a4:e9:4d:3c:dc:25:3f:
c9:b6:b5:e6:b8:a8:4f:cb:b9:55:79:39:eb:6c:94:
14:2e:c9:b8:50:60:5a:bd:e5:92:28:ed:61:c6:65:
fd:49:57:8a:79:f7:8f:df:03:57:1a:44:d8:d8:6e:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:81:54:25:AD:D7:C2:1B:0C:1B:73:C9:24:16:76:D4:7E:56:1C:27
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X4FUJa3XwhsMG3PJJBZ21H5WHCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.112.0/23
163.5.119.0/24
163.5.121.0/24
163.5.128.0/23
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.170.0/24
163.5.173.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.230.0/24
163.5.233.0/24
163.5.237.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:29:03:bc:50:87:e1:bf:6b:a0:19:3f:03:e4:02:2a:af:2d:
96:01:b5:45:00:8d:1b:a7:1e:88:2d:5c:cf:d6:db:c7:55:7d:
27:b8:2b:d6:67:a2:c9:b4:f2:9b:4d:e5:e2:73:e9:71:31:d5:
90:5d:61:0d:43:34:89:47:aa:b0:0a:88:3a:76:0d:0c:ac:34:
35:49:44:da:be:07:82:16:9f:33:fd:90:e1:09:64:81:24:24:
8a:6d:f8:2f:ec:12:0c:23:47:24:86:92:13:19:a3:60:54:a3:
04:89:0a:39:22:c7:21:9f:c0:11:24:e8:a7:03:e1:07:2a:c5:
46:3a:9f:ac:e7:d2:a1:a7:22:bf:c8:ce:0b:c2:ad:0b:46:de:
07:52:7f:6f:dd:24:5a:c2:6b:fe:66:25:c3:cd:07:23:e7:7c:
ab:f2:d2:c4:1f:55:e6:4e:38:fc:0a:17:63:61:e4:81:b8:ad:
f1:80:e6:49:b4:13:3f:76:d4:01:a0:79:d2:0b:1b:af:36:0d:
2f:95:cb:e5:6a:9a:9c:6b:42:ad:ca:ae:40:f2:fe:04:bc:48:
22:1e:d4:f7:d1:cd:ae:04:2d:b2:d0:22:c9:97:0a:04:87:45:
9a:e4:f1:05:26:14:fb:96:90:14:31:9b:b5:08:dd:58:2f:c3:
a6:c5:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:34:29 2025 by rpki-client