Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dGQGLwAWIjfw4up6aJku8fs1ZUI.roa
File: dGQGLwAWIjfw4up6aJku8fs1ZUI.roa (raw, json)
Hash identifier: E33/wUdPOXmRAXa7yUEqqmSlmvUGhtmmQ2oDVtC3n4c=
Subject key identifier: 74:64:06:2F:00:16:22:37:F0:E2:EA:7A:68:99:2E:F1:FB:35:65:42
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01974F0D406D23B6D55BA04DF79AD6950ACB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dGQGLwAWIjfw4up6aJku8fs1ZUI.roa
Signing time: Sun 08 Jun 2025 10:19:17 +0000
ROA not before: Sun 08 Jun 2025 10:19:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Jun 2025 18:36:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:0d:40:6d:23:b6:d5:5b:a0:4d:f7:9a:d6:95:0a:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 8 10:19:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7464062f00162237f0e2ea7a68992ef1fb356542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:30:69:b3:ba:8e:63:45:84:7e:f9:87:11:17:
3d:8f:66:39:18:3b:dd:4d:b7:be:f0:f5:a8:68:23:
11:e8:01:fb:41:4f:5e:6e:67:33:1a:49:b6:a4:53:
c5:d1:27:5f:54:9b:8e:dc:90:2c:f1:ef:2a:31:c6:
fc:2c:7e:5c:d4:97:82:86:e1:db:79:b2:d8:43:ab:
df:58:58:c1:64:31:bb:dc:72:20:9d:53:b5:d4:28:
1a:6e:7a:3d:df:c3:b0:a7:21:75:f5:73:32:24:6c:
f6:54:60:88:9c:30:e7:f9:c2:63:d3:93:17:ce:1a:
92:74:ab:df:73:52:4d:b2:c2:e6:a3:e6:74:d6:3b:
61:a0:9c:67:47:52:99:fc:f2:13:b0:63:39:67:64:
0e:9c:26:5c:4c:f6:61:d2:1c:0b:4b:09:95:9e:70:
84:8c:f7:57:1f:4d:86:99:a7:c2:db:c8:1c:a0:39:
95:f8:49:a3:f5:cc:6f:15:63:4d:69:33:84:89:33:
14:91:07:fb:d9:a8:0d:26:8f:08:9f:df:bb:72:95:
9b:4f:ae:6f:66:37:d4:18:a1:fc:9a:f7:34:6f:79:
f4:1c:59:77:f1:f1:4b:55:bb:45:23:60:6a:a6:ee:
3f:6f:c3:d0:06:39:0f:00:e2:24:83:49:8b:87:cc:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:64:06:2F:00:16:22:37:F0:E2:EA:7A:68:99:2E:F1:FB:35:65:42
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/dGQGLwAWIjfw4up6aJku8fs1ZUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.59.0/24
163.5.109.0/24
163.5.112.0/23
163.5.121.0/24
163.5.128.0/23
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.201.0/24
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.218.0/24
163.5.221.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:46:45:f9:9c:ca:33:c4:5e:40:2e:e4:49:38:92:0e:41:33:
30:81:79:f6:66:28:81:33:40:16:cc:13:b6:4b:e4:60:5a:1c:
f3:43:51:a8:44:10:55:62:48:5d:7c:2f:7d:08:e0:62:d6:2d:
da:cf:dd:c1:d1:eb:d1:11:f9:8d:59:ab:7a:e7:3d:88:f4:7d:
74:06:98:60:31:2d:2c:9d:48:85:31:a9:e6:60:34:8e:6b:10:
95:0b:65:0b:aa:45:4c:62:8d:bc:24:99:80:02:43:55:e0:9d:
28:76:e3:f6:41:f6:a7:04:de:c6:41:95:43:12:3c:e3:aa:22:
61:36:a1:59:98:8a:a1:58:45:3c:d1:4c:38:37:50:1f:78:a1:
82:95:9d:b3:0e:91:26:03:73:34:83:0d:72:1c:10:38:c9:a5:
99:46:a3:40:99:cf:35:7f:57:82:14:89:5f:6b:09:5c:ca:d7:
d1:4c:66:29:3b:b4:38:b5:fb:b2:8a:4c:f1:9d:11:b5:59:4e:
68:bf:90:22:b1:c4:46:b6:a7:5b:57:42:04:85:a9:68:9a:bf:
35:2c:29:21:7c:b8:dd:c3:26:02:b1:55:f2:df:4a:7b:b0:3f:
ac:7e:87:9d:e9:a3:db:bc:f7:db:ae:76:6a:ce:ea:9f:d6:5c:
81:97:1d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:17:57 2025 by rpki-client