Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jEGxxoeGVykm-p5kXl5uJcW7KWc.roa
File: jEGxxoeGVykm-p5kXl5uJcW7KWc.roa (raw, json)
Hash identifier: wN190K+1emHf9nx2J4+1Oxl+y/jbC/Y5DMomPugrs6g=
Subject key identifier: 8C:41:B1:C6:87:86:57:29:26:FA:9E:64:5E:5E:6E:25:C5:BB:29:67
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019127A75B2225F4A5FA92C1E7A9BFD733E7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jEGxxoeGVykm-p5kXl5uJcW7KWc.roa
Signing time: Tue 06 Aug 2024 12:26:04 +0000
ROA not before: Tue 06 Aug 2024 12:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 12:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:a7:5b:22:25:f4:a5:fa:92:c1:e7:a9:bf:d7:33:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 12:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c41b1c68786572926fa9e645e5e6e25c5bb2967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4a:b6:fc:65:b5:b7:12:00:16:df:54:08:92:
b1:6c:09:71:d7:9e:d6:f6:58:ba:70:f9:57:09:e9:
4f:57:eb:78:a3:0f:63:33:40:d7:0c:cd:20:a2:8a:
f0:22:c4:96:39:db:bf:51:ee:e9:fd:01:fa:05:7b:
95:44:6f:f2:fb:a8:30:f6:dd:78:da:6c:8d:12:4a:
5a:97:df:b1:7c:78:1e:40:cd:57:1b:4c:6d:89:e4:
4b:f4:f1:61:f8:d3:fb:95:bb:41:b9:3c:8a:ad:a9:
4f:b8:ef:85:d6:9c:f9:18:9c:e6:ea:7e:5c:ac:e7:
09:05:c2:28:02:0f:d9:34:7c:e9:e9:d2:2d:68:68:
03:31:58:64:b3:5d:61:4b:30:98:01:6a:11:ef:f2:
95:1e:7e:c8:56:da:51:7d:21:a2:d5:38:fc:7e:31:
de:ba:fc:88:5d:e5:ee:18:4f:12:93:65:06:01:c1:
5c:d8:dc:87:8f:da:de:e7:0d:b9:97:04:a6:6f:42:
8b:be:b7:d9:ee:cf:3b:e1:44:ae:8d:73:cb:a1:ba:
ff:b6:b4:66:ca:44:2d:68:eb:7a:1e:22:2e:3d:3a:
bf:79:51:83:cb:c6:d0:62:40:99:93:b1:2a:92:c3:
66:8d:18:c0:0a:f1:bc:d1:16:7f:22:b5:b9:db:7f:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:41:B1:C6:87:86:57:29:26:FA:9E:64:5E:5E:6E:25:C5:BB:29:67
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jEGxxoeGVykm-p5kXl5uJcW7KWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.51.0/24
163.5.89.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.125.0-163.5.126.255
163.5.128.0/23
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.151.0/24
163.5.160.0/24
163.5.162.0/24
163.5.167.0/24
163.5.178.0/24
163.5.182.0/24
163.5.188.0/23
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.218.0/24
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
93:14:73:19:d5:d3:f9:dd:e0:4a:a7:7d:86:78:7c:06:91:bb:
b0:af:87:92:72:55:8a:31:af:00:c0:42:58:ce:d5:6d:28:56:
8f:b1:30:f5:50:76:74:65:c9:93:4e:f5:61:ce:9d:45:b1:b8:
8f:07:f7:38:07:89:9a:bc:7c:b6:6a:01:20:eb:48:f9:b9:f0:
96:2f:86:aa:a3:2b:c9:18:cc:f2:e8:e8:86:8b:57:45:9f:47:
28:32:dc:9c:5b:b2:8c:ee:10:c7:23:84:61:0e:c6:01:88:c8:
ea:6f:23:16:e7:27:78:31:20:fb:e1:7a:0c:05:27:79:bf:0c:
29:9a:cf:3b:84:89:15:07:f0:79:35:f3:51:92:fe:b9:91:7d:
23:8a:81:04:f4:1d:88:dd:0f:98:9a:84:84:0b:99:90:ac:53:
3f:39:0c:4e:89:3d:5e:28:f1:e9:80:21:2e:7a:30:7a:08:bf:
00:8b:d5:95:9a:29:cb:d5:5a:1b:8b:a0:69:c2:58:80:f1:87:
7e:9b:c1:10:7d:28:2c:1b:5b:2a:80:76:60:25:cc:e3:12:c5:
90:d3:2f:38:90:d5:43:37:f6:3f:f1:5a:29:56:1c:73:1d:72:
09:9a:99:02:94:c1:eb:21:7e:b0:a6:f7:ff:10:0f:3f:5d:de:
75:6d:e0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:54 2025 by rpki-client