Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l1kYmsDE6nI8wUmZ3XfnQQuhw1Y.roa
File: l1kYmsDE6nI8wUmZ3XfnQQuhw1Y.roa (raw, json)
Hash identifier: 4cqtXoT0E4UVbuMdss1ObqdJn71fHmlhOLA8q1wR484=
Subject key identifier: 97:59:18:9A:C0:C4:EA:72:3C:C1:49:99:DD:77:E7:41:0B:A1:C3:56
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0195F762BFF73F6E17D433AC9AC0561F5829
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l1kYmsDE6nI8wUmZ3XfnQQuhw1Y.roa
Signing time: Wed 02 Apr 2025 16:43:18 +0000
ROA not before: Wed 02 Apr 2025 16:43:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 163.5.30.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Apr 2025 15:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f7:62:bf:f7:3f:6e:17:d4:33:ac:9a:c0:56:1f:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 2 16:43:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9759189ac0c4ea723cc14999dd77e7410ba1c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:19:0c:97:bf:f0:2e:f1:36:97:4f:76:e5:d2:
49:73:48:4c:36:97:3f:9c:12:e9:0e:94:f9:ed:c7:
cb:07:bb:5c:81:4f:80:c1:36:5f:e2:5c:1d:7d:0f:
5a:8f:1f:52:a9:a5:5a:da:f1:78:6b:a6:b2:e5:c0:
2b:8b:61:7d:09:ac:b0:cd:24:76:f1:b6:65:19:db:
a4:35:4f:c7:67:a1:e3:9d:0a:e4:fb:9e:4f:19:a7:
3d:6e:a7:92:84:09:29:71:42:27:c8:dd:77:74:f3:
11:71:14:46:fa:7a:9e:1b:8d:ea:f4:c3:7f:e9:d2:
53:f4:bf:37:b0:8f:f1:aa:d8:aa:00:66:2e:e6:2d:
0f:a9:40:2f:88:50:c8:16:8d:f0:7a:d5:45:b6:73:
2e:cc:4e:e4:83:a8:6a:50:7b:a3:ed:a6:af:f2:ae:
d5:e4:a1:a3:75:59:a7:fe:34:80:78:4f:8c:8e:17:
c4:2a:68:b2:0c:21:60:62:c9:fc:7b:8f:03:68:fe:
d4:96:e0:cb:f0:d4:d3:2c:c9:91:ad:89:b4:81:74:
71:94:81:25:cf:23:d7:b9:f2:78:17:a5:99:e3:4a:
24:1e:d9:d0:45:93:e8:73:17:6a:5c:be:57:4c:53:
ae:b4:fd:b8:47:9f:b3:3a:72:19:e1:28:35:3d:72:
c4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:59:18:9A:C0:C4:EA:72:3C:C1:49:99:DD:77:E7:41:0B:A1:C3:56
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/l1kYmsDE6nI8wUmZ3XfnQQuhw1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.34.0/24
163.5.59.0/24
163.5.66.0/24
163.5.73.0/24
163.5.97.0/24
163.5.112.0/23
163.5.118.0/23
163.5.121.0/24
163.5.128.0/23
163.5.131.0/24
163.5.138.0/23
163.5.142.0-163.5.144.255
163.5.146.0/24
163.5.151.0/24
163.5.156.0/24
163.5.158.0/24
163.5.160.0/24
163.5.162.0/24
163.5.164.0/24
163.5.167.0/24
163.5.173.0/24
163.5.175.0/24
163.5.178.0/23
163.5.182.0/24
163.5.186.0/24
163.5.189.0/24
163.5.191.0/24
163.5.200.0/23
163.5.203.0-163.5.206.255
163.5.209.0/24
163.5.216.0/24
163.5.218.0/24
163.5.221.0/24
163.5.224.0/23
163.5.228.0/24
163.5.233.0/24
163.5.241.0/24
163.5.246.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cb:95:f9:d2:3f:d6:bc:86:86:69:75:64:58:ae:c3:7f:11:
c9:c5:9a:df:93:ad:07:39:3d:82:52:e4:38:4e:aa:65:3b:44:
19:5b:f2:c2:6b:79:64:f7:88:ef:ee:f6:25:84:fb:c2:8c:4e:
1c:78:73:d5:b8:37:6a:25:72:04:3a:03:eb:d8:02:01:76:67:
54:5f:4e:96:18:95:6c:2a:8b:b0:e8:5b:f7:7d:19:4a:87:94:
b5:ea:46:a9:e9:4d:91:ad:e9:17:19:a8:ee:fa:a3:31:e5:30:
11:90:a7:c0:0a:30:22:cd:27:f9:5f:ae:11:1f:b4:d5:d1:7c:
59:3d:d1:b3:31:5c:cf:6b:77:21:fc:29:ee:29:1c:03:75:37:
d7:ee:ce:a4:f5:3f:9f:dc:1e:03:9c:86:24:96:55:18:d2:28:
91:f4:9d:35:b4:26:8b:83:ac:51:1a:95:ab:1f:8e:37:44:0d:
3d:c8:7b:90:c0:6f:91:3d:e3:38:5f:97:74:72:da:7e:9b:ce:
66:10:c6:03:ad:b0:0f:a9:45:90:61:63:a3:6b:c0:74:b5:0d:
bf:cd:8d:8e:b0:01:f7:08:9b:e1:2c:f1:f0:9c:ca:43:fd:63:
84:c1:ec:4e:fd:c8:eb:5a:db:02:c0:00:93:8e:ff:e4:f1:44:
ce:af:f5:3f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:10:42 2025 by rpki-client