Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fi22IVjtNiXP9FQxGRKkqYWGLuY.roa
File: Fi22IVjtNiXP9FQxGRKkqYWGLuY.roa (raw, json)
Hash identifier: 2KCk/wis1uxHlqEnE6pcVuwUyOjMTIITHWUk+qgqDlg=
Subject key identifier: 16:2D:B6:21:58:ED:36:25:CF:F4:54:31:19:12:A4:A9:85:86:2E:E6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01968B47587BB55C7128599E41B139A807E7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fi22IVjtNiXP9FQxGRKkqYWGLuY.roa
Signing time: Thu 01 May 2025 09:57:10 +0000
ROA not before: Thu 01 May 2025 09:57:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42831
IP address blocks: 163.5.86.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 May 2025 08:34:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:47:58:7b:b5:5c:71:28:59:9e:41:b1:39:a8:07:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 1 09:57:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=162db62158ed3625cff454311912a4a985862ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:22:f7:14:b0:91:e8:66:cc:bb:70:c6:cb:
39:84:14:83:98:ed:09:c7:87:7c:ad:2b:32:62:6a:
8a:da:52:29:25:a3:6d:f5:be:e6:23:49:23:ce:a3:
3c:74:b9:38:07:01:b0:4c:d5:a4:e6:28:22:b2:14:
82:9d:22:da:7e:ff:6c:66:a6:9f:4d:6f:ba:75:0f:
b0:2a:28:ab:70:fd:48:b5:11:39:c4:cc:5f:e7:8c:
d4:21:20:d0:6e:2c:21:91:68:d9:3c:e9:1f:a4:8d:
e5:84:1b:01:8e:e6:6c:66:12:36:f3:89:04:b0:84:
9c:4b:d1:e0:2a:e7:90:42:2b:d7:3f:fc:76:fa:ab:
f0:49:a7:59:57:df:e8:65:9b:39:8c:05:cb:a6:a1:
c2:d4:36:5a:3e:6a:8a:4e:10:aa:41:10:58:30:34:
5e:40:97:e7:57:3c:5c:4a:00:a0:89:10:16:82:5f:
db:a9:85:b8:67:33:3b:ba:9d:50:07:ad:ed:72:6f:
10:5f:13:ef:fd:7c:1b:ea:d9:97:bd:42:5d:22:98:
56:8b:8b:88:de:ec:f2:ff:b8:10:2f:10:0b:c5:40:
3b:74:85:55:11:45:9c:31:d1:e8:29:0b:26:d5:7f:
ee:23:18:57:d6:59:93:23:28:bf:f0:90:9a:b0:87:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2D:B6:21:58:ED:36:25:CF:F4:54:31:19:12:A4:A9:85:86:2E:E6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fi22IVjtNiXP9FQxGRKkqYWGLuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.86.0/24
163.5.111.0/24
163.5.155.0-163.5.156.255
163.5.175.0/24
163.5.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:f8:77:3d:6d:6c:1d:f6:f9:db:13:a0:47:94:c5:c4:92:55:
77:d7:30:b7:3b:2d:35:87:b2:1f:09:7e:ad:05:e1:2f:0f:75:
34:e2:71:8a:d9:aa:0e:d4:e5:70:2f:30:44:62:03:1a:d7:16:
02:f7:65:e9:92:70:89:14:cb:9f:ff:e8:4d:90:e6:94:fa:45:
a0:12:bd:22:fd:d7:35:30:bf:c7:6c:0c:f0:86:b7:c7:ec:4b:
4e:a1:73:1a:db:b1:87:25:4d:7a:44:ab:45:72:23:8e:fb:a7:
8a:56:f7:51:87:08:90:d4:7c:20:8d:02:b3:41:88:25:fc:b6:
ed:73:76:32:79:fe:c1:3e:02:72:09:a8:ed:e9:16:2f:cc:16:
3a:01:60:99:c9:f4:b3:1b:fb:68:ff:0c:4d:b3:6b:ff:77:88:
35:e8:35:24:93:48:a4:0a:8d:16:70:3a:50:3a:d2:dc:a4:74:
86:48:2c:eb:3c:a9:fb:6f:15:8a:12:aa:11:03:f0:d8:58:96:
f5:33:59:01:be:f6:84:ed:af:d3:09:0d:66:48:99:60:9c:b0:
b5:76:d2:d3:aa:21:3e:22:67:68:67:da:16:7f:6c:7c:32:76:
79:3f:1c:9c:dd:8e:69:2d:1f:97:53:7d:7c:f3:9f:76:d0:6f:
d9:b9:63:c1
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZaLR1h7tVxxKFmeQbE5qAfnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjUwNTAxMDk1NzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjJkYjYyMTU4ZWQzNjI1Y2ZmNDU0MzExOTEyYTRhOTg1ODYyZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEYi9xSwkehmzLtwxss5hBSDmO0J
x4d8rSsyYmqK2lIpJaNt9b7mI0kjzqM8dLk4BwGwTNWk5igishSCnSLafv9sZqaf
TW+6dQ+wKiircP1ItRE5xMxf54zUISDQbiwhkWjZPOkfpI3lhBsBjuZsZhI284kE
sIScS9HgKueQQivXP/x2+qvwSadZV9/oZZs5jAXLpqHC1DZaPmqKThCqQRBYMDRe
QJfnVzxcSgCgiRAWgl/bqYW4ZzM7up1QB63tcm8QXxPv/Xwb6tmXvUJdIphWi4uI
3uzy/7gQLxALxUA7dIVVEUWcMdHoKQsm1X/uIxhX1lmTIyi/8JCasIcuEwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFBYttiFY7TYlz/RUMRkSpKmFhi7mMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRmkyMklWanROaVhQOUZReEdSS2txWVdHTHVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQAowVWAwQA
owVvMAwDBACjBZsDBACjBZwDBACjBa8DBACjBfIwDQYJKoZIhvcNAQELBQADggEB
AKn4dz1tbB32+dsToEeUxcSSVXfXMLc7LTWHsh8Jfq0F4S8PdTTicYrZqg7U5XAv
MERiAxrXFgL3ZemScIkUy5//6E2Q5pT6RaASvSL91zUwv8dsDPCGt8fsS06hcxrb
sYclTXpEq0VyI477p4pW91GHCJDUfCCNArNBiCX8tu1zdjJ5/sE+AnIJqO3pFi/M
FjoBYJnJ9LMb+2j/DE2za/93iDXoNSSTSKQKjRZwOlA60tykdIZILOs8qftvFYoS
qhED8NhYlvUzWQG+9oTtr9MJDWZImWCcsLV20tOqIT4iZ2hn2hZ/bHwydnk/HJzd
jmktH5dTfXzzn3bQb9m5Y8E=
-----END CERTIFICATE-----
Generated at Tue May 6 10:23:01 2025 by rpki-client