Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-owTrNnovP74znM5K6Q0PkvYH5A.roa
File: 1-owTrNnovP74znM5K6Q0PkvYH5A.roa (raw, json)
Hash identifier: JM+Bi+lEsR0hzJ+unvfLiXWVnlUxi9qZfFCBts1NQ8c=
Subject key identifier: FA:8C:13:AC:D9:E8:BC:FE:F8:CE:73:39:2B:A4:34:3E:4B:D8:1F:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B96CB1F7926A323C6B4444CCD9B0EAE95
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-owTrNnovP74znM5K6Q0PkvYH5A.roa
Signing time: Fri 03 Nov 2023 20:06:16 +0000
ROA not before: Fri 03 Nov 2023 20:06:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:96:cb:1f:79:26:a3:23:c6:b4:44:4c:cd:9b:0e:ae:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 3 20:06:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa8c13acd9e8bcfef8ce73392ba4343e4bd81f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:61:cb:52:c8:e8:48:e7:0b:88:a9:01:78:
c1:0a:92:49:66:3e:af:ea:50:99:f7:5d:cc:13:4d:
f5:9e:87:30:f6:7c:34:04:1c:0a:e9:fe:87:d4:5b:
e4:ec:e9:36:a9:67:54:94:f1:fe:30:b4:0a:e3:bd:
7f:ac:8a:65:cf:99:8b:b9:54:47:da:e6:66:c1:a6:
5a:5d:ac:95:fb:fe:e0:c9:a0:38:f1:6a:50:50:7e:
32:dd:b5:c5:c1:b8:75:14:1b:af:33:37:67:33:26:
6d:68:81:f6:04:25:c6:f4:d5:b0:87:9e:a6:9c:9e:
d3:03:1c:56:07:11:7e:74:bd:e3:de:25:f2:45:81:
2b:48:c7:3d:f9:7b:81:a0:42:cf:84:71:92:17:56:
fc:88:5e:ae:9c:83:f6:8a:ac:4b:c7:83:6f:b3:d6:
ae:ef:58:2f:55:2c:8a:2a:fc:d6:84:76:ec:5a:f6:
9e:60:58:f8:c6:f6:12:99:2a:f6:a5:9e:fc:6d:68:
0e:1e:87:95:dd:1f:fc:48:7e:3b:ba:f1:3e:a0:68:
40:a5:47:41:7f:b8:27:e1:00:f9:6f:7a:66:30:4c:
b8:9d:81:05:fe:9b:1a:dd:ba:21:df:d9:b2:f1:7c:
64:ba:2e:1a:54:33:f8:d2:f0:3b:cf:ae:4f:ab:29:
6f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8C:13:AC:D9:E8:BC:FE:F8:CE:73:39:2B:A4:34:3E:4B:D8:1F:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-owTrNnovP74znM5K6Q0PkvYH5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.35.0-163.5.36.255
163.5.62.0/24
163.5.76.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.99.0/24
163.5.105.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0/23
163.5.167.0/24
163.5.170.0/24
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.250.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
43:80:5d:14:d6:55:b6:7d:92:48:6b:22:bf:75:c0:73:be:26:
85:5c:d1:d9:93:8b:7c:51:5c:82:4d:fd:8e:dc:c7:38:2f:e9:
b0:33:43:75:65:1b:65:ae:78:ae:98:53:90:2e:9e:89:93:b9:
37:7c:3c:a7:bc:53:10:35:76:e6:92:4f:d2:9b:9c:1d:13:90:
9f:bd:8b:01:6d:2b:ec:5f:9d:ac:94:91:9f:5e:52:cc:31:51:
85:53:19:88:a3:14:cd:aa:c7:f4:57:a7:bf:81:4d:b4:5c:c8:
35:58:27:b0:5b:7b:cf:50:e7:9b:d4:4c:42:21:29:63:80:11:
97:62:f7:a6:65:6d:43:ba:27:e3:c6:df:45:31:b2:51:cf:97:
e1:40:47:4d:2c:5a:17:bc:43:ab:b7:37:d9:22:d5:db:82:e4:
56:e6:b3:af:2b:6e:3a:fb:97:05:10:78:fc:f5:7b:c1:55:cc:
e6:b7:6e:5f:2b:66:90:b3:90:28:58:c6:c8:58:b9:d6:4d:d3:
eb:52:35:99:3a:01:68:7f:8f:a2:bb:61:a1:e1:37:99:c3:2a:
25:4c:a6:78:3e:ff:ee:17:7e:54:de:c0:ee:fe:b0:9d:be:49:
0b:3c:0e:73:61:bc:42:ce:23:34:14:6e:ea:f2:9c:84:55:49:
6c:9e:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 21:02:45 2023 by rpki-client on console-ams.rpki-client.org