Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3TtrGctdNpZ_2OQh7E20LsUjNkE.roa
File: 3TtrGctdNpZ_2OQh7E20LsUjNkE.roa (raw, json)
Hash identifier: 99so22DUgdLN1p7sHDPvJDrVlDFN+ZeHO2O4ffV6OkM=
Subject key identifier: DD:3B:6B:19:CB:5D:36:96:7F:D8:E4:21:EC:4D:B4:2E:C5:23:36:41
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01891751B54CD19F604C3A77B4725178C35E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3TtrGctdNpZ_2OQh7E20LsUjNkE.roa
Signing time: Sun 02 Jul 2023 15:56:18 +0000
ROA not before: Sun 02 Jul 2023 15:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:17:51:b5:4c:d1:9f:60:4c:3a:77:b4:72:51:78:c3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 2 15:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd3b6b19cb5d36967fd8e421ec4db42ec5233641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:4d:b7:61:09:32:8c:c8:63:11:26:bd:fc:
58:a3:fd:fe:11:ca:3b:27:5b:7f:d3:fa:9e:de:6e:
1c:d7:4a:c6:49:b5:5d:3b:91:3c:65:2c:dd:15:0e:
2b:62:32:46:cd:c1:6d:46:9f:e5:af:32:de:bf:68:
70:52:3f:c3:71:6c:e6:68:df:b8:ae:95:fd:e9:71:
60:b6:f5:30:56:5a:6c:a9:5c:8f:be:44:e3:44:7d:
32:68:51:47:7b:07:26:30:1d:92:12:e5:d1:b7:a0:
13:55:eb:04:cc:c3:f5:1e:1d:cd:31:c2:1b:90:02:
10:9a:0b:32:4f:63:93:ff:8c:99:c8:f5:d2:e0:04:
17:6e:14:a9:a6:1f:6e:87:21:ad:0b:61:a1:ad:5f:
a2:9e:12:fb:59:e1:a5:e6:37:d2:34:4c:de:3c:ba:
e0:c1:0f:ac:4e:1a:56:9a:58:4b:b0:30:d3:d9:61:
68:38:35:2b:8a:9e:c2:e5:dd:2e:1f:6d:80:30:bc:
19:5f:0e:1a:b4:8c:6b:49:e9:c0:7f:70:84:96:de:
c3:06:59:26:67:8c:a6:9f:5c:6b:54:d8:df:21:3d:
43:a9:f2:49:80:dd:18:3e:88:48:cb:fb:69:d6:ed:
1c:64:dc:62:c6:b1:7c:6d:70:6a:60:2a:08:ae:fd:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3B:6B:19:CB:5D:36:96:7F:D8:E4:21:EC:4D:B4:2E:C5:23:36:41
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3TtrGctdNpZ_2OQh7E20LsUjNkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/22
163.5.125.0-163.5.128.255
163.5.132.0-163.5.134.255
163.5.137.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.160.0-163.5.165.255
163.5.167.0/24
163.5.169.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.189.255
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.209.0-163.5.210.255
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
10:37:d8:3d:38:c0:ec:8b:ac:dd:c5:47:7d:79:74:a0:89:a6:
28:f2:02:9e:d6:2e:13:c1:22:18:6e:46:14:bd:9e:eb:f4:c4:
d8:cf:5f:83:0c:fb:da:a7:d1:a4:4a:ae:b6:d7:62:ee:dd:12:
ac:78:c6:58:c4:2f:07:66:dd:7f:dc:1c:2f:04:d8:6c:68:dd:
f4:a2:08:eb:a3:84:56:e3:53:85:de:67:13:39:4b:29:23:98:
b2:da:53:4a:16:ec:87:27:08:23:f0:6b:c4:9a:b9:d1:b3:2b:
e8:ef:1b:e0:32:d1:b6:38:32:15:49:cb:e1:8f:01:a9:cd:b0:
d1:8a:ab:e2:79:5c:13:20:b7:c1:a5:2f:a5:67:14:ce:9b:75:
ce:11:ea:a5:69:e7:55:b5:87:57:6d:26:4e:d1:fd:49:67:7f:
66:bf:14:3f:92:ca:b7:20:50:7f:90:e8:92:36:61:84:60:1d:
5d:65:e3:6b:f2:d9:5e:ca:5f:72:60:2a:86:c3:45:bc:d4:5a:
8f:f6:b6:23:26:d9:63:a8:10:50:b5:60:c5:1d:39:63:af:24:
3f:cc:74:c9:7a:2d:f4:24:d2:36:df:02:dc:31:69:d4:00:45:
08:4a:cf:35:1c:b2:cb:8e:4d:94:88:17:0a:54:ba:58:f9:ad:
87:fb:ba:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org