Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-cnoCD_To8eWGZPfMOevW5bl-dM.roa
File: 1-cnoCD_To8eWGZPfMOevW5bl-dM.roa (raw, json)
Hash identifier: xIG5c1G5qA1UvY6L04sBiqohF1hyl2nLJDMam0Ze8zY=
Subject key identifier: F9:C9:E8:08:3F:D3:A3:C7:96:19:93:DF:30:E7:AF:5B:96:E5:F9:D3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189DF6755589C54F76B1256B92D8878813A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-cnoCD_To8eWGZPfMOevW5bl-dM.roa
Signing time: Thu 10 Aug 2023 12:23:58 +0000
ROA not before: Thu 10 Aug 2023 12:23:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:67:55:58:9c:54:f7:6b:12:56:b9:2d:88:78:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 10 12:23:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9c9e8083fd3a3c7961993df30e7af5b96e5f9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:5c:20:10:38:0b:90:cc:55:8f:5a:6d:e5:
84:de:ca:b7:44:00:78:44:33:27:c6:37:25:a2:5e:
71:48:56:1b:e5:e8:8c:b4:99:84:74:b6:c3:a3:1f:
9b:a9:b7:ca:c7:50:38:84:e0:93:e2:39:f0:33:92:
b8:0a:d0:9e:f1:71:c3:1b:06:01:c5:bb:e1:e7:c3:
dc:9b:19:c2:fa:19:7f:b7:26:9c:d1:70:c5:41:ae:
86:de:4a:6b:47:86:db:1a:c8:64:70:52:55:fd:0d:
7c:53:40:5e:34:6e:92:d6:19:47:a2:df:1b:4f:22:
b1:ad:f6:c3:d6:14:3f:b4:8d:e3:ef:e2:c4:a3:89:
47:be:b2:3a:2b:79:cb:32:92:09:cc:bc:76:1c:55:
d9:90:d5:77:5f:c4:b4:52:b3:ee:05:80:dc:9f:b4:
d7:a2:88:68:fd:3d:ca:95:16:21:8b:e5:16:30:60:
4b:fc:d6:dc:40:64:24:25:90:78:b0:d3:b0:86:ab:
91:c8:d3:eb:62:47:a4:c8:4e:5c:5e:bf:8d:7b:a8:
69:e6:ed:06:a6:5d:22:f4:c6:c7:5e:e0:b0:25:e1:
64:55:3d:84:64:e2:81:a6:75:32:5b:34:ee:11:42:
5a:33:eb:38:27:51:26:0d:52:11:3b:13:c0:c2:69:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C9:E8:08:3F:D3:A3:C7:96:19:93:DF:30:E7:AF:5B:96:E5:F9:D3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-cnoCD_To8eWGZPfMOevW5bl-dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.157.255
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/23
163.5.235.0/24
163.5.237.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f7:05:2c:cb:49:71:7b:86:ea:4e:e8:c6:89:ad:48:6e:43:
03:e8:73:e1:bb:7c:f7:e4:3c:bc:08:f5:f6:31:f1:3d:4a:27:
12:90:79:88:a6:4d:a7:6b:c9:b8:42:14:9f:89:98:71:06:ee:
8e:81:00:78:ad:9a:30:e8:a8:8b:78:98:f8:62:49:c2:42:da:
27:5b:04:75:11:18:cb:cf:4d:e5:d9:bc:73:32:e2:1c:d8:ce:
3d:6d:f5:eb:ac:c8:2d:9c:d0:5e:2f:7b:cb:d2:d3:b4:25:e6:
1b:3d:f8:b5:83:9a:48:e4:d5:a5:35:24:f1:7d:31:8c:65:ec:
7f:d3:d7:df:c1:eb:5d:18:c9:83:d7:aa:56:69:b2:dc:a1:f5:
cb:d5:04:06:87:d7:17:af:1b:8b:8b:40:6b:e2:29:68:bf:7b:
83:f9:eb:22:9c:01:b4:a2:bd:39:13:87:b7:fb:cc:fa:5e:60:
e7:34:94:70:df:4c:a3:80:af:e6:fc:49:95:2b:28:44:ee:9b:
f1:d3:a8:47:b8:d2:11:bd:f2:03:ef:f3:08:3e:f3:97:ab:d8:
ee:42:13:47:8a:98:96:ca:94:c1:fe:a9:95:47:be:01:d6:63:
7c:91:c7:11:e5:fe:2c:22:e8:c7:f9:1e:24:11:3c:27:9f:1a:
f4:c4:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 22:00:11 2023 by rpki-client on console-ams.rpki-client.org