Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-me9_gYmtXkK0JP1czsv6EgrVmA.roa
File: 1-me9_gYmtXkK0JP1czsv6EgrVmA.roa (raw, json)
Hash identifier: 1Zajkoi1lSa93Z2HYAA7+kyO4kgWLh+XWT3nZJbhs3E=
Subject key identifier: FA:67:BD:FE:06:26:B5:79:0A:D0:93:F5:73:3B:2F:E8:48:2B:56:60
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01883D33CD1499E72CA606D346D5C86689F8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-me9_gYmtXkK0JP1czsv6EgrVmA.roa
Signing time: Sun 21 May 2023 07:26:25 +0000
ROA not before: Sun 21 May 2023 07:26:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:33:cd:14:99:e7:2c:a6:06:d3:46:d5:c8:66:89:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 21 07:26:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa67bdfe0626b5790ad093f5733b2fe8482b5660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:be:18:1e:1f:e8:de:94:7a:2c:3c:c5:29:
39:c1:d6:99:2a:30:3f:81:dc:4f:3e:f5:21:58:93:
77:c3:72:64:5e:0e:b4:b5:57:1a:f3:b6:4f:c4:c2:
ed:af:3f:73:81:b4:c4:24:df:85:b5:26:79:a7:bb:
ca:27:de:a0:8a:81:84:f4:09:8a:ec:af:de:c3:5f:
96:a3:02:f7:51:d3:35:d7:f4:14:5a:44:3a:5c:16:
8f:72:5f:75:c3:aa:52:fa:71:69:33:07:53:af:1b:
ed:86:fc:95:7d:35:81:00:b4:41:c7:06:1a:48:51:
3d:79:20:53:bd:76:41:49:fa:fb:08:c7:c7:54:a1:
7b:4e:b3:53:eb:85:ce:2b:e5:8c:b2:79:59:1f:e3:
ea:c4:28:5a:05:3c:f8:28:b1:7e:09:79:ec:6d:2a:
af:0d:36:9d:0c:42:99:8d:8b:14:fa:52:8c:28:8c:
50:44:e3:56:3f:b6:91:e6:e3:79:aa:27:43:15:59:
55:1b:9e:93:4b:04:8d:40:3e:1c:dd:a6:d3:8d:a1:
c3:ca:b7:01:22:d1:99:9a:6d:e0:10:c1:42:b9:16:
af:4a:0c:03:32:79:67:07:8a:9c:84:41:5e:34:ff:
86:1f:d6:f6:45:99:af:c9:4a:21:bf:85:bf:a8:a7:
ca:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:BD:FE:06:26:B5:79:0A:D0:93:F5:73:3B:2F:E8:48:2B:56:60
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-me9_gYmtXkK0JP1czsv6EgrVmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.35.0/24
163.5.61.0-163.5.62.255
163.5.86.0/23
163.5.99.0/24
163.5.107.0/24
163.5.109.0/24
163.5.117.0/24
163.5.127.0/24
163.5.130.0/24
163.5.132.0/23
163.5.136.0/24
163.5.138.0/24
163.5.145.0/24
163.5.149.0/24
163.5.161.0/24
163.5.166.0/24
163.5.198.0/24
163.5.202.0/24
163.5.210.0/23
163.5.216.0/24
163.5.221.0-163.5.223.255
163.5.226.0/23
163.5.230.0/24
163.5.240.0/24
163.5.248.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3c:7e:ec:f1:0a:98:f8:c7:69:ec:38:0a:f9:68:0f:7d:d6:
43:fe:92:6c:a5:b7:74:a0:40:fa:c9:4e:a1:8d:ce:8f:db:7e:
cc:38:0a:ba:d1:d9:54:e6:34:d3:13:9d:e6:6b:d1:5d:ca:61:
18:3f:8d:4b:be:83:ca:89:6f:06:4c:ba:04:60:eb:f3:02:a8:
ce:c1:0b:90:4e:5f:c3:6a:5a:bb:c3:23:31:e5:c6:1f:2e:d5:
0b:34:63:97:b9:16:22:87:ee:37:aa:48:cc:4b:14:db:05:c0:
3b:b9:a1:d9:37:c8:01:41:fe:88:3f:78:d5:d5:cd:01:71:24:
c8:39:fb:b5:23:93:26:1c:65:a2:5c:14:6a:f3:f5:72:64:68:
36:ac:76:9d:fd:30:05:a7:fd:77:b1:96:a8:c5:9f:de:f8:6d:
9f:23:85:4c:ac:37:ff:e6:1d:98:16:75:f2:58:b9:fa:f8:6b:
c1:8a:d7:7f:31:8b:a9:62:ce:2e:c5:74:38:80:77:90:bf:12:
57:07:13:02:f4:09:d1:fd:5c:57:75:ef:4e:ed:9b:22:64:33:
75:c1:58:89:52:18:cb:94:71:7a:20:a5:f9:46:b4:a8:f4:b9:
34:28:76:91:73:7b:5a:d8:af:f7:28:78:ef:7b:33:d4:72:5a:
09:98:61:7a
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAYg9M80UmecspgbTRtXIZon4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNTIxMDcyNjI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTY3YmRmZTA2MjZiNTc5MGFkMDkzZjU3MzNiMmZlODQ4MmI1NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn6+GB4f6N6Ueiw8xSk5wdaZKjA/
gdxPPvUhWJN3w3JkXg60tVca87ZPxMLtrz9zgbTEJN+FtSZ5p7vKJ96gioGE9AmK
7K/ew1+WowL3UdM11/QUWkQ6XBaPcl91w6pS+nFpMwdTrxvthvyVfTWBALRBxwYa
SFE9eSBTvXZBSfr7CMfHVKF7TrNT64XOK+WMsnlZH+PqxChaBTz4KLF+CXnsbSqv
DTadDEKZjYsU+lKMKIxQRONWP7aR5uN5qidDFVlVG56TSwSNQD4c3abTjaHDyrcB
ItGZmm3gEMFCuRavSgwDMnlnB4qchEFeNP+GH9b2RZmvyUohv4W/qKfKwQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFPpnvf4GJrV5CtCT9XM7L+hIK1ZgMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMS1tZTlfZ1ltdFhrSzBKUDFjenN2NkVnclZtQS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw
MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCBzwYIKwYBBQUHAQcBAf8Egb8wgbwwgbkEAgABMIGyAwQA
owUfAwQAowUjMAwDBACjBT0DBACjBT4DBAGjBVYDBACjBWMDBACjBWsDBACjBW0D
BACjBXUDBACjBX8DBACjBYIDBAGjBYQDBACjBYgDBACjBYoDBACjBZEDBACjBZUD
BACjBaEDBACjBaYDBACjBcYDBACjBcoDBAGjBdIDBACjBdgwDAMEAKMF3QMEBaMF
wAMEAaMF4gMEAKMF5gMEAKMF8AMEAKMF+AMEAKMF/jANBgkqhkiG9w0BAQsFAAOC
AQEATzx+7PEKmPjHaew4CvloD33WQ/6SbKW3dKBA+slOoY3Oj9t+zDgKutHZVOY0
0xOd5mvRXcphGD+NS76DyolvBky6BGDr8wKozsELkE5fw2pau8MjMeXGHy7VCzRj
l7kWIofuN6pIzEsU2wXAO7mh2TfIAUH+iD941dXNAXEkyDn7tSOTJhxlolwUavP1
cmRoNqx2nf0wBaf9d7GWqMWf3vhtnyOFTKw3/+YdmBZ18li5+vhrwYrXfzGLqWLO
LsV0OIB3kL8SVwcTAvQJ0f1cV3XvTu2bImQzdcFYiVIYy5RxeiCl+Ua0qPS5NCh2
kXN7Wtiv9yh473sz1HJaCZhheg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org