Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1z-m4qgs7oGLR14H2chASTaqpaQ.roa
File: 1z-m4qgs7oGLR14H2chASTaqpaQ.roa (raw, json)
Hash identifier: yt0RNo2+gQFBo0TJG+nhnoWLep5p0OvxFJ+oLOi3vjE=
Subject key identifier: D7:3F:A6:E2:A8:2C:EE:81:8B:47:5E:07:D9:C8:40:49:36:AA:A5:A4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B78794835204538A07DCE626169DC12FD
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1z-m4qgs7oGLR14H2chASTaqpaQ.roa
Signing time: Sat 28 Oct 2023 22:48:16 +0000
ROA not before: Sat 28 Oct 2023 22:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:78:79:48:35:20:45:38:a0:7d:ce:62:61:69:dc:12:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 28 22:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d73fa6e2a82cee818b475e07d9c8404936aaa5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:c0:67:e9:de:c8:92:b4:27:62:ae:28:9f:
b7:ee:f1:c3:ec:88:4f:7e:c9:c0:b8:cd:5a:1a:12:
22:c2:39:cf:63:34:02:6a:12:ad:7f:8b:d1:eb:42:
45:6c:07:39:5a:55:d2:11:61:c4:03:0b:08:e2:5e:
1d:d7:a7:18:c5:53:9a:6e:57:49:2b:fc:57:95:32:
21:ad:47:dd:c5:2f:45:26:0e:15:1b:fd:b6:d5:0b:
48:15:fa:36:40:a8:6c:2b:a7:6a:4a:49:4e:b6:1e:
52:82:01:95:9d:19:b9:e4:63:f7:b2:58:98:1e:1f:
cc:51:2c:c5:24:c5:ba:db:db:4a:02:51:0d:97:81:
11:14:b6:0e:af:4a:1d:4f:e8:34:3a:c2:e9:55:09:
50:c4:ab:3c:4f:3d:52:3f:7c:a5:5f:d5:10:98:dd:
52:eb:94:84:81:1c:df:cd:bc:d2:6f:4d:ee:1f:1b:
55:5c:63:64:e7:f1:58:22:44:da:1f:b3:f9:c3:a9:
9f:ba:6d:3b:0a:9c:8a:f8:58:89:21:40:7e:88:37:
2f:27:b1:c1:2e:2e:ff:d5:2b:20:a1:c7:22:51:1f:
92:4d:3a:67:b4:b0:38:bc:3a:1e:aa:60:a2:ed:80:
82:16:f7:c7:a9:5e:db:67:fc:d1:76:16:8e:13:89:
72:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3F:A6:E2:A8:2C:EE:81:8B:47:5E:07:D9:C8:40:49:36:AA:A5:A4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1z-m4qgs7oGLR14H2chASTaqpaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.37.255
163.5.62.0/24
163.5.66.0/23
163.5.76.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.121.0-163.5.122.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0/23
163.5.165.0/24
163.5.167.0/24
163.5.170.0/24
163.5.172.0/24
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.208.0/24
163.5.217.0-163.5.218.255
163.5.222.0/24
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
89:01:94:57:8b:74:b4:c8:dd:a7:a9:f4:d6:3a:fe:73:8a:c7:
44:87:ec:62:27:9d:c9:39:e9:b0:24:50:7e:0e:37:b3:e6:be:
49:6b:09:20:a9:f9:e8:47:04:c6:dc:14:08:8d:2c:1b:25:2c:
5b:71:32:ee:c0:f5:77:8e:d0:12:fa:82:9f:3a:3c:27:67:17:
92:f8:b8:15:12:82:7d:6e:7d:64:a2:a7:03:87:e9:a3:a8:0b:
b3:c6:23:af:d7:5a:ac:2f:1c:d1:67:56:47:b5:29:d8:d6:5f:
d8:ea:26:a1:15:41:36:30:a0:74:4f:ec:68:fc:a7:b3:06:ef:
dc:d4:ec:c8:81:e2:6f:d5:28:0e:6e:13:54:d9:38:4c:fd:e7:
e7:26:e9:6d:3b:1c:a6:da:5c:dc:65:09:ad:98:4b:b4:15:59:
e6:d0:80:c1:04:4f:40:5c:60:af:c6:b3:47:19:94:67:24:39:
ef:b8:44:4c:28:d2:30:3b:b1:2d:75:4d:40:d3:f4:38:da:9e:
1f:3e:6a:1a:50:c7:00:8f:6c:66:1f:b8:e7:a8:43:73:00:e1:
9c:b8:8b:d8:b0:fd:cc:b9:aa:a4:1d:a6:95:7f:22:b9:7c:02:
25:9e:da:e8:63:2e:70:cc:25:90:53:c7:6c:09:b1:02:51:15:
50:30:e9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 05:12:33 2023 by rpki-client on console-fra.rpki-client.org