Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2IgHHKdhgmFPFTf4TulJGks72Ew.roa
File: 2IgHHKdhgmFPFTf4TulJGks72Ew.roa (raw, json)
Hash identifier: QIz9cmsXB1b35R2VPSwXAzaYIrNGtuMddQUabazLqJM=
Subject key identifier: D8:88:07:1C:A7:61:82:61:4F:15:37:F8:4E:E9:49:1A:4B:3B:D8:4C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188DF40AAC882E693D623027751E9644210
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2IgHHKdhgmFPFTf4TulJGks72Ew.roa
Signing time: Wed 21 Jun 2023 18:38:57 +0000
ROA not before: Wed 21 Jun 2023 18:38:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:40:aa:c8:82:e6:93:d6:23:02:77:51:e9:64:42:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 21 18:38:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d888071ca76182614f1537f84ee9491a4b3bd84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:db:32:a7:21:77:65:5b:d4:3c:ec:a8:48:
53:b7:88:4d:70:d9:95:d6:ba:0c:80:ed:af:49:dd:
11:83:80:5e:e3:9b:da:8a:cb:90:d1:3f:22:4f:5a:
93:f4:b6:2f:31:12:a3:da:cb:9d:70:00:e0:3d:f9:
6b:87:9f:1b:3e:f9:3f:f7:bd:98:cd:06:08:63:67:
b9:92:3c:86:31:1b:62:75:dc:fc:35:f2:4e:eb:2a:
17:0b:ee:d0:7d:05:16:78:98:79:9e:f5:66:bb:c4:
4b:8a:e7:2e:e0:e5:4a:b9:c1:37:b1:8b:57:bf:8f:
50:a0:bc:07:03:f5:b1:7c:54:a1:0a:ef:c1:27:ab:
50:55:7d:68:ef:60:eb:c4:b8:0a:eb:d8:d9:74:69:
fc:03:a7:cc:61:eb:fe:2b:7b:16:be:55:37:88:6c:
ba:f0:2c:3e:63:e8:ed:11:dc:ba:92:33:84:c0:48:
b5:bb:db:be:d2:36:6b:92:9c:1b:84:e2:b5:a6:ca:
0b:53:20:f7:f5:ad:0d:d9:b2:8d:8b:4c:6f:68:aa:
d6:2d:73:80:68:46:c8:34:67:3c:6d:7c:fd:02:11:
12:2b:da:34:cc:f9:5e:1d:c6:1a:cb:f0:09:17:3a:
0b:ca:96:9e:0c:85:de:a3:95:f5:39:b7:1a:f7:ad:
0f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:07:1C:A7:61:82:61:4F:15:37:F8:4E:E9:49:1A:4B:3B:D8:4C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2IgHHKdhgmFPFTf4TulJGks72Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.123.0/24
163.5.125.0-163.5.128.255
163.5.132.0-163.5.134.255
163.5.138.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.156.0/23
163.5.159.0-163.5.164.255
163.5.167.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
47:30:97:32:ad:ce:53:7d:0d:f1:e3:f8:d2:27:8c:a1:a6:d9:
f9:d4:31:2a:14:11:d6:3c:76:20:57:57:d7:59:99:36:6d:71:
87:a8:94:48:df:50:ff:7f:04:70:64:a5:d0:cc:8a:8c:9d:9e:
36:c5:78:c8:f0:69:15:91:d2:84:1d:30:79:e9:60:2a:fd:87:
1c:a8:9d:6f:63:26:1c:80:b0:3c:e1:56:83:6e:07:79:7b:9c:
0d:90:72:f8:53:c1:7b:ca:01:65:07:cf:52:49:78:85:d3:b1:
94:75:7e:1f:3e:e3:5d:2a:9d:80:3e:6a:ae:e0:01:4e:89:45:
92:1f:ea:8b:15:ae:43:d0:c1:1c:d8:9b:7c:fa:cd:cd:c9:be:
71:b3:a4:2e:d8:a1:72:27:05:a5:d6:cd:2e:09:df:22:8f:c9:
19:2c:21:3c:af:64:72:45:e1:3d:2a:bf:51:bb:3d:d3:3d:1f:
ce:71:21:0d:13:a2:93:9d:74:93:39:38:89:6f:2f:80:62:b6:
90:2c:f8:6d:11:58:ab:16:bf:f1:fb:0f:bb:1a:ac:06:7f:e4:
dd:2c:75:22:b5:9b:a5:1b:71:fb:30:20:22:b3:c0:52:41:ec:
c8:db:ef:86:25:66:fc:ba:e3:22:e5:ae:4d:01:91:6d:04:a9:
3f:a5:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org