Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2JJMWLUgx89Pl58FyX_yp9WFyII.roa
File: 2JJMWLUgx89Pl58FyX_yp9WFyII.roa (raw, json)
Hash identifier: 342ggq+qHFrQdxJQkrtHII1HmEHFn7Iv3DCGQLnRAMc=
Subject key identifier: D8:92:4C:58:B5:20:C7:CF:4F:97:9F:05:C9:7F:F2:A7:D5:85:C8:82
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189B688AEB19A05B0BCDF139B4865E6B3AA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2JJMWLUgx89Pl58FyX_yp9WFyII.roa
Signing time: Wed 02 Aug 2023 13:55:58 +0000
ROA not before: Wed 02 Aug 2023 13:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:88:ae:b1:9a:05:b0:bc:df:13:9b:48:65:e6:b3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 2 13:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8924c58b520c7cf4f979f05c97ff2a7d585c882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0c:c7:46:ad:0e:36:e3:47:c8:a1:b6:58:a3:
0b:3f:13:5b:89:80:05:d0:eb:51:ee:b9:a6:02:4d:
9c:af:69:0b:e7:a2:79:74:d8:0e:01:5f:2b:35:36:
00:39:ab:ad:d4:f2:da:86:f5:1c:70:e5:33:8b:19:
1f:98:f8:69:9f:e1:a0:10:04:dc:c6:9b:77:29:16:
e3:e9:28:bc:8b:a4:2c:a8:e9:c1:02:9d:f8:d0:15:
93:5e:45:a7:9b:74:99:d9:d5:6d:0e:1b:0a:8d:0e:
f7:fc:3b:33:c2:09:ff:c1:70:41:d8:3a:86:3f:48:
b0:3b:bd:f5:55:26:d3:5d:e3:27:51:7b:d0:90:4e:
1a:a0:48:17:4d:44:f2:67:ac:ba:4d:6a:13:ed:8f:
fa:4c:b3:ca:de:49:6d:ec:14:f1:32:b8:f3:60:c9:
ee:80:48:bd:7f:bc:45:f2:4b:86:1c:d9:b6:ed:27:
d6:8d:a2:1e:3a:a1:1b:59:59:86:10:49:39:e0:8a:
21:4c:a7:51:e0:ff:76:c8:da:ec:ff:f1:dd:2e:0b:
39:91:e9:2f:e7:99:bb:54:11:06:ca:29:07:97:3d:
a0:37:f8:e3:e3:e7:6b:25:63:74:e7:9c:f0:c8:5c:
ac:fb:cd:87:25:43:30:12:82:27:67:47:f7:d8:ee:
a3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:92:4C:58:B5:20:C7:CF:4F:97:9F:05:C9:7F:F2:A7:D5:85:C8:82
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/2JJMWLUgx89Pl58FyX_yp9WFyII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.59.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.124.0-163.5.126.255
163.5.128.0/24
163.5.133.0-163.5.134.255
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
29:32:d2:00:4d:85:9f:30:99:8f:bb:43:96:1d:10:08:ee:71:
06:c5:61:fc:a3:6b:03:3b:27:90:4c:55:6c:45:9d:4e:ea:d7:
0d:8a:89:5d:bd:93:f8:20:a5:53:15:fc:81:e9:ce:6f:2a:c3:
b2:bc:8e:0b:ce:58:ed:44:39:17:6a:40:77:d1:db:f6:5e:f8:
41:80:57:6d:88:fc:e5:9e:61:de:37:e8:2e:85:ff:fc:d8:6f:
0d:cd:e9:2d:3e:49:19:b7:ba:ed:0c:0b:21:45:12:fa:f6:94:
fb:94:93:be:a5:aa:75:cb:07:53:52:07:e4:96:e9:41:1a:8b:
cd:87:d5:a2:ac:b6:c7:b0:7f:2c:23:6b:f2:f2:e7:43:75:37:
6d:75:00:5e:15:7e:db:15:64:0b:07:e1:e3:77:98:73:a0:ee:
5b:32:0e:92:3b:7d:61:ce:27:81:c5:f3:02:0e:dd:24:40:a2:
53:a9:48:b4:8b:fd:db:26:cc:a0:41:66:78:10:07:ca:91:cf:
0f:42:79:89:a7:43:fb:2d:ca:23:b7:e3:48:29:be:5b:06:ec:
6d:31:fd:7b:be:4b:80:cc:58:bc:2c:3c:4b:81:31:16:75:94:
67:c0:55:11:68:20:e0:32:45:78:59:1b:e5:2b:44:0b:66:14:
d7:27:01:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 11:34:50 2023 by rpki-client on console-ams.rpki-client.org