Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-X9DqBBgTg0iwUtgIHS-4tBCXc.roa
File: 3-X9DqBBgTg0iwUtgIHS-4tBCXc.roa (raw, json)
Hash identifier: Gh0eqt0XU+ffszUjB7yD6iHQprjQEHftL8W4rUrCiP4=
Subject key identifier: DF:E5:FD:0E:A0:41:81:38:34:8B:05:2D:80:81:D2:FB:8B:41:09:77
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A4D999202EFF464DA760E7A3AEE77B6F8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-X9DqBBgTg0iwUtgIHS-4tBCXc.roa
Signing time: Thu 31 Aug 2023 21:57:04 +0000
ROA not before: Thu 31 Aug 2023 21:57:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:99:92:02:ef:f4:64:da:76:0e:7a:3a:ee:77:b6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 31 21:57:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe5fd0ea0418138348b052d8081d2fb8b410977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:15:ee:2c:80:1b:7c:c5:70:2b:78:91:10:
0b:8a:eb:aa:0f:c1:f7:d6:7d:40:ed:aa:54:82:e4:
a5:df:6b:62:4f:47:94:c8:f1:6a:2b:96:02:fa:25:
80:de:ab:9a:0c:d4:19:b3:5f:11:9a:81:9e:ae:17:
50:aa:21:aa:f1:5d:04:32:9a:4d:d5:a2:90:54:14:
88:a7:7d:6c:13:5b:6f:29:b5:f5:28:eb:ca:25:41:
10:bf:9e:55:e2:d0:e7:d5:f2:52:2c:83:35:1f:5f:
cf:cf:26:1a:a3:ea:54:ed:e8:d7:da:8c:8e:f4:c3:
a3:5d:af:c2:76:48:bb:66:6c:93:eb:54:bc:f7:a8:
e2:21:2d:cd:ed:08:c8:ba:2d:19:b8:24:95:77:b1:
1b:56:de:92:7a:66:31:5e:1a:df:57:89:0d:aa:3f:
2c:91:1e:6f:53:ac:e2:7d:88:ca:4a:1c:34:4f:77:
93:e6:cb:cd:7e:05:eb:ee:c1:25:33:23:93:1f:71:
6d:ad:e7:0b:96:fa:5d:cd:a6:3c:b6:0b:5d:76:05:
a1:b7:4d:6a:49:20:f5:c8:64:67:e2:80:09:c2:44:
6c:ee:f2:c7:b2:45:3c:44:96:73:3a:48:71:44:11:
77:5d:d6:4e:16:bb:90:09:a4:f8:52:8a:05:b0:8a:
01:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:FD:0E:A0:41:81:38:34:8B:05:2D:80:81:D2:FB:8B:41:09:77
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3-X9DqBBgTg0iwUtgIHS-4tBCXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/23
163.5.70.0/23
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/23
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0-163.5.167.255
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0-163.5.233.255
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
86:25:34:4f:38:ab:a5:8f:54:95:25:2f:47:44:96:0c:fd:e0:
69:9f:01:7e:99:e3:2f:7f:67:00:51:bf:62:e8:e5:c2:05:de:
35:81:40:37:e7:37:0e:26:b0:6a:e9:2f:f0:9a:ef:6b:74:38:
7c:29:b9:7c:40:92:c5:be:2c:f5:c9:2e:79:d0:64:39:da:79:
e2:da:3f:80:87:93:dd:11:2b:1f:b2:5b:da:40:45:7c:82:61:
0f:19:51:ca:d3:eb:ab:a7:0c:97:0e:e3:9d:7e:69:53:e6:d0:
ab:9c:15:10:d8:56:a3:c5:aa:b5:fc:fe:be:82:57:fc:4d:33:
5b:4c:7a:6f:c1:35:44:22:fe:50:47:0e:44:67:c2:a1:54:de:
2a:ea:6b:33:02:1a:c2:50:b4:82:40:ae:15:66:3a:8a:26:83:
ef:54:84:5e:e3:88:f3:48:58:cc:eb:08:c7:30:cc:21:2d:df:
95:9d:1c:a7:f3:e0:84:33:00:3f:09:e7:93:c7:45:6d:56:c1:
25:3b:db:a0:ca:b6:4e:e1:9d:4f:65:2f:15:3e:80:5f:a3:0f:
8e:da:d9:ad:89:e0:b5:7d:dd:dc:8f:77:ed:00:b4:a1:a2:72:
ee:e1:d5:b8:24:07:79:9d:50:f1:26:98:a0:5a:bb:63:58:2f:
1e:57:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 13:49:13 2023 by rpki-client on console-ams.rpki-client.org