Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3QGrFo5P8cgkNIgThcvM7CbiLdk.roa
File: 3QGrFo5P8cgkNIgThcvM7CbiLdk.roa (raw, json)
Hash identifier: 6FIs29JMMY3OKTKZB8fPrXwKjO9c+ViDrZ5hrGELRIk=
Subject key identifier: DD:01:AB:16:8E:4F:F1:C8:24:34:88:13:85:CB:CC:EC:26:E2:2D:D9
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188B64B3A4E684E982B72A974900D2373B8
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3QGrFo5P8cgkNIgThcvM7CbiLdk.roa
Signing time: Tue 13 Jun 2023 19:46:03 +0000
ROA not before: Tue 13 Jun 2023 19:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b6:4b:3a:4e:68:4e:98:2b:72:a9:74:90:0d:23:73:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 13 19:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd01ab168e4ff1c82434881385cbccec26e22dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:b3:25:d7:aa:7d:85:37:f6:b3:e3:4d:7d:
58:dd:d0:cb:2b:6b:1c:b4:fc:e1:18:d8:88:ff:32:
f6:55:0c:ce:a0:31:8c:da:1d:23:47:56:4f:9d:c4:
e8:33:bc:3c:28:9a:7b:18:78:55:a9:c5:99:b0:e7:
17:44:46:1f:99:29:dc:4f:7f:0d:61:ad:43:e1:70:
96:38:e2:57:cb:e5:12:bf:05:32:0c:c8:f5:7d:ad:
82:7e:d3:f5:96:01:52:47:0c:e6:43:b3:99:f5:87:
26:56:2d:1e:31:68:37:8b:ca:43:3d:62:db:76:d8:
b7:8e:da:fd:0c:ad:1f:bc:07:3f:f3:dd:8e:eb:d1:
83:ae:dc:45:7d:47:8e:5b:c6:85:d9:21:41:bb:15:
71:99:10:30:91:41:51:8c:49:5f:20:5d:76:1e:75:
7b:4e:fd:f3:c0:fe:f4:af:27:75:5d:bf:1c:6d:da:
45:f3:5d:9a:32:d4:4a:7d:b9:57:37:e1:8c:07:82:
a7:6d:f9:29:ef:00:0f:7b:80:b6:d5:05:4a:20:1b:
24:e7:4a:0b:16:c5:6b:e9:30:df:d1:ce:bd:b6:69:
19:9c:38:e9:37:d8:bb:cc:ec:ed:f8:59:3a:30:3b:
48:72:bb:5f:e3:fc:cd:e5:cc:5e:2a:91:71:8d:6a:
49:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:01:AB:16:8E:4F:F1:C8:24:34:88:13:85:CB:CC:EC:26:E2:2D:D9
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/3QGrFo5P8cgkNIgThcvM7CbiLdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.153.0/24
163.5.159.0-163.5.164.255
163.5.167.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e7:92:7b:fa:05:da:a2:d2:08:a2:96:11:cb:82:51:ef:ed:
a9:6f:ef:61:e4:8e:16:78:1b:5e:7c:95:dd:46:0d:86:57:bf:
05:39:9e:c2:39:41:d1:14:5d:47:e2:41:52:16:e2:dd:bf:17:
4f:90:70:ae:2e:ea:7b:9a:69:e7:90:9d:bd:ef:b0:91:b1:f6:
b0:f9:8b:2d:6f:72:90:d7:91:42:ad:16:83:5b:0f:05:58:6f:
0a:11:0b:38:5c:3f:8d:b4:a2:90:52:65:24:17:06:95:df:fa:
8a:15:a2:bf:0d:15:83:a8:b5:4f:b1:f4:18:1d:b2:e3:d1:fa:
c6:b4:71:b4:fd:8b:f6:2b:42:8d:f7:37:9e:e6:75:e8:42:71:
8d:fd:2b:d5:84:43:93:9e:8a:fa:f3:fd:7c:61:eb:1b:7f:5e:
d4:01:a4:67:9d:5d:56:cb:18:bf:07:60:84:2d:1b:e2:26:70:
71:d8:a7:62:27:03:04:e1:18:e8:1c:13:84:58:e8:ac:19:8e:
7a:57:da:e0:0b:e5:0c:34:56:61:de:fe:7f:31:06:8f:3f:0d:
99:32:88:fe:b3:27:f2:f6:8b:bf:03:47:99:39:68:ca:a3:a8:
92:25:06:61:aa:03:c8:2d:29:79:cd:84:c8:cb:12:59:c0:5f:
27:1e:96:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org