Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5UrJGPfYtzPOftVXioOgNciCxKA.roa
File: 5UrJGPfYtzPOftVXioOgNciCxKA.roa (raw, json)
Hash identifier: Gzc9TrMRdU1CEuvorUH5zIIyYxDpiYfYwrgk7g6eDgk=
Subject key identifier: E5:4A:C9:18:F7:D8:B7:33:CE:7E:D5:57:8A:83:A0:35:C8:82:C4:A0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C2C6CDEA2B5690AB944AE00653467DA4A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5UrJGPfYtzPOftVXioOgNciCxKA.roa
Signing time: Sat 02 Dec 2023 21:26:21 +0000
ROA not before: Sat 02 Dec 2023 21:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2c:6c:de:a2:b5:69:0a:b9:44:ae:00:65:34:67:da:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 2 21:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e54ac918f7d8b733ce7ed5578a83a035c882c4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:ea:25:0c:8d:c5:b0:e2:b4:de:58:b5:d4:
41:e3:31:df:e5:f6:ed:82:0a:6a:ff:0f:94:35:3c:
bf:8c:2a:ab:67:8e:07:8c:27:f0:18:2d:6d:b3:fc:
db:44:a5:1b:00:d3:68:d9:59:9c:94:1e:83:22:da:
ad:43:d8:62:0c:f8:ed:73:38:71:56:fa:34:b7:d6:
41:81:3a:c5:a6:6a:08:77:c6:a1:16:ae:84:b1:e8:
b7:a7:49:93:ba:f1:6b:94:5e:88:be:9b:f1:76:55:
3f:33:31:5b:13:15:94:94:20:bb:40:a8:87:bf:92:
85:10:28:27:fb:62:de:61:69:ea:da:76:58:4e:0f:
bc:93:72:7d:c5:f3:ce:0e:da:1e:c1:dd:e5:93:f7:
0d:6e:1b:02:db:e1:bd:be:d0:ae:ef:8b:d2:94:5f:
01:2a:0e:1f:00:9e:94:c0:a2:12:aa:f2:9c:62:9d:
34:dd:b3:8b:35:78:fc:ee:7e:73:16:e4:6e:67:34:
28:b6:d8:55:ae:22:b7:2d:f4:b7:6b:c1:a1:05:ea:
fb:fa:b4:42:4a:6f:df:d9:cc:ba:f9:29:7a:d4:61:
9d:ba:3f:e5:03:58:d9:5c:e8:76:28:c9:fe:fa:ff:
01:94:b4:83:96:18:02:9b:7a:b8:69:84:5f:b4:fa:
44:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4A:C9:18:F7:D8:B7:33:CE:7E:D5:57:8A:83:A0:35:C8:82:C4:A0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5UrJGPfYtzPOftVXioOgNciCxKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.71.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.106.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.142.0/23
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0/24
163.5.167.0/24
163.5.170.0/24
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.199.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.212.0/24
163.5.218.0/23
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:ac:86:94:1e:8c:9e:7a:b6:21:40:a6:a2:92:91:c6:34:41:
4a:21:6c:fe:a5:48:29:c0:42:79:61:31:46:1c:ef:26:7b:2b:
22:e7:64:51:5a:63:e3:f6:0e:b5:4f:ed:1b:db:13:ab:26:e2:
d3:43:fc:fd:0f:44:ec:21:bb:4c:9d:09:4f:7c:e3:fc:f7:e3:
9a:78:8b:91:5b:32:0c:ed:75:a9:1f:97:e3:2c:c3:b8:c9:77:
85:c2:80:69:05:f8:21:2a:1a:9c:bd:4b:c3:94:04:ab:18:60:
a2:dd:67:b9:63:a0:d5:54:3c:25:09:84:66:20:0f:1d:7c:8d:
de:01:81:a6:a6:d3:19:28:24:d7:a8:80:9a:4e:57:eb:cb:1f:
05:40:c5:8f:ca:d9:a3:a1:20:4e:32:cb:7a:48:35:0b:e1:2d:
f6:14:ea:36:fb:5d:40:40:f7:9b:7d:cb:f4:47:1c:01:87:e0:
9d:f6:49:17:69:7b:9d:dc:35:e8:44:a1:86:d3:0a:5c:42:80:
c3:d9:81:c4:3f:58:ba:69:51:e2:8a:3c:2f:b4:f8:b5:c6:60:
59:e1:b0:54:db:76:e0:a6:44:cd:b7:27:80:5d:5d:67:61:04:
d2:f1:93:43:49:e2:1d:93:4c:75:ab:90:c3:d8:7e:a0:11:13:
b5:9a:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 18:30:05 2023 by rpki-client on console-ams.rpki-client.org