Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9I39KLywobyA0S_022GrJSHKeIE.roa
File: 9I39KLywobyA0S_022GrJSHKeIE.roa (raw, json)
Hash identifier: lA1PDSxzlfyEXk0GZtslGhKWBUUoooNNMc9+pKf8ZKY=
Subject key identifier: F4:8D:FD:28:BC:B0:A1:BC:80:D1:2F:F4:DB:61:AB:25:21:CA:78:81
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A44FED00F7F741D55CE88065CD4100F34
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9I39KLywobyA0S_022GrJSHKeIE.roa
Signing time: Wed 30 Aug 2023 05:51:04 +0000
ROA not before: Wed 30 Aug 2023 05:51:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:44:fe:d0:0f:7f:74:1d:55:ce:88:06:5c:d4:10:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 30 05:51:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f48dfd28bcb0a1bc80d12ff4db61ab2521ca7881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:6f:6b:84:94:b5:94:a6:02:e5:ef:94:ea:
89:bf:25:2c:5a:24:78:4f:73:b2:2d:a1:68:ea:82:
2a:55:a4:23:ce:b7:2f:1d:25:1b:52:7a:37:84:fe:
b1:7d:fb:8d:f4:29:08:81:48:43:cc:30:67:df:ae:
28:eb:e1:78:5b:a8:7f:6d:8e:ed:de:56:dd:e1:9c:
c8:c9:5f:89:eb:97:73:f5:ac:24:b8:92:46:ae:c7:
3b:cf:ae:21:70:9e:16:b0:32:b8:89:e4:96:0b:a3:
8a:0b:02:d6:3a:29:30:cf:37:39:89:8b:9f:46:6f:
2d:52:62:83:cb:a8:09:61:c1:12:26:c2:02:e4:4c:
1f:5a:85:1c:80:8c:20:2c:6b:e9:de:1d:08:a0:d9:
e9:76:1e:3f:96:55:d8:3f:98:48:67:38:9b:6b:28:
90:9e:ee:1c:a2:2d:3c:98:1f:7d:00:00:6e:4a:ec:
37:5d:80:c4:08:75:8d:cb:98:fb:98:10:45:07:8c:
18:9e:c0:ac:49:1d:b9:07:a8:4a:fd:07:81:df:19:
0a:24:e2:7c:5a:80:b7:c2:d4:9f:64:8d:74:17:29:
f1:ef:20:aa:05:0c:6c:d1:29:a9:15:8c:3c:ec:08:
87:17:16:68:b8:0b:6e:55:34:81:05:ac:71:97:9a:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8D:FD:28:BC:B0:A1:BC:80:D1:2F:F4:DB:61:AB:25:21:CA:78:81
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/9I39KLywobyA0S_022GrJSHKeIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/24
163.5.70.0/23
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.121.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/23
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0-163.5.167.255
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/23
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
74:fc:7e:0f:7e:d7:5a:8a:49:ca:1f:9c:b0:4a:41:69:14:f2:
45:cb:d9:85:52:ff:63:be:20:8b:03:93:f4:2a:c3:86:be:cb:
23:31:4d:f5:d4:d8:6d:ae:4c:35:bb:24:31:2a:94:0b:28:32:
e9:63:62:cd:1e:ef:1c:15:63:13:46:b9:6e:1c:ff:d1:54:59:
aa:ce:d0:3d:55:3b:d5:a4:3b:f4:6f:66:3a:a0:ca:f3:b2:62:
fc:fe:01:35:5f:03:44:c6:35:f6:8d:56:8b:7d:88:2e:86:55:
51:5b:a3:89:15:cd:37:04:79:c4:f1:04:74:7b:0b:53:ab:71:
4e:e2:20:3c:9d:4a:62:b6:e3:4e:ae:07:55:df:5e:77:d0:06:
2d:24:34:96:85:25:7a:26:fc:0d:22:67:d2:5a:66:01:33:30:
81:64:48:ad:db:79:8d:33:c0:58:10:af:ed:b6:a6:45:be:e6:
b9:d1:2f:6b:14:2e:0f:f3:69:5a:f0:50:cd:a3:8e:1e:3f:db:
5e:61:48:0e:20:ef:b7:e3:cb:c5:21:95:97:4b:19:ed:21:7f:
57:24:c5:ee:4d:2c:c9:ff:7f:a0:94:8c:1b:82:e5:85:a5:9d:
23:79:23:89:fe:0f:ee:e7:11:f4:a4:14:29:a6:bc:05:07:19:
fa:48:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 22:20:02 2023 by rpki-client on console-fra.rpki-client.org