Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BARzu1tahqfoj5GI90qpmZJ7xcQ.roa
File: BARzu1tahqfoj5GI90qpmZJ7xcQ.roa (raw, json)
Hash identifier: 9KokIhXEjV55E+2sD/dGZJ0Is06RABAHu2/ucZXNIDo=
Subject key identifier: 04:04:73:BB:5B:5A:86:A7:E8:8F:91:88:F7:4A:A9:99:92:7B:C5:C4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188F84A4580C2471E4DE2D75298575BF330
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BARzu1tahqfoj5GI90qpmZJ7xcQ.roa
Signing time: Mon 26 Jun 2023 15:19:56 +0000
ROA not before: Mon 26 Jun 2023 15:19:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f8:4a:45:80:c2:47:1e:4d:e2:d7:52:98:57:5b:f3:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 26 15:19:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=040473bb5b5a86a7e88f9188f74aa999927bc5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2c:26:9d:40:7b:93:41:b6:34:2a:5c:3f:aa:
98:8d:ed:49:30:b1:94:03:d8:be:28:97:58:c2:bf:
45:e1:3c:65:37:30:24:25:15:cd:3b:58:58:fe:f0:
eb:38:01:87:cf:d3:05:ae:30:8b:1a:c4:36:e5:2f:
c3:14:d9:7e:d0:65:95:ef:0c:23:76:57:73:ea:49:
e8:53:74:16:aa:ef:91:81:f7:41:2d:96:da:65:8e:
92:d6:0f:b6:08:0e:26:34:25:80:5d:bd:f0:72:6b:
4f:02:72:b3:8a:72:f5:ad:eb:9d:09:0e:36:22:34:
f0:90:49:64:a5:e4:04:96:c6:cf:1d:cc:93:7e:63:
df:8e:5b:3e:92:24:37:39:83:b7:12:00:d2:8a:df:
0a:a0:46:d8:65:5f:ed:6a:24:34:18:ec:66:20:16:
8f:70:09:7a:69:a0:f1:d6:55:1d:70:d6:e3:d5:30:
64:6d:b2:5c:af:b6:1a:f3:91:fe:b5:81:c1:f1:6d:
b9:79:4f:42:73:0f:de:f3:ea:0c:4f:e4:25:ca:69:
89:2f:6c:95:44:f9:c5:9c:dd:fa:32:e4:a3:0f:eb:
65:a9:c4:72:58:bb:16:2a:df:7b:68:e3:01:29:0c:
d8:a1:7b:10:63:51:cb:58:77:f3:36:fd:7f:54:7f:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:04:73:BB:5B:5A:86:A7:E8:8F:91:88:F7:4A:A9:99:92:7B:C5:C4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BARzu1tahqfoj5GI90qpmZJ7xcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/22
163.5.125.0-163.5.128.255
163.5.132.0-163.5.134.255
163.5.138.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.160.0-163.5.165.255
163.5.167.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.208.0-163.5.210.255
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a3:55:d4:45:3f:ee:3e:3f:a2:ab:c2:8f:7a:b4:ea:f5:c6:
0b:ca:1d:5d:70:73:3c:46:b9:90:d4:b8:c6:68:71:d0:02:ec:
ef:7d:e1:98:38:3c:c9:cd:eb:1a:ec:d9:99:59:5c:aa:ba:7a:
4f:5d:bc:0b:62:ac:b6:eb:92:2f:e7:17:87:3e:f2:6b:24:80:
ca:0f:b5:3f:1d:79:87:7e:ee:8b:cf:bc:96:c7:89:b2:78:80:
58:39:e1:ab:5d:5a:3c:c4:42:ad:d3:ca:13:36:58:d9:89:39:
0b:fc:21:5f:cb:8a:70:6b:0c:a4:d1:40:10:bc:21:b7:e2:f0:
65:ad:b1:db:31:ba:c0:fd:ce:cc:81:00:e9:d2:71:0b:fb:f8:
55:2c:76:7a:54:2f:89:f7:b8:5d:fe:c0:fa:88:2f:b5:14:6d:
1e:9f:39:f9:b9:12:55:52:cf:2a:00:6c:86:83:24:33:2b:e3:
b8:37:0f:fc:49:9c:79:46:b4:73:00:00:d3:13:53:93:60:59:
52:c3:8a:f5:8d:44:db:af:f8:ea:ec:e9:32:66:75:63:04:f7:
f6:ee:4d:64:ea:b7:22:05:37:ca:43:0c:20:be:be:6a:c5:c4:
44:a2:88:86:12:97:a6:87:cb:21:50:23:10:cb:ea:2f:fb:23:
97:ed:1e:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org