Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BK8JWmTYsHYx-zW9wxybsBjZ30M.roa
File: BK8JWmTYsHYx-zW9wxybsBjZ30M.roa (raw, json)
Hash identifier: ToHecBq/YkZH21arCiI3QBsr2kwwEEGQP6jpYIORBt4=
Subject key identifier: 04:AF:09:5A:64:D8:B0:76:31:FB:35:BD:C3:1C:9B:B0:18:D9:DF:43
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01888D1EE53DBD5D7D3399878A050B7991F4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BK8JWmTYsHYx-zW9wxybsBjZ30M.roa
Signing time: Mon 05 Jun 2023 19:53:12 +0000
ROA not before: Mon 05 Jun 2023 19:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:1e:e5:3d:bd:5d:7d:33:99:87:8a:05:0b:79:91:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 5 19:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04af095a64d8b07631fb35bdc31c9bb018d9df43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:5a:93:09:ef:01:8c:98:4c:5a:5b:38:b2:
7e:be:ca:52:16:de:c6:9a:7d:2a:9f:94:88:d2:a8:
0f:2b:c8:fb:31:d2:ed:7c:23:04:96:8b:f5:ce:a3:
a0:a7:87:63:15:66:f0:21:27:d0:ca:64:ce:89:5f:
ff:5f:03:81:41:ce:ad:c3:08:ff:b4:96:ef:38:bd:
ce:7b:f8:b8:06:7f:f0:d9:18:2a:b3:3a:71:e9:63:
06:3f:24:db:99:18:45:d8:ec:b8:8d:54:87:3b:9e:
20:e7:e8:ef:61:3d:ae:55:61:9f:61:ae:b7:82:18:
f9:15:6c:42:2d:c5:9e:23:b5:bd:a5:d1:9b:b9:aa:
9a:64:37:b0:2e:94:52:2a:e9:19:ab:af:bb:9b:c2:
46:94:15:7e:9a:aa:a0:74:20:91:b1:26:39:21:81:
71:34:67:ad:64:61:fe:c9:a0:e0:c0:59:29:5f:1e:
09:d2:5e:aa:b7:94:0a:85:24:86:99:38:f7:92:24:
a6:74:49:d0:9d:c3:f2:d5:40:0f:eb:9d:87:19:dd:
f5:c0:fb:7f:ba:8c:d4:d7:a0:31:45:b7:36:37:80:
f3:13:5f:e2:4b:74:23:f9:b2:8d:cd:44:ea:61:cd:
03:da:7a:f2:52:29:90:1e:11:03:f1:8a:4a:67:dc:
1d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:09:5A:64:D8:B0:76:31:FB:35:BD:C3:1C:9B:B0:18:D9:DF:43
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/BK8JWmTYsHYx-zW9wxybsBjZ30M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0/24
163.5.245.0/24
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:bf:9d:47:df:6d:1b:28:d2:87:e2:0d:92:90:2a:3f:d4:55:
b3:c6:fc:d5:2f:b6:0b:23:08:89:2e:68:8c:fe:5f:70:20:18:
f9:98:9d:6a:86:13:6b:5c:bb:c7:52:1a:1a:1e:23:4a:8c:b5:
de:5f:d1:48:aa:3b:98:f8:ea:e8:e3:20:84:70:0b:08:07:56:
d8:5d:d2:cb:7b:cc:03:d3:9a:c5:48:c0:d7:a2:8e:cf:d0:fc:
cc:c0:fe:5d:fa:8b:ac:f2:8d:22:2a:15:af:81:f0:77:37:30:
2c:17:45:7f:bb:b0:87:bd:5c:96:7e:01:bf:6d:ae:64:c3:cd:
40:03:4c:88:1d:f8:ac:27:be:41:b6:08:7b:17:cc:6d:77:95:
d6:87:6b:71:7f:4e:0e:a9:49:bb:c8:45:f4:c0:08:55:9f:35:
0a:1d:96:45:92:86:b3:7c:25:7e:5d:51:de:1d:f6:f9:82:f1:
d4:6e:30:69:e5:75:80:e9:de:93:0e:8f:eb:9f:91:45:52:8a:
27:fb:ea:cb:4f:3a:91:47:db:1b:e7:d8:52:8e:44:4c:f4:ea:
67:1d:dd:e7:8e:e8:1e:eb:6c:d9:4c:c7:de:26:f2:66:96:95:
47:7f:f0:a3:ff:02:46:6f:84:4f:47:ab:85:36:8c:57:ac:60:
33:11:d4:dd
-----BEGIN CERTIFICATE-----
MIIG8DCCBdigAwIBAgISAYiNHuU9vV19M5mHigULeZH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjA1MTk1MzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGFmMDk1YTY0ZDhiMDc2MzFmYjM1YmRjMzFjOWJiMDE4ZDlkZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxZakwnvAYyYTFpbOLJ+vspSFt7G
mn0qn5SI0qgPK8j7MdLtfCMElov1zqOgp4djFWbwISfQymTOiV//XwOBQc6twwj/
tJbvOL3Oe/i4Bn/w2Rgqszpx6WMGPyTbmRhF2Oy4jVSHO54g5+jvYT2uVWGfYa63
ghj5FWxCLcWeI7W9pdGbuaqaZDewLpRSKukZq6+7m8JGlBV+mqqgdCCRsSY5IYFx
NGetZGH+yaDgwFkpXx4J0l6qt5QKhSSGmTj3kiSmdEnQncPy1UAP652HGd31wPt/
uozU16AxRbc2N4DzE1/iS3Qj+bKNzUTqYc0D2nryUimQHhED8YpKZ9wdrwIDAQAB
o4ID/DCCA/gwHQYDVR0OBBYEFASvCVpk2LB2Mfs1vcMcm7AY2d9DMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvQks4SldtVFlzSFl4LXpXOXd4eWJzQmpaMzBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEAYIKwYBBQUHAQcBAf8EggH/MIIB+zCCAfcEAgABMIIB
7wMEAKMFHjAMAwQFowUgAwQAowUkAwQBowU6MAwDBACjBT0DBAajBQADBACjBUMw
DAMEAaMFRgMEAKMFSAMEAaMFSjAMAwQAowVNAwQEowVAMAwDBACjBVMDBACjBVQD
BAGjBVYDBACjBVkwDAMEAKMFWwMEAKMFXAMEAKMFXzAMAwQAowVhAwQCowVgMAwD
BACjBWkDBACjBWowDAMEAaMFbgMEAqMFcDAMAwQAowV1AwQAowV2AwQBowV4MAwD
BACjBX0DBACjBYADBACjBYYwDAMEAaMFigMEBKMFgAMEAKMFkgMEAKMFlAMEAaMF
lgMEAKMFmQMEAKMFmzAMAwQAowWfAwQAowWkMAwDBAGjBaYDBACjBaoDBACjBawD
BACjBa8wDAMEAKMFsQMEAqMFsDAMAwQAowW1AwQAowW2MAwDBACjBbkDBACjBboD
BAGjBbwDBACjBb8DBAGjBcIDBACjBcYwDAMEAKMFyQMEAaMFzAMEAKMF0gMEAaMF
1DAMAwQDowXYAwQAowXcMAwDBAGjBd4DBACjBeAwDAMEAaMF4gMEAKMF5AMEAKMF
5gMEAKMF6DAMAwQAowXtAwQAowXuAwQAowXxAwQAowXzAwQAowX1AwQAowX4MAsD
BAGjBfoDAwGjBAMEALn9NjANBgkqhkiG9w0BAQsFAAOCAQEAIL+dR99tGyjSh+IN
kpAqP9RVs8b81S+2CyMIiS5ojP5fcCAY+ZidaoYTa1y7x1IaGh4jSoy13l/RSKo7
mPjq6OMghHALCAdW2F3Sy3vMA9OaxUjA16KOz9D8zMD+XfqLrPKNIioVr4Hwdzcw
LBdFf7uwh71cln4Bv22uZMPNQANMiB34rCe+QbYIexfMbXeV1odrcX9ODqlJu8hF
9MAIVZ81Ch2WRZKGs3wlfl1R3h32+YLx1G4waeV1gOnekw6P65+RRVKKJ/vqy086
kUfbG+fYUo5ETPTqZx3d547oHuts2UzH3ibyZpaVR3/wo/8CRm+ET0erhTaMV6xg
MxHU3Q==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org