Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CmUgVaN5RlEkP1P6LlrBsWEOkmY.roa
File: CmUgVaN5RlEkP1P6LlrBsWEOkmY.roa (raw, json)
Hash identifier: kEIteknnIoLsHFlcbpi43NGasIyTTw6m/P89ROIXpJI=
Subject key identifier: 0A:65:20:55:A3:79:46:51:24:3F:53:FA:2E:5A:C1:B1:61:0E:92:66
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188E9575BDF01F3EDBF916F98978F4CA57F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CmUgVaN5RlEkP1P6LlrBsWEOkmY.roa
Signing time: Fri 23 Jun 2023 17:39:56 +0000
ROA not before: Fri 23 Jun 2023 17:39:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e9:57:5b:df:01:f3:ed:bf:91:6f:98:97:8f:4c:a5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 23 17:39:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a652055a3794651243f53fa2e5ac1b1610e9266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:40:45:9f:8f:06:50:46:56:f7:02:f5:06:46:
85:42:86:16:82:d9:41:ab:e2:2d:a4:19:3a:db:5f:
29:62:db:08:4b:23:05:85:5b:f5:56:05:10:89:d4:
23:9a:fe:7f:d1:90:5c:a0:fb:de:10:5b:61:cd:cd:
00:59:dc:35:50:a0:9f:f8:c6:0e:d4:d8:e4:6a:b8:
0b:81:4f:66:59:37:46:77:ce:6b:38:b6:35:42:00:
49:ef:34:72:1c:88:eb:3f:6d:0f:df:49:3a:0b:e2:
19:39:be:18:79:78:23:b9:b7:09:62:e4:93:2f:5a:
9f:2a:0f:1b:19:32:5d:4b:df:bf:b1:5e:be:82:6b:
b7:a3:4d:29:3c:bc:d6:fe:5f:3f:ba:e0:64:c3:a7:
28:87:01:c2:a9:06:d9:94:a4:9d:2b:97:c6:15:b9:
ca:3f:30:03:5c:bd:12:f8:6f:b5:93:4e:39:33:3c:
b0:b1:52:78:3d:bc:cb:90:50:07:60:93:b4:cf:a2:
82:4e:e0:f9:ec:0c:8b:b4:34:93:07:8f:a8:b6:1b:
05:aa:58:00:3b:2f:23:b3:05:66:b2:ae:45:8d:91:
43:ac:da:03:f4:65:11:51:86:44:61:1b:6e:bc:39:
ca:1f:50:bd:bb:00:64:7b:d7:fc:1e:20:88:65:18:
41:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:65:20:55:A3:79:46:51:24:3F:53:FA:2E:5A:C1:B1:61:0E:92:66
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/CmUgVaN5RlEkP1P6LlrBsWEOkmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/22
163.5.125.0-163.5.128.255
163.5.132.0-163.5.134.255
163.5.138.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.159.0-163.5.164.255
163.5.167.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:48:80:6f:12:db:93:93:f3:28:56:9b:5f:8d:99:6c:0b:
3d:08:2a:0a:f6:14:5b:fd:80:fd:ad:68:19:c3:cb:4a:92:16:
68:16:a4:25:59:21:8b:7d:66:fb:e9:95:22:46:16:49:c4:65:
61:11:fd:f5:76:93:4e:2b:28:b7:4e:9e:8f:10:a1:fd:4e:e3:
e7:2f:97:16:13:7b:f9:e8:c1:54:cd:71:fa:90:c9:7c:77:72:
3b:15:c8:b8:08:65:b3:78:32:82:ce:22:22:3b:9a:a9:90:83:
8a:e3:8e:74:3b:6d:a4:30:f9:40:c3:40:e1:d5:9b:fe:f7:49:
fe:de:1b:e9:44:8d:90:a1:24:8e:4b:20:87:7d:12:7d:02:e7:
af:e1:57:06:8c:c9:fa:f0:3c:dc:4d:d3:62:d5:44:f5:4c:a5:
67:7c:0c:9e:6a:da:8f:f8:37:22:bc:5f:ab:96:45:f0:3b:e8:
9a:39:0f:9d:f1:9f:9d:e7:4d:12:d9:20:20:d2:6a:67:6d:80:
09:66:be:ff:e4:c7:a2:73:60:88:69:2e:a0:3f:1b:42:8c:48:
95:ef:e1:bc:f2:bd:6e:df:77:99:3f:d3:de:72:93:c0:7d:d8:
ad:9f:c4:7a:6b:84:9d:d5:c6:6e:bc:bb:a6:a9:6d:a8:4c:3f:
79:42:dc:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org