Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DSQUp0goTOrG542KlaUUgQ2FcHM.roa
File: DSQUp0goTOrG542KlaUUgQ2FcHM.roa (raw, json)
Hash identifier: oWGRZXUwM2rpoaAT34pZI4r6YiIuBYhVomRyyB1lO3E=
Subject key identifier: 0D:24:14:A7:48:28:4C:EA:C6:E7:8D:8A:95:A5:14:81:0D:85:70:73
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189265E241E92C88F1AD0B073B3BAD55FE1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DSQUp0goTOrG542KlaUUgQ2FcHM.roa
Signing time: Wed 05 Jul 2023 14:04:11 +0000
ROA not before: Wed 05 Jul 2023 14:04:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:5e:24:1e:92:c8:8f:1a:d0:b0:73:b3:ba:d5:5f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 5 14:04:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d2414a748284ceac6e78d8a95a514810d857073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:07:49:0d:4c:18:1e:74:8d:ba:04:88:49:
cb:20:e9:2f:a1:47:48:30:6c:bc:70:c1:a1:6a:db:
39:32:c9:49:94:27:1b:4d:1f:5b:3c:f8:c6:a4:03:
61:6e:99:96:0b:51:92:3b:29:8c:87:e8:e9:cb:5f:
ca:aa:69:51:4c:b7:fa:44:2d:64:4e:83:ae:ba:b8:
19:9c:1a:3a:fe:35:31:ac:d1:6e:c1:de:02:2f:1e:
83:de:06:1c:b8:8b:2f:a0:2d:07:e1:9c:9f:e1:61:
60:a7:f3:53:b5:d8:0b:e1:af:c1:44:4d:67:8c:37:
ca:29:15:bd:54:77:d4:96:45:a2:65:1b:93:d3:60:
e3:ca:1b:55:02:83:30:98:3d:ca:f6:39:a7:f0:1d:
0f:6a:4f:71:93:4e:1e:01:00:36:74:ee:78:5b:94:
e1:bc:68:2d:ad:0d:46:fe:26:82:c9:dc:4b:9c:ac:
f3:c6:df:08:16:86:ce:c2:4a:89:b5:8f:26:ed:6a:
28:0c:b4:6f:c7:64:3b:05:5e:5a:7c:37:ca:76:e6:
c8:b7:d4:18:69:26:8c:ac:9e:c5:bc:39:29:bb:87:
59:14:09:be:63:0d:06:0c:2a:f7:98:21:f0:f5:1d:
87:d3:a1:2d:7d:bb:08:c8:ad:e2:89:df:2c:7d:63:
cc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:24:14:A7:48:28:4C:EA:C6:E7:8D:8A:95:A5:14:81:0D:85:70:73
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DSQUp0goTOrG542KlaUUgQ2FcHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.104.0/23
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/22
163.5.125.0-163.5.128.255
163.5.132.0-163.5.134.255
163.5.138.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.160.0-163.5.165.255
163.5.167.0/24
163.5.169.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.184.0-163.5.189.255
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.209.0-163.5.210.255
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
45:97:a7:b8:fa:a4:b0:56:05:b5:e7:c4:00:09:4e:4f:7c:d7:
4a:6c:e9:58:e5:64:d7:81:50:a6:ed:a6:31:ce:c0:ae:29:c5:
85:8c:f0:c2:51:31:72:de:4c:61:a4:31:fd:7f:11:6f:d3:0f:
5a:6d:dd:67:2e:d3:64:25:e9:be:08:30:a2:be:24:35:df:2c:
04:3f:c9:64:4b:d9:10:2b:10:76:28:f7:71:87:04:1d:e8:b1:
12:63:02:c5:2e:5d:73:95:7b:cd:3f:00:bd:23:b5:dc:c8:d4:
d9:01:99:17:c4:a9:ce:b3:f1:d5:59:c7:64:ee:89:3f:68:b7:
f8:8f:4a:e4:81:4a:da:16:f0:86:a9:f9:d4:a9:05:05:da:6f:
5c:56:62:e1:78:93:36:41:b7:32:2a:ab:07:11:3c:7e:88:49:
db:a3:b8:df:f2:bf:15:79:0f:f1:c6:13:3c:ce:9e:f5:7a:34:
0d:85:2c:42:50:79:19:5c:0a:00:0d:ac:10:26:ec:17:3d:e6:
37:74:9b:8d:76:f5:99:c5:b2:6a:c5:51:db:70:36:03:a9:a6:
93:8b:bb:ea:fc:bc:be:81:f4:a0:3b:0d:78:86:19:ee:66:74:
37:f9:a0:e0:8f:b5:5e:d6:d3:3e:f3:4e:4d:e1:bf:24:1f:ec:
2f:38:bc:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org