Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E6s8ULIsioNlB0gRgM8o1e9V4w4.roa
File: E6s8ULIsioNlB0gRgM8o1e9V4w4.roa (raw, json)
Hash identifier: 1Xtz8oQyFWfSH8ilueLf6d8YBLGIqUYlKgYM8mDv9Sg=
Subject key identifier: 13:AB:3C:50:B2:2C:8A:83:65:07:48:11:80:CF:28:D5:EF:55:E3:0E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B5450624C60800870421486A0A736480C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E6s8ULIsioNlB0gRgM8o1e9V4w4.roa
Signing time: Sat 21 Oct 2023 22:17:16 +0000
ROA not before: Sat 21 Oct 2023 22:17:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:54:50:62:4c:60:80:08:70:42:14:86:a0:a7:36:48:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 21 22:17:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ab3c50b22c8a836507481180cf28d5ef55e30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:03:36:b6:13:98:5d:8d:a8:11:0c:08:6d:60:
6c:fd:16:cf:de:35:2d:d4:04:07:7a:99:01:cb:7b:
dd:bb:16:1a:e9:5c:04:2d:37:2d:53:f8:67:e2:b3:
3d:7f:79:64:c2:a6:dc:b9:f8:11:19:00:cd:9c:f6:
66:e7:5d:fc:0d:93:2f:89:0e:68:75:a2:2c:98:5e:
9d:de:34:92:80:46:02:30:e5:51:a8:72:85:1c:51:
d9:1d:8f:d6:46:8e:41:95:22:d8:67:15:3e:ab:61:
67:34:e0:c1:cd:0e:ff:07:52:0d:44:da:59:6e:bb:
1c:54:73:84:b7:ef:3f:7b:62:5e:50:5c:29:d6:6d:
95:ed:83:92:92:7b:54:48:5d:da:1f:b9:e6:5e:8a:
21:a9:69:eb:38:86:48:cb:72:e0:1f:40:9d:a2:a0:
fc:17:09:91:67:f5:80:a8:ed:f0:62:ae:4d:02:35:
fa:23:31:2b:50:b0:e8:45:6b:57:f4:f9:9f:2f:f5:
29:14:8a:6c:10:df:71:ae:68:a7:50:ed:5f:48:ad:
4b:f2:4b:b1:b8:30:c5:61:a3:82:1d:e3:31:17:f6:
58:3a:61:ae:dc:78:50:e1:4d:39:8c:7c:f3:30:f2:
ac:96:fb:e5:f3:0c:13:4b:9d:1f:5a:42:65:f4:8d:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AB:3C:50:B2:2C:8A:83:65:07:48:11:80:CF:28:D5:EF:55:E3:0E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/E6s8ULIsioNlB0gRgM8o1e9V4w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.71.0/24
163.5.75.0-163.5.76.255
163.5.78.0/23
163.5.83.0/24
163.5.86.0/24
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.120.0-163.5.122.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0-163.5.162.255
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0/24
163.5.212.0/24
163.5.217.0-163.5.218.255
163.5.222.0/24
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f1:8b:8f:73:b9:90:92:af:71:53:5f:f6:03:dc:27:5b:e8:
26:44:8a:65:40:a6:5c:c1:80:7e:ce:fd:10:ed:7d:50:2b:97:
d0:63:d3:78:ea:1e:e1:42:6d:65:3e:9f:f3:d3:5d:80:f5:c4:
36:68:3a:54:76:f2:49:33:25:93:02:2c:6e:17:45:83:f8:83:
7e:a2:a3:fb:4a:8e:c1:f0:92:e4:fa:08:f3:90:e2:21:4c:ad:
64:0e:95:55:88:9b:84:3d:ac:da:cc:48:58:ab:97:79:95:f4:
64:b4:99:07:8d:82:62:53:72:fa:4f:bb:ca:61:8f:8b:a9:df:
b3:d1:d0:27:4f:30:e4:9b:a5:9b:6f:98:ff:f0:f9:59:e3:50:
1f:2e:83:46:de:15:ea:85:bd:1f:38:56:30:29:0a:5d:8f:9e:
d7:a7:53:5f:34:5d:71:d9:28:e5:0f:16:e9:26:9b:04:8f:d2:
b0:50:33:c0:5a:cc:54:3c:40:14:37:f5:12:43:13:1d:a9:52:
77:e1:ff:93:63:1f:69:bb:d9:e1:1a:d6:ad:93:2c:52:72:37:
c5:93:ff:37:f1:f7:b0:38:e2:36:f4:d1:f1:00:9e:52:eb:02:
bb:0c:fe:88:d6:fd:78:25:19:1a:f1:3e:ca:83:36:2a:a2:cb:
75:b0:26:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 20:59:22 2023 by rpki-client on console-fra.rpki-client.org