Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FeTHS7NhFed64-PODkgOlh_6k4s.roa
File: FeTHS7NhFed64-PODkgOlh_6k4s.roa (raw, json)
Hash identifier: v5Ce8L+VUFQ8xb0G1uyEKuEAqHdCwYmqlwpElpSJJak=
Subject key identifier: 15:E4:C7:4B:B3:61:15:E7:7A:E3:E3:CE:0E:48:0E:96:1F:FA:93:8B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018CAD8D7687DD00F44F74C7B1EA202AB8B4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FeTHS7NhFed64-PODkgOlh_6k4s.roa
Signing time: Wed 27 Dec 2023 23:12:58 +0000
ROA not before: Wed 27 Dec 2023 23:12:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:8d:76:87:dd:00:f4:4f:74:c7:b1:ea:20:2a:b8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 27 23:12:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e4c74bb36115e77ae3e3ce0e480e961ffa938b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:0e:1b:fd:b2:87:2f:42:cb:7f:ec:ec:67:e9:
d1:52:0f:7d:3a:df:0d:d3:8d:d9:f3:bb:20:ea:63:
7c:1c:6a:38:d1:55:ba:2e:2a:d2:6d:e5:6e:9e:10:
86:bc:77:a4:56:9c:b7:4b:ca:4a:d7:ea:24:4c:50:
f5:fe:d9:18:4f:ec:3c:c9:82:fb:38:8c:1d:e0:a4:
03:03:c8:12:ef:e1:7f:c7:79:86:a0:0f:6a:e5:01:
df:c3:e6:61:1a:a4:44:b0:cf:9c:57:84:d9:46:45:
ae:f9:06:5b:b8:d6:7e:3c:c4:c5:9e:8c:bd:11:64:
43:b0:41:f9:52:51:a5:a0:48:8f:b6:a8:7e:f7:79:
26:64:58:ca:b3:a1:05:ab:bb:29:12:3a:c7:3c:78:
5d:72:c3:1c:67:d3:00:03:52:c7:82:50:d3:73:ff:
52:d3:39:76:0c:98:79:cf:24:eb:cd:40:7a:5d:14:
64:1b:2b:5f:88:03:d9:2e:d2:71:8e:1a:92:72:fe:
ec:7d:de:f9:a3:64:c8:20:c9:4b:8d:07:f9:69:43:
4c:ab:9f:f4:5a:13:51:0a:2b:1e:03:bc:12:4d:e0:
cc:8f:b8:92:ee:a4:bb:ce:fb:3f:15:99:7b:f3:a5:
4c:85:e2:2f:48:3f:f4:62:d0:18:68:b3:08:d8:e8:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E4:C7:4B:B3:61:15:E7:7A:E3:E3:CE:0E:48:0E:96:1F:FA:93:8B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FeTHS7NhFed64-PODkgOlh_6k4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.106.0/24
163.5.110.0-163.5.113.255
163.5.120.0/23
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.143.0/24
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.160.0/24
163.5.167.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.250.0/24
163.5.253.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e2:5c:fd:3f:a0:fa:21:13:a0:89:45:da:54:7d:e4:05:b3:
93:88:15:08:e5:a4:2c:69:4e:82:17:4a:5e:4b:43:75:12:a8:
7d:46:5f:1f:2e:2b:99:f6:fb:2f:99:34:cb:56:24:d6:5d:d8:
b3:a1:b2:6c:26:34:6d:ec:94:95:10:42:1e:fd:46:fe:2f:00:
52:c8:18:8a:3e:4c:72:39:75:66:8c:dd:b7:75:52:86:66:4b:
77:bc:61:a5:42:dc:bd:ac:57:eb:fb:95:23:a0:61:80:11:b0:
3d:60:f4:19:88:91:6b:ea:11:3e:56:9f:f1:b0:3b:56:05:8e:
1d:ca:f7:f7:13:c3:83:24:4a:b2:ca:30:c4:48:8f:2b:a8:dd:
d4:be:99:44:54:42:a8:36:af:6b:ef:df:7e:7b:9e:60:f3:18:
11:83:78:6c:c4:3a:c6:5f:7f:f4:6c:3b:96:ee:1a:17:df:d6:
2c:b3:37:8a:9c:61:54:5d:9e:84:7e:da:bf:2e:1d:46:26:3b:
31:fc:b2:66:ba:91:36:f0:b5:4d:a6:db:d0:69:78:80:a1:8e:
84:6d:1d:bb:1c:f9:94:1a:54:42:ca:40:01:35:81:fd:2c:fa:
b8:d6:a5:05:dc:15:f1:94:bf:78:6b:eb:2c:6f:32:ba:5e:38:
19:bb:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 04:57:57 2023 by rpki-client on console-ams.rpki-client.org