Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FzZzQqg_RZWxvTNb-xuw_GFCUJE.roa
File: FzZzQqg_RZWxvTNb-xuw_GFCUJE.roa (raw, json)
Hash identifier: NjFcUbAuMJ9aPxfRyggUc+HhMRGeOrTlpVV2Jy4GRpI=
Subject key identifier: 17:36:73:42:A8:3F:45:95:B1:BD:33:5B:FB:1B:B0:FC:61:42:50:91
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01887DC863DDB19FFEC935AC4DA00E3B190A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FzZzQqg_RZWxvTNb-xuw_GFCUJE.roa
Signing time: Fri 02 Jun 2023 20:24:24 +0000
ROA not before: Fri 02 Jun 2023 20:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7d:c8:63:dd:b1:9f:fe:c9:35:ac:4d:a0:0e:3b:19:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 2 20:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17367342a83f4595b1bd335bfb1bb0fc61425091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:67:6d:bd:b3:91:7a:7d:60:45:55:42:56:
b9:0c:dd:97:ce:34:a0:60:06:42:74:96:be:6b:b1:
43:19:f1:5f:38:8d:06:1b:4e:ca:f9:bb:0c:dc:a9:
f1:30:70:7b:3a:39:c9:01:20:8e:38:73:c0:a6:7a:
bb:8a:14:e1:fc:d5:d8:9e:3f:e4:f5:bf:0d:3a:7b:
f1:0b:3b:6b:18:6c:4f:ed:01:7b:be:2f:1d:04:9e:
a6:2f:91:de:22:51:84:50:3e:aa:d8:b5:a3:d2:59:
6c:cf:47:c2:d7:f0:59:62:6e:88:e0:30:2f:a0:76:
45:ee:e1:50:10:a9:49:4f:3b:3e:26:6f:1a:79:08:
e9:cf:79:be:0c:95:81:9b:ed:d9:fb:ee:65:f5:7f:
ca:60:e2:e8:51:4f:a6:3b:a6:20:4d:30:c2:e5:b8:
d9:be:bb:0c:72:d5:a3:20:54:3e:4f:86:f2:1c:1f:
45:bd:4f:87:8e:65:0e:d3:48:bf:2e:d0:26:d5:e3:
6d:20:a2:7f:cb:d6:ee:1e:45:91:22:fd:d4:1b:90:
77:2d:1a:25:36:fd:db:a0:4f:83:a3:f8:21:35:37:
90:81:95:da:85:66:f0:51:fb:a9:6a:62:05:10:2b:
03:18:00:68:53:1f:51:4c:4b:c3:8b:47:34:70:cf:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:36:73:42:A8:3F:45:95:B1:BD:33:5B:FB:1B:B0:FC:61:42:50:91
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/FzZzQqg_RZWxvTNb-xuw_GFCUJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.117.0-163.5.121.255
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0-163.5.148.255
163.5.150.0/23
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.213.0/24
163.5.216.0/22
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0/24
163.5.245.0/24
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
14:dc:0d:ca:82:0d:22:f9:20:4c:98:09:3e:19:5c:c7:34:c2:
b2:07:6f:dc:58:fb:ab:e0:d5:bb:ae:52:d1:d7:7b:88:2d:38:
91:c0:1d:c7:d2:30:fe:82:da:97:01:91:53:79:97:00:44:e9:
54:0e:29:c8:97:ca:d0:14:32:86:ba:ef:06:b2:31:5d:1a:01:
11:58:1c:bf:81:8f:55:8a:9e:be:8d:04:5e:0f:39:9c:11:db:
9a:39:36:f3:a2:38:85:07:02:f0:9a:52:38:d0:03:ff:f5:17:
f0:22:eb:a0:53:59:f4:69:1c:ee:34:2e:16:b9:04:fc:86:83:
b8:9f:45:2a:57:59:89:24:08:ae:89:37:19:fe:a8:ed:b3:5d:
88:fc:49:99:55:e2:e9:8a:93:24:6f:bf:a7:e7:77:9d:cd:9e:
1b:f5:29:98:5d:59:f1:86:05:cd:9c:75:4d:cb:fe:7b:c4:9f:
9f:2b:14:f8:b3:ae:ee:bf:11:18:de:0b:4b:a2:d0:7c:d6:5a:
2a:6b:a2:32:cd:d2:5f:9c:0e:74:ce:ac:b8:74:52:a9:23:b9:
bb:8c:67:cb:56:47:74:00:c1:fe:b1:b3:f6:13:54:d2:a2:b0:
b8:45:cd:09:9c:28:5c:85:5b:52:5d:af:56:76:c8:6d:e4:c9:
a0:cc:8d:bf
-----BEGIN CERTIFICATE-----
MIIG0DCCBbigAwIBAgISAYh9yGPdsZ/+yTWsTaAOOxkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjAyMjAyNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzM2NzM0MmE4M2Y0NTk1YjFiZDMzNWJmYjFiYjBmYzYxNDI1MDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTFnbb2zkXp9YEVVQla5DN2XzjSg
YAZCdJa+a7FDGfFfOI0GG07K+bsM3KnxMHB7OjnJASCOOHPApnq7ihTh/NXYnj/k
9b8NOnvxCztrGGxP7QF7vi8dBJ6mL5HeIlGEUD6q2LWj0llsz0fC1/BZYm6I4DAv
oHZF7uFQEKlJTzs+Jm8aeQjpz3m+DJWBm+3Z++5l9X/KYOLoUU+mO6YgTTDC5bjZ
vrsMctWjIFQ+T4byHB9FvU+HjmUO00i/LtAm1eNtIKJ/y9buHkWRIv3UG5B3LRol
Nv3boE+Do/ghNTeQgZXahWbwUfupamIFECsDGABoUx9RTEvDi0c0cM8VqQIDAQAB
o4ID3DCCA9gwHQYDVR0OBBYEFBc2c0KoP0WVsb0zW/sbsPxhQlCRMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRnpaelFxZ19SWld4dlROYi14dXdfR0ZDVUpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB8AYIKwYBBQUHAQcBAf8EggHfMIIB2zCCAdcEAgABMIIB
zwMEAKMFHjAMAwQFowUgAwQAowUkAwQBowU6MAwDBACjBT0DBAajBQADBACjBUMw
DAMEAaMFRgMEAKMFSAMEAaMFSjAMAwQAowVNAwQEowVAAwQAowVTAwQBowVWMAwD
BACjBVkDBACjBVwDBACjBV8wDAMEAKMFYQMEAqMFYDAMAwQAowVpAwQAowVqMAwD
BAGjBW4DBACjBXIwDAMEAKMFdQMEAaMFeDAMAwQAowV9AwQAowWAAwQAowWGMAwD
BAGjBYoDBASjBYAwDAMEAaMFkgMEAKMFlAMEAaMFlgMEAKMFmzAMAwQAowWfAwQA
owWkMAwDBAGjBaYDBACjBaoDBACjBawDBACjBa8wDAMEAKMFsQMEAqMFsDAMAwQA
owW1AwQAowW2MAwDBACjBbkDBACjBboDBAGjBbwDBACjBb8DBAGjBcIDBACjBcYw
DAMEAKMFyQMEAaMFzAMEAKMF0gMEAKMF1QMEAqMF2DAMAwQBowXeAwQAowXgMAwD
BAGjBeIDBACjBeQDBACjBeYDBACjBegwDAMEAKMF7QMEAKMF7gMEAKMF8QMEAKMF
8wMEAKMF9QMEAKMF+DALAwQBowX6AwMBowQDBAC5/TYwDQYJKoZIhvcNAQELBQAD
ggEBABTcDcqCDSL5IEyYCT4ZXMc0wrIHb9xY+6vg1buuUtHXe4gtOJHAHcfSMP6C
2pcBkVN5lwBE6VQOKciXytAUMoa67wayMV0aARFYHL+Bj1WKnr6NBF4POZwR25o5
NvOiOIUHAvCaUjjQA//1F/Ai66BTWfRpHO40Lha5BPyGg7ifRSpXWYkkCK6JNxn+
qO2zXYj8SZlV4umKkyRvv6fnd53Nnhv1KZhdWfGGBc2cdU3L/nvEn58rFPizru6/
ERjeC0ui0HzWWiprojLN0l+cDnTOrLh0UqkjubuMZ8tWR3QAwf6xs/YTVNKisLhF
zQmcKFyFW1Jdr1Z2yG3kyaDMjb8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org