Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J40tfk3cHbOldC3UGvvAl0nCOpo.roa
File: J40tfk3cHbOldC3UGvvAl0nCOpo.roa (raw, json)
Hash identifier: 60NLAeYlNzWbGnzcU+efBMj7HmYIzxmc+VOpIQwLfbw=
Subject key identifier: 27:8D:2D:7E:4D:DC:1D:B3:A5:74:2D:D4:1A:FB:C0:97:49:C2:3A:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A605A98DBB56EB38218D4BD1E10DB2E00
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J40tfk3cHbOldC3UGvvAl0nCOpo.roa
Signing time: Mon 04 Sep 2023 13:21:04 +0000
ROA not before: Mon 04 Sep 2023 13:21:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 21:09:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:5a:98:db:b5:6e:b3:82:18:d4:bd:1e:10:db:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 4 13:21:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=278d2d7e4ddc1db3a5742dd41afbc09749c23a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:43:5f:8e:22:a8:f0:b1:0b:d5:06:b1:df:a1:
86:06:77:60:a9:e9:ab:e6:11:11:85:bb:b2:ac:bf:
4c:52:24:e9:31:2b:22:c7:a0:37:80:dc:e6:f8:a9:
9c:84:12:08:8b:c8:d3:d6:49:ae:4a:eb:6f:d9:1a:
65:cb:c3:32:63:65:de:70:86:3c:4d:11:f3:ed:51:
4d:33:7c:45:5a:9d:31:57:cf:98:d4:15:ef:1a:db:
a1:5b:31:b0:ab:83:67:aa:6f:f9:0f:2a:41:d6:cf:
d9:29:89:7a:ef:43:1d:74:16:51:b5:c4:d5:2c:bc:
ff:85:1d:fd:33:77:5a:1c:3c:dc:71:38:a1:a1:76:
1f:e7:94:71:90:8d:ee:0b:e3:ef:a1:fc:f5:60:b4:
ba:0e:c2:29:e0:93:fb:7c:7c:c5:01:a4:d6:45:64:
c0:b0:91:fb:61:f4:9d:f3:a0:dd:42:c7:a2:89:3d:
7f:ba:06:2c:a7:89:86:28:8e:32:47:37:a2:35:76:
23:e6:d0:71:a2:7d:3c:a1:b6:76:df:ce:10:91:ec:
0d:e6:5c:c2:b7:4d:67:58:94:e4:53:19:c6:09:33:
5e:f0:26:20:56:c7:8b:a6:f4:2c:96:93:07:2c:9b:
ef:c0:ab:77:ac:28:ed:86:ca:1a:b1:ef:45:70:5e:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8D:2D:7E:4D:DC:1D:B3:A5:74:2D:D4:1A:FB:C0:97:49:C2:3A:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/J40tfk3cHbOldC3UGvvAl0nCOpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/23
163.5.70.0/23
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.126.255
163.5.128.0/24
163.5.134.0-163.5.137.255
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0-163.5.167.255
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0-163.5.233.255
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ff:7e:ee:b2:c1:a5:a9:77:8a:06:dc:93:4f:63:08:f5:ab:
7a:f5:91:cc:9a:81:fd:22:27:1c:76:80:d3:fc:b8:be:dc:34:
b7:ad:22:34:a6:98:70:ae:21:94:27:1c:11:5a:f3:88:fe:68:
56:f7:6c:f5:c6:77:6c:04:b7:ae:5a:5c:1d:f4:70:49:0f:1d:
ff:ad:9d:f8:64:e5:6a:ab:c6:39:33:fe:ea:e3:cf:28:47:a4:
70:7c:98:79:49:6c:c0:cf:b2:89:4e:70:11:a5:0b:d4:73:ec:
76:8f:5b:19:d3:60:a9:1f:6a:09:84:17:42:96:05:85:ea:75:
86:b4:b8:5c:d2:c3:d7:e1:58:bc:29:8e:be:af:21:a0:46:7c:
61:d5:ba:6d:ba:6e:7d:b6:8f:ca:0b:2c:43:07:4c:0c:3e:ae:
1a:c3:45:e6:2d:d5:85:54:54:52:55:04:5a:3f:cc:6a:d9:34:
6f:d8:ac:17:9e:e5:ae:3b:cd:6a:64:de:6a:b0:dd:2c:1f:ef:
df:94:5c:e7:54:69:fe:93:7f:1a:aa:a0:c2:00:f0:da:3b:2b:
20:5f:f0:44:23:c5:e2:87:8f:8c:d9:86:e2:54:3b:f2:91:b4:
9b:b3:f0:16:37:c6:00:e4:04:0d:41:e6:62:bc:1d:81:4a:4d:
4e:b3:1e:e2
-----BEGIN CERTIFICATE-----
MIIG6TCCBdGgAwIBAgISAYpgWpjbtW6zghjUvR4Q2y4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwOTA0MTMyMTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzhkMmQ3ZTRkZGMxZGIzYTU3NDJkZDQxYWZiYzA5NzQ5YzIzYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ENfjiKo8LEL1Qax36GGBndgqemr
5hERhbuyrL9MUiTpMSsix6A3gNzm+KmchBIIi8jT1kmuSutv2Rply8MyY2XecIY8
TRHz7VFNM3xFWp0xV8+Y1BXvGtuhWzGwq4Nnqm/5DypB1s/ZKYl670MddBZRtcTV
LLz/hR39M3daHDzccTihoXYf55RxkI3uC+Pvofz1YLS6DsIp4JP7fHzFAaTWRWTA
sJH7YfSd86DdQseiiT1/ugYsp4mGKI4yRzeiNXYj5tBxon08obZ2384QkewN5lzC
t01nWJTkUxnGCTNe8CYgVseLpvQslpMHLJvvwKt3rCjthsoase9FcF4tNwIDAQAB
o4ID9TCCA/EwHQYDVR0OBBYEFCeNLX5N3B2zpXQt1Br7wJdJwjqaMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvSjQwdGZrM2NIYk9sZEMzVUd2dkFsMG5DT3BvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICCQYIKwYBBQUHAQcBAf8EggH4MIIB9DCCAfAEAgABMIIB
6AMEAKMFHgMEAKMFITAMAwQAowUjAwQAowUkAwQBowU6MAwDBACjBT0DBACjBT4D
BACjBUADBAGjBUIDBAGjBUYDBACjBUswDAMEAKMFTQMEBKMFQDAMAwQAowVTAwQA
owVUAwQBowVWAwQAowVZMAwDBACjBVsDBACjBVwDBAGjBV4DBACjBWEwDAMEAKMF
YwMEAKMFZDAMAwQDowVoAwQAowVqMAwDBAGjBW4DBAKjBXAwDAMEAKMFeQMEAKMF
fgMEAKMFgDAMAwQBowWGAwQBowWIAwQAowWLMAwDBACjBY0DBASjBYAwDAMEAKMF
kQMEAKMFkgMEAKMFlAMEAaMFljAMAwQAowWbAwQAowWcAwQAowWgMAwDBAGjBaID
BAOjBaADBACjBaoDBAGjBawwDAMEAKMFrwMEAqMFsDAMAwQAowW1AwQAowW2AwQA
owW6AwQBowW8AwQAowW/AwQAowXDAwQAowXGAwQAowXJMAwDBACjBcsDBAGjBcww
DAMEAKMFzwMEAaMF1DAMAwQDowXYAwQAowXcMAwDBACjBd8DBACjBeADBACjBeQw
DAMEAKMF5wMEAaMF6AMEAKMF6wMEAKMF8QMEAKMF9DAMAwQAowX3AwQBowX8AwQA
owX/AwQAuf02MA0GCSqGSIb3DQEBCwUAA4IBAQBU/37ussGlqXeKBtyTT2MI9at6
9ZHMmoH9IiccdoDT/Li+3DS3rSI0pphwriGUJxwRWvOI/mhW92z1xndsBLeuWlwd
9HBJDx3/rZ34ZOVqq8Y5M/7q488oR6RwfJh5SWzAz7KJTnARpQvUc+x2j1sZ02Cp
H2oJhBdClgWF6nWGtLhc0sPX4Vi8KY6+ryGgRnxh1bptum59to/KCyxDB0wMPq4a
w0XmLdWFVFRSVQRaP8xq2TRv2KwXnuWuO81qZN5qsN0sH+/flFznVGn+k38aqqDC
APDaOysgX/BEI8Xih4+M2YbiVDvykbSbs/AWN8YA5AQNQeZivB2BSk1Osx7i
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:30 2024 by rpki-client on console-ams.rpki-client.org