Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LBRiTFClGemtw_UuDvQi0D0NB7U.roa
File: LBRiTFClGemtw_UuDvQi0D0NB7U.roa (raw, json)
Hash identifier: GZw3zZdFp97HtqpkSOifeWYHJ9o817RVyvJjq2y9kyA=
Subject key identifier: 2C:14:62:4C:50:A5:19:E9:AD:C3:F5:2E:0E:F4:22:D0:3D:0D:07:B5
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0186DAB98376E5A062E07EAA5308140BC425
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LBRiTFClGemtw_UuDvQi0D0NB7U.roa
Signing time: Mon 13 Mar 2023 11:27:16 +0000
ROA not before: Mon 13 Mar 2023 11:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:b9:83:76:e5:a0:62:e0:7e:aa:53:08:14:0b:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Mar 13 11:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c14624c50a519e9adc3f52e0ef422d03d0d07b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:5e:87:73:5b:01:f0:6c:c6:07:b9:7a:e8:
01:91:e5:4c:d3:01:41:d7:cd:ae:d4:f9:7c:51:a1:
b2:5c:8f:4e:0a:ac:a5:b2:e4:fa:da:80:7c:b2:15:
bc:45:0e:f3:da:31:57:0d:d4:08:78:c8:fd:d9:95:
e8:89:8a:ac:9d:82:cd:6f:a4:17:c5:ac:ef:bf:2b:
ad:9e:0c:d3:1e:df:70:be:18:d4:4c:23:88:1b:ea:
fb:06:53:55:3e:be:5e:80:e8:ff:f3:87:fb:19:29:
af:1d:b6:25:07:f2:04:a1:57:84:28:f4:c8:48:1e:
6a:7c:0d:7a:a4:c0:c5:b5:ed:24:de:c4:00:30:ad:
fc:27:e5:8c:f5:c3:fa:13:e2:1a:08:26:e1:2a:13:
e5:b3:c5:ec:e3:11:ea:d3:97:9e:c8:fd:da:6f:16:
76:98:48:45:17:6b:b7:b3:e9:11:22:8c:e5:fc:f6:
a5:48:61:1f:a1:11:49:0d:2f:11:cd:42:17:ce:38:
e5:23:2a:c9:0a:a0:1d:54:58:b7:88:b4:b1:56:dd:
f1:4f:98:5e:15:53:e6:8f:f2:00:32:c7:65:c1:c5:
a0:57:8c:8d:f5:02:75:c0:fe:6d:b9:f7:a7:8e:e5:
75:c9:5c:6d:88:c3:ae:b6:40:fc:49:77:4f:0d:91:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:14:62:4C:50:A5:19:E9:AD:C3:F5:2E:0E:F4:22:D0:3D:0D:07:B5
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LBRiTFClGemtw_UuDvQi0D0NB7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0-163.5.30.255
163.5.32.0-163.5.36.255
163.5.38.0/23
163.5.58.0-163.5.64.255
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0-163.5.89.255
163.5.91.0-163.5.106.255
163.5.108.0-163.5.114.255
163.5.116.0-163.5.120.255
163.5.122.0/23
163.5.125.0-163.5.129.255
163.5.131.0/24
163.5.134.0/23
163.5.137.0-163.5.144.255
163.5.146.0-163.5.148.255
163.5.150.0-163.5.152.255
163.5.154.0-163.5.157.255
163.5.159.0-163.5.172.255
163.5.174.0-163.5.189.255
163.5.191.0-163.5.196.255
163.5.198.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.222.0-163.5.230.255
163.5.232.0/24
163.5.234.0/24
163.5.237.0-163.5.241.255
163.5.243.0-163.5.246.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
62:ff:50:a5:f9:75:dc:de:6c:12:14:59:5a:dd:3a:b1:97:ce:
53:87:84:5c:15:f6:d0:98:68:c0:9e:88:bf:c3:15:d6:9b:45:
bf:fe:e9:82:3d:85:5e:f7:3e:2a:3d:68:25:ef:5e:b6:f7:0e:
5c:58:25:1b:25:df:7c:01:c6:0a:00:f5:b2:d8:fc:de:a3:fd:
63:f3:d0:7a:49:48:c9:68:ec:b3:f3:de:85:98:16:67:cf:ea:
98:dd:d9:8a:d4:da:df:58:b2:36:9d:cc:2e:41:ff:ba:4f:8e:
f8:c3:b1:f4:f6:a0:bb:0f:80:04:65:20:2d:c5:d3:78:f6:83:
23:3a:cf:24:70:7c:a9:22:71:35:c5:8f:97:6c:76:3c:fe:07:
8f:3f:3b:90:80:2a:67:40:ea:d7:9d:dd:5e:13:4f:f6:75:12:
34:58:f8:14:7e:ba:c0:e3:cd:75:04:81:78:21:7c:a0:c1:d9:
21:59:07:73:f0:47:4b:92:b7:b8:7f:7e:70:7a:9f:45:3c:b8:
e6:10:4a:f2:c3:e2:a8:fc:a8:be:18:7e:0a:79:a1:f0:f1:0b:
b0:00:57:ef:64:5e:9b:e3:f2:33:ac:88:37:77:12:64:32:e0:
6f:ed:90:ab:15:c1:62:67:cd:70:5e:79:14:23:cc:b5:47:f7:
f8:b3:1d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org