Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ND0uupHSOLP87ZrMI_5qTJRmCIY.roa
File: ND0uupHSOLP87ZrMI_5qTJRmCIY.roa (raw, json)
Hash identifier: 719bJ7lv3fKJqMcFUZIRPgHDbAXXA0lXNi06A5hvMhE=
Subject key identifier: 34:3D:2E:BA:91:D2:38:B3:FC:ED:9A:CC:23:FE:6A:4C:94:66:08:86
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188D4BD2144D53F5E61E6D1BDE8D3EB40B6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ND0uupHSOLP87ZrMI_5qTJRmCIY.roa
Signing time: Mon 19 Jun 2023 17:39:04 +0000
ROA not before: Mon 19 Jun 2023 17:39:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:bd:21:44:d5:3f:5e:61:e6:d1:bd:e8:d3:eb:40:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 19 17:39:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=343d2eba91d238b3fced9acc23fe6a4c94660886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:36:0f:62:0e:a7:6a:c0:cb:b8:a6:6f:ac:
c1:ab:8d:99:35:b5:0e:4f:35:da:ad:2a:99:e6:4d:
25:dd:77:2e:76:20:50:21:37:f1:c4:e6:60:ea:5e:
21:5c:ec:6d:e5:b1:1c:ed:c8:b8:e0:f5:02:19:41:
bc:8b:ba:31:1e:5e:29:db:07:ee:e3:f1:70:96:00:
c4:43:a3:02:7e:b5:6b:f3:c4:11:68:45:03:92:26:
9f:e1:dc:a3:e0:a1:8b:ee:aa:7b:2f:17:c7:fd:76:
5d:e7:b2:fa:64:e1:1c:94:59:aa:0f:b3:f9:f2:ab:
f8:c5:86:f7:64:a5:b6:36:0a:c1:03:06:c1:fb:7b:
47:ad:31:63:e5:ce:66:86:9d:dd:85:f1:12:2b:2d:
21:d1:2c:bd:2e:12:66:11:2f:ea:9f:92:1a:79:98:
67:dc:1c:cc:fd:a5:f9:f0:82:29:3d:eb:c0:bc:06:
5a:51:ce:4c:cf:57:7f:01:09:e5:89:c2:a5:9b:9f:
77:dd:9a:bb:cc:00:ef:96:31:a8:4c:64:a0:68:3e:
8f:7a:da:9e:80:e2:dc:fd:dd:79:10:e7:ef:02:9d:
7e:a5:1d:e1:dc:03:d1:c3:15:4f:6b:2a:61:e5:97:
18:d8:c0:c7:cb:9c:e7:c3:b3:f6:01:ba:ac:b7:d7:
02:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:2E:BA:91:D2:38:B3:FC:ED:9A:CC:23:FE:6A:4C:94:66:08:86
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ND0uupHSOLP87ZrMI_5qTJRmCIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.123.0/24
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.153.0/24
163.5.156.0/23
163.5.159.0-163.5.164.255
163.5.167.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:15:aa:e2:ba:52:80:9e:0c:5d:58:ac:1d:0b:81:5b:8d:e7:
02:3c:47:a1:d1:17:d5:30:7d:14:dd:6e:db:f6:36:57:88:c6:
da:fd:66:b5:62:21:c8:c6:37:6f:89:54:b3:91:75:8d:ea:74:
ef:a4:82:56:36:a5:e6:0d:f7:fb:d1:4c:64:19:55:a1:b7:b0:
f3:a6:10:21:26:5e:30:68:e3:ef:dd:1c:37:b9:69:82:a1:4f:
77:ae:f8:d0:8b:42:87:59:13:40:0a:c5:74:96:de:5b:b0:92:
1c:ed:bc:03:a5:05:14:1e:8f:4e:fe:57:7e:94:35:5c:15:27:
e9:3e:1f:cd:0d:91:56:0b:a7:24:30:a8:19:54:0a:db:ea:33:
a9:8e:ea:27:4d:b7:00:db:78:f6:84:1d:11:b8:15:27:7e:11:
0b:0d:38:18:a2:93:2e:c0:4e:a9:ab:b8:d5:c1:c7:eb:6d:ed:
40:f8:0c:a7:46:b3:38:42:76:8c:79:ce:27:24:ff:bc:50:92:
54:f0:5c:a4:75:a4:7a:00:ab:36:73:c1:33:36:d7:a1:c4:b8:
e6:f1:ce:f3:74:6d:bc:a9:94:d0:e4:bc:43:e2:01:d7:93:d6:
29:67:b8:6b:7a:4a:ae:18:cf:48:2c:da:70:62:e5:a0:2d:89:
b0:0f:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org