Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q4CTaFwL0Fiuq3Mn6ceWpZmgzQ8.roa
File: Q4CTaFwL0Fiuq3Mn6ceWpZmgzQ8.roa (raw, json)
Hash identifier: 1U8NTjQmRP+fOCFHuSNcJWXNHoEeU3KFW/Cggh80fv4=
Subject key identifier: 43:80:93:68:5C:0B:D0:58:AE:AB:73:27:E9:C7:96:A5:99:A0:CD:0F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018871021F8B4BEEADD2659B906A2DC727BE
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q4CTaFwL0Fiuq3Mn6ceWpZmgzQ8.roa
Signing time: Wed 31 May 2023 08:52:24 +0000
ROA not before: Wed 31 May 2023 08:52:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:02:1f:8b:4b:ee:ad:d2:65:9b:90:6a:2d:c7:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 31 08:52:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=438093685c0bd058aeab7327e9c796a599a0cd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:ab:db:3c:06:f2:d3:5d:ef:06:20:55:eb:
8f:06:c1:e7:5b:7c:d6:0e:71:1b:25:7f:12:71:93:
4d:27:ce:33:83:d2:10:0b:9c:ce:da:f2:b2:8b:15:
ef:a3:66:85:dd:17:e7:9e:9c:b7:ba:eb:8c:80:4d:
a5:32:17:83:c1:60:7b:2c:ee:d8:4f:e5:50:52:24:
5d:c6:bd:c1:8c:9b:11:d4:cd:7f:0c:0c:0c:cf:fc:
a2:ea:bc:12:09:8b:da:f7:f9:fb:30:f3:7b:9f:74:
1d:60:68:6d:d4:9a:0c:67:f1:0c:c5:53:73:a3:61:
c5:6a:65:82:75:33:33:6e:9c:41:c7:10:c4:aa:3b:
50:cb:46:35:f6:4e:d7:13:73:aa:bb:c3:c0:2f:64:
c0:5b:1b:f3:00:88:a7:2d:03:2c:01:81:35:63:91:
a1:ba:36:92:ea:52:68:04:f6:12:a8:b0:a2:5b:df:
94:66:d3:54:d0:d2:2d:91:ae:93:76:c0:1a:53:5b:
f5:3d:13:54:32:1c:ae:1b:b5:45:7f:c9:34:ca:c6:
57:f6:fa:ad:6f:9a:6e:f5:27:f6:a3:ef:30:91:c6:
f3:1f:19:81:18:a6:c8:03:93:85:8c:d5:53:84:36:
bd:4d:d2:8e:2e:1f:fb:0e:96:6a:90:ae:f6:84:62:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:93:68:5C:0B:D0:58:AE:AB:73:27:E9:C7:96:A5:99:A0:CD:0F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Q4CTaFwL0Fiuq3Mn6ceWpZmgzQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0/24
163.5.86.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.117.0-163.5.121.255
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0-163.5.148.255
163.5.150.0/23
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.213.0/24
163.5.216.0/22
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0/24
163.5.245.0/24
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
28:57:fe:43:f2:0f:f2:31:b9:da:1f:eb:5b:6f:57:7f:13:8c:
81:25:59:c3:a4:8e:d1:92:6f:b8:df:a2:b9:fe:ad:cf:22:78:
19:6b:f2:24:cd:77:41:85:7d:2f:b0:88:f9:8a:3e:81:43:87:
2e:34:c5:25:47:3f:94:95:62:e9:c7:89:c6:38:51:ca:65:b6:
d4:2b:2f:6e:58:ec:a7:11:d6:dc:10:df:85:6b:41:77:b4:6a:
7e:f7:a2:92:9c:7b:5a:04:8c:c4:e0:be:56:3d:8a:14:ef:de:
29:b1:ff:fb:1c:24:a0:ad:cb:ff:2e:45:6d:22:6a:f9:bb:2d:
e2:f6:b0:d3:0c:5b:d7:b8:90:62:16:bc:e4:fd:5e:6c:52:be:
ac:8f:93:9a:ca:f6:9e:77:79:06:22:ea:e8:7b:8f:5b:5c:d0:
a8:fb:f7:85:4b:d4:ac:f8:37:1d:92:a7:20:e3:32:18:f7:19:
ba:9e:fe:e1:6c:b5:e3:85:3e:c1:55:ea:71:cf:3d:79:2b:74:
6a:6e:eb:ea:95:e3:f1:05:56:a4:71:70:49:a3:e3:80:99:0c:
92:f5:bc:84:c1:67:96:dd:c6:5a:e2:61:27:d2:01:04:41:c0:
34:29:6f:70:9d:a3:06:b4:89:27:ac:fe:02:9a:47:75:30:93:
7e:ee:dd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org