Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QJW-xprJVr_UDtZr8d8DI36S8kg.roa
File: QJW-xprJVr_UDtZr8d8DI36S8kg.roa (raw, json)
Hash identifier: jO0eFwYrhZHBOBOQe/WwYXT+ML9Kho/5fH+KHGagYhg=
Subject key identifier: 40:95:BE:C6:9A:C9:56:BF:D4:0E:D6:6B:F1:DF:03:23:7E:92:F2:48
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A294D32386FBFF4B2AAE4D306AD482F4B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QJW-xprJVr_UDtZr8d8DI36S8kg.roa
Signing time: Thu 24 Aug 2023 20:47:19 +0000
ROA not before: Thu 24 Aug 2023 20:47:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Aug 2023 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:29:4d:32:38:6f:bf:f4:b2:aa:e4:d3:06:ad:48:2f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 24 20:47:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4095bec69ac956bfd40ed66bf1df03237e92f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:34:ed:4a:e8:7e:29:f2:c5:ef:c3:fe:bd:46:
54:dd:27:63:0a:a4:03:57:34:36:58:0c:39:11:8a:
6e:18:01:b8:64:4a:d0:6c:9c:86:52:ae:66:61:a2:
2a:6d:7e:f6:13:5c:3e:95:cc:c2:f5:7b:1c:12:40:
f3:4f:d1:90:e0:02:6f:09:1c:5d:74:8c:38:91:f2:
3a:20:51:c1:b8:27:6f:16:54:71:52:da:10:67:74:
92:36:80:55:ad:b5:50:53:fd:1c:ef:20:3c:25:d1:
f6:4f:b8:ef:c9:09:8b:99:92:d0:c5:84:ac:68:78:
b3:2e:13:b2:9a:6e:56:55:5c:38:75:fd:a8:4a:29:
27:5e:48:0a:5c:f4:35:1b:93:0c:8f:b5:5e:0c:7a:
70:43:50:79:41:fd:11:d5:db:cb:68:11:26:02:d0:
ea:e6:04:14:7a:48:22:30:cc:53:8e:3f:6a:c4:be:
ae:d3:c5:f7:1d:2c:2f:b7:f8:07:ae:74:f4:f2:b5:
8b:b3:53:2d:e0:39:b5:bd:5b:b6:ca:53:03:64:f0:
58:bc:52:5c:90:6e:0b:9c:41:db:34:2a:73:70:03:
31:fb:4f:e9:c4:39:fd:25:f4:0b:6c:65:5a:cb:88:
d7:90:ed:31:c2:91:40:dd:f6:a9:b5:6b:32:be:f8:
75:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:BE:C6:9A:C9:56:BF:D4:0E:D6:6B:F1:DF:03:23:7E:92:F2:48
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QJW-xprJVr_UDtZr8d8DI36S8kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/24
163.5.70.0/23
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/22
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/21
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.208.255
163.5.210.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/23
163.5.235.0/24
163.5.237.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:e6:cb:22:3c:70:58:2f:cd:6f:bd:1d:13:73:45:2b:cb:
8f:b2:cd:5e:4f:13:11:37:ca:a2:73:69:28:bb:0d:fa:86:b2:
c6:9a:fa:67:7c:58:7d:17:f4:b9:78:8d:de:8d:a3:d2:f0:99:
d8:43:01:91:d2:a0:71:a4:ca:74:d6:92:9e:20:a3:89:b3:c7:
e1:79:96:03:c2:be:34:c5:2a:b2:78:a6:b3:98:4a:a4:64:84:
e2:f0:cb:fa:9c:30:d7:f3:c0:d7:9e:0a:42:ef:88:b2:89:06:
0c:1b:3e:2c:da:e3:8c:e7:21:92:8a:75:3f:b3:57:0f:7e:1b:
84:e9:25:8d:ba:37:ee:2a:25:24:0e:8d:6a:ae:9a:a3:0d:10:
9c:0a:1b:fa:b7:a5:bc:98:0b:da:bf:08:43:68:ca:82:a4:70:
fb:38:b6:e6:ac:51:ca:f3:05:5c:c5:62:ae:42:5c:91:5e:88:
91:2b:4e:a8:a1:08:2a:63:b6:81:6b:3d:b9:8b:e4:93:3b:ed:
3f:70:cd:b9:f2:a9:a9:6f:7f:8e:84:99:1b:b1:ce:c6:12:16:
07:12:e8:1c:0d:6d:fa:88:1d:cd:b7:30:69:5d:21:04:54:90:
8d:8c:00:61:1d:21:ee:08:03:a0:b4:40:33:9b:fc:c0:62:cd:
a3:b7:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:31 2024 by rpki-client on console-ams.rpki-client.org