Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QuKVOYlhhTx7AhJHUA-mey_9RCU.roa
File: QuKVOYlhhTx7AhJHUA-mey_9RCU.roa (raw, json)
Hash identifier: m89f0Z2GVNuhW18N9Fx6nu/sRc1gBgw04Wom3xnXUL8=
Subject key identifier: 42:E2:95:39:89:61:85:3C:7B:02:12:47:50:0F:A6:7B:2F:FD:44:25
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018867BFD4AE7837B6C9596E6AB0B07D4E0B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QuKVOYlhhTx7AhJHUA-mey_9RCU.roa
Signing time: Mon 29 May 2023 13:43:25 +0000
ROA not before: Mon 29 May 2023 13:43:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:67:bf:d4:ae:78:37:b6:c9:59:6e:6a:b0:b0:7d:4e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 29 13:43:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=42e295398961853c7b021247500fa67b2ffd4425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:e4:a4:46:a2:80:d7:9a:4b:8d:9b:66:95:
62:5f:f3:dc:6c:91:8c:36:84:e5:01:34:82:3c:2e:
86:ae:c9:91:cc:c6:05:ad:e7:21:9a:49:2e:c8:63:
06:ae:f4:b8:80:9a:39:f5:80:31:68:2b:72:82:6c:
65:e3:4d:b9:50:48:1c:30:0e:30:af:d3:9d:89:59:
05:66:5c:fd:62:e7:49:7b:4a:a1:df:0e:22:e7:d2:
b1:95:05:9d:de:01:ef:22:77:4e:a7:1d:c5:fe:dd:
78:5f:0a:1a:7d:9c:d9:9f:08:d8:1b:66:30:69:35:
bd:1f:63:45:d7:51:b8:f4:73:c9:f3:0e:8b:1b:54:
ad:09:0c:c8:53:3c:46:6a:63:17:70:ed:b0:a7:e7:
80:8a:3d:ab:89:84:8f:2e:c2:e5:2e:a8:08:48:64:
98:f7:69:75:66:de:ee:3f:d9:0b:85:71:21:f8:e8:
55:b3:81:6b:33:59:6c:d6:69:dd:6f:fc:e8:0a:9d:
cc:47:cb:26:f8:f2:c8:de:cf:9f:21:ab:c9:74:76:
c5:43:fd:a2:3c:55:9a:73:a1:56:9b:e3:a5:70:b9:
b5:c2:a1:82:4b:1f:da:a4:7b:5b:88:12:74:e0:a7:
70:73:71:9f:35:e4:f9:1d:f9:4b:d1:94:d2:18:2c:
b6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:95:39:89:61:85:3C:7B:02:12:47:50:0F:A6:7B:2F:FD:44:25
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/QuKVOYlhhTx7AhJHUA-mey_9RCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0/24
163.5.86.0-163.5.89.255
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.117.0-163.5.121.255
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0-163.5.148.255
163.5.150.0/23
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.189.255
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.213.0/24
163.5.216.0/22
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0/24
163.5.245.0/24
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a5:bc:3e:0b:f4:b6:2d:1c:74:93:c2:8e:0c:ee:09:55:0b:
1a:6b:2b:e7:9c:53:38:f7:a3:01:43:0d:f8:f2:6b:b0:7c:60:
e1:4e:c2:f9:59:de:32:de:fe:19:36:46:5c:67:bd:e9:82:8b:
4d:04:6e:55:f3:9c:b0:ba:32:13:b1:13:36:c1:c1:9f:fc:2d:
2b:ea:fb:32:6b:9c:3e:52:f0:22:aa:44:2e:43:2c:1e:7c:bb:
a8:58:50:01:ca:b5:55:78:c0:f1:c2:72:65:5c:c8:fd:d6:f3:
cf:74:37:02:ab:ff:c8:45:ec:5e:75:5e:c5:e4:a0:c7:d5:28:
03:23:63:a0:ce:fd:db:f4:d3:28:08:04:ad:27:e5:af:32:01:
a9:34:bd:0c:81:a0:a9:58:d6:6f:ba:8a:14:f7:10:d5:ef:9f:
f2:74:61:f2:18:a9:c2:4a:3b:35:4b:5e:33:0f:b0:3d:34:14:
0b:cf:e4:1c:60:3c:11:54:89:7b:6e:58:f7:7a:1e:af:c0:fd:
09:97:fd:03:de:66:fb:7f:cd:96:52:4a:d4:0e:51:81:94:0f:
af:4f:5b:c0:a1:6c:b5:47:4b:e1:e6:bc:f9:d7:ec:e1:50:eb:
e9:0f:dd:9a:3b:9f:6a:df:73:b4:c9:53:a9:1d:77:01:28:83:
57:f7:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org