Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RDqxf7DcKPH9mVQ36_mAACARxPY.roa
File: RDqxf7DcKPH9mVQ36_mAACARxPY.roa (raw, json)
Hash identifier: SZi1zedUS0QgiORXCYWJ3Y0ljJkn/8ufcJjyv4oRyFQ=
Subject key identifier: 44:3A:B1:7F:B0:DC:28:F1:FD:99:54:37:EB:F9:80:00:20:11:C4:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A374E6603EB4B403817AB50823F6A720B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RDqxf7DcKPH9mVQ36_mAACARxPY.roa
Signing time: Sun 27 Aug 2023 14:03:19 +0000
ROA not before: Sun 27 Aug 2023 14:03:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:4e:66:03:eb:4b:40:38:17:ab:50:82:3f:6a:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 27 14:03:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=443ab17fb0dc28f1fd995437ebf980002011c4f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4e:fc:c4:56:e4:c6:a8:a7:4f:b6:fd:04:39:
38:59:75:fb:df:1a:41:d3:07:60:51:ef:2d:27:ef:
4a:2d:a3:62:9f:76:3c:b6:27:1c:b7:34:5f:7d:55:
a3:99:b9:50:1c:10:28:22:2e:54:c3:e0:85:d5:9b:
fe:eb:2b:00:3b:76:a3:1e:ab:17:16:77:78:6f:98:
ca:f9:f6:06:13:f1:d1:71:8c:4c:04:dd:e2:d1:10:
89:f3:dd:88:1b:a9:be:04:74:06:d9:0f:51:97:87:
7e:bb:89:df:35:b9:27:bf:27:a4:c7:e7:92:46:9f:
d0:ce:f0:41:b2:90:02:5e:7f:3b:7f:ae:c9:7d:35:
37:5c:6e:ed:8e:9e:cb:6f:2f:ae:69:aa:74:80:e2:
7e:24:56:e6:b3:dc:a0:38:a2:73:44:a6:66:80:66:
af:3d:0a:85:57:3f:2d:6f:3f:f4:12:3e:74:b1:7e:
9f:59:99:3a:52:b2:64:2f:e4:e7:b4:77:b4:8c:a7:
31:e1:0a:f5:e7:b5:7a:10:f8:c4:8d:0f:f9:01:b2:
1b:02:f8:7c:5a:4d:9a:1e:e7:bf:c5:a0:d4:4b:8a:
06:de:a5:cb:64:d5:78:01:6a:c0:8f:8e:5d:73:f9:
07:7a:61:c8:9a:2f:95:6a:3f:4f:70:92:bf:88:a0:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:B1:7F:B0:DC:28:F1:FD:99:54:37:EB:F9:80:00:20:11:C4:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RDqxf7DcKPH9mVQ36_mAACARxPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/24
163.5.70.0/23
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/22
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/21
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/23
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7e:23:a4:77:59:a0:82:fd:01:1f:bb:e0:ef:94:79:ba:e3:
28:42:f0:bc:0a:76:bd:14:32:d6:1d:52:94:ad:9c:e1:91:83:
1c:c4:07:07:ad:b9:b7:a0:f3:ec:13:c8:80:1f:53:f5:f7:8b:
e2:85:35:83:d0:c4:c9:f0:4a:30:2b:77:51:08:a7:03:ce:56:
2b:c6:d5:a5:c7:78:e4:6b:0a:ac:ec:11:63:72:6b:43:5f:9e:
5c:3c:2e:7b:9c:54:2d:dc:02:88:4f:d7:c7:1c:a2:f2:73:c3:
8c:b7:60:f2:7d:bb:95:60:1e:82:a5:1c:c3:35:8b:b2:74:45:
0e:f7:9a:48:bc:cb:ee:a7:c3:78:b9:2a:9c:1c:0a:25:50:8a:
91:4e:d6:9c:29:be:9c:bf:8d:a7:4b:8a:28:ee:75:f4:6a:99:
e8:f0:33:8b:f2:bd:aa:2e:15:e0:31:f3:7b:d8:c6:fc:01:e3:
dd:97:2f:33:9b:f5:11:02:89:a3:f1:66:ad:f4:6d:00:1e:b2:
02:d8:4d:e6:d2:84:31:e9:64:d6:ea:54:d0:de:de:ba:cd:c0:
f2:c8:0a:19:a9:84:d1:0c:43:75:a9:26:3d:80:c5:01:6c:38:
df:d8:bc:5f:39:2b:72:65:17:90:34:25:8b:d7:54:76:e9:98:
70:82:c1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 06:17:46 2023 by rpki-client on console-ams.rpki-client.org