Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RWLIVg8imhj5c8gYbokvLR79jz0.roa
File: RWLIVg8imhj5c8gYbokvLR79jz0.roa (raw, json)
Hash identifier: 1xH5j0Uarx5Zj9+Y2bd/jjwNUNy/xgPeoHc8092OS1w=
Subject key identifier: 45:62:C8:56:0F:22:9A:18:F9:73:C8:18:6E:89:2F:2D:1E:FD:8F:3D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01894AF2C73EF9C60718736D4EECC4FBEC3A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RWLIVg8imhj5c8gYbokvLR79jz0.roa
Signing time: Wed 12 Jul 2023 16:32:52 +0000
ROA not before: Wed 12 Jul 2023 16:32:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 20:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4a:f2:c7:3e:f9:c6:07:18:73:6d:4e:ec:c4:fb:ec:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 12 16:32:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4562c8560f229a18f973c8186e892f2d1efd8f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:b0:73:50:9e:07:61:07:b2:bc:76:fd:03:
f7:cc:a1:99:69:08:df:b4:a1:2f:d9:0f:35:61:e9:
fc:5b:36:2f:05:a5:ae:23:2c:18:4f:94:4a:20:54:
31:be:13:fe:41:75:f4:7d:cb:0c:6f:56:ec:8c:15:
f3:22:14:52:31:9a:f7:2e:52:50:63:50:24:22:22:
cd:2c:37:90:f5:2f:06:5d:bc:9c:b6:bf:2f:db:76:
8a:8c:fe:c9:9f:d6:cb:7d:cb:32:ad:39:8c:b0:1a:
7a:16:e0:62:9e:cd:e3:13:ed:33:23:d8:d4:53:a7:
94:f5:00:2a:67:b5:6f:f3:be:98:24:0a:55:dd:14:
f2:61:68:6b:b8:af:a6:25:d6:f7:4e:7e:16:9d:c8:
b7:24:72:43:68:da:6d:a7:11:3a:f0:1f:a0:bd:23:
fc:9d:9c:d9:c9:7a:d3:b6:6c:41:5c:99:5f:13:6e:
35:63:37:83:0f:c2:01:43:91:ba:66:f1:5b:43:7f:
b7:20:fb:91:33:98:fc:15:cc:15:ca:3e:98:e9:06:
e9:3c:88:4a:3c:71:b2:3f:c8:06:cc:7d:79:32:15:
d2:96:85:b2:29:5e:d9:d6:bf:6f:37:c8:ee:1c:78:
30:0f:76:69:81:75:fc:29:f9:9f:c4:1f:c7:4c:ba:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:C8:56:0F:22:9A:18:F9:73:C8:18:6E:89:2F:2D:1E:FD:8F:3D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RWLIVg8imhj5c8gYbokvLR79jz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0-163.5.37.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/24
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.104.0/22
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0-163.5.122.255
163.5.125.0-163.5.126.255
163.5.128.0/24
163.5.130.0/24
163.5.132.0-163.5.134.255
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.160.0-163.5.165.255
163.5.167.0/24
163.5.169.0-163.5.170.255
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.184.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.209.0-163.5.210.255
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a3:2e:f7:ff:9c:0f:a5:5b:41:ff:5f:f9:4f:8f:2e:9a:12:
b6:ca:a1:59:c7:61:94:cb:7f:27:60:8e:40:f4:fa:b1:9b:c4:
6f:ab:31:0b:60:aa:5e:e4:ee:55:4c:cf:8c:4e:67:44:6c:12:
2d:98:dc:cc:bb:34:38:34:80:21:71:ea:78:d7:c6:21:19:a0:
20:6a:34:18:67:ad:3c:56:7c:81:dc:88:ee:a2:50:30:30:7b:
d3:87:90:b3:1e:8e:7e:16:c4:32:18:44:a7:dc:0a:54:24:c0:
7e:86:ba:69:59:e5:be:3b:59:42:68:ea:0f:84:85:81:81:69:
a0:dd:b9:2f:ab:f9:8f:02:8f:69:26:5a:ba:54:5c:5e:37:cc:
3f:b0:3b:de:72:22:8a:82:ce:81:40:df:53:14:d8:f7:7f:29:
ec:d1:65:0a:78:d6:89:f2:65:0d:96:c0:e5:d0:24:12:bc:ff:
e4:b9:30:cf:1f:1b:6a:db:f0:7a:85:76:e3:d2:83:5e:64:23:
16:07:e1:35:e0:96:0e:8e:09:e0:d6:f3:13:da:fb:4a:8d:74:
9c:05:59:1a:be:8f:1c:53:d7:fb:72:1e:bf:fa:94:90:8b:a5:
c8:a0:43:2e:af:da:ba:83:df:24:a0:67:c7:d9:1e:d0:04:a8:
14:3c:41:00
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgISAYlK8sc++cYHGHNtTuzE++w6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNzEyMTYzMjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTYyYzg1NjBmMjI5YTE4Zjk3M2M4MTg2ZTg5MmYyZDFlZmQ4ZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkmwc1CeB2EHsrx2/QP3zKGZaQjf
tKEv2Q81Yen8WzYvBaWuIywYT5RKIFQxvhP+QXX0fcsMb1bsjBXzIhRSMZr3LlJQ
Y1AkIiLNLDeQ9S8GXbyctr8v23aKjP7Jn9bLfcsyrTmMsBp6FuBins3jE+0zI9jU
U6eU9QAqZ7Vv876YJApV3RTyYWhruK+mJdb3Tn4Wnci3JHJDaNptpxE68B+gvSP8
nZzZyXrTtmxBXJlfE241YzeDD8IBQ5G6ZvFbQ3+3IPuRM5j8FcwVyj6Y6QbpPIhK
PHGyP8gGzH15MhXSloWyKV7Z1r9vN8juHHgwD3ZpgXX8KfmfxB/HTLpQwQIDAQAB
o4IEDzCCBAswHQYDVR0OBBYEFEViyFYPIpoY+XPIGG6JLy0e/Y89MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvUldMSVZnOGltaGo1YzhnWWJva3ZMUjc5anowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICIwYIKwYBBQUHAQcBAf8EggISMIICDjCCAgoEAgABMIIC
AgMEAKMFHjAMAwQAowUhAwQBowUkAwQBowU6MAwDBACjBT0DBACjBT4DBACjBUAD
BAGjBUIwDAMEAaMFRgMEAKMFSDAMAwQAowVNAwQEowVAAwQAowVTAwQAowVWAwQA
owVZAwQAowVcAwQAowVfAwQBowViAwQCowVoMAwDBAGjBW4DBAKjBXAwDAMEAKMF
dQMEAKMFdjAMAwQDowV4AwQAowV6MAwDBACjBX0DBACjBX4DBACjBYADBACjBYIw
DAMEAqMFhAMEAKMFhgMEAaMFijAMAwQAowWNAwQEowWAMAwDBACjBZEDBACjBZID
BACjBZQDBAGjBZYDBACjBZkwDAMEBaMFoAMEAaMFpAMEAKMFpzAMAwQAowWpAwQA
owWqAwQBowWsAwQAowWvAwQBowWyMAwDBACjBbUDBACjBbYwDAMEA6MFuAMEAKMF
ugMEAaMFvAMEAKMFvwMEAKMFwzAMAwQAowXFAwQAowXGAwQAowXJMAwDBACjBcsD
BAGjBcwwDAMEAKMF0QMEAKMF0gMEAaMF1DAMAwQDowXYAwQAowXcMAwDBAGjBd4D
BACjBeAwDAMEAaMF4gMEAKMF5AMEAKMF5gMEAKMF6AMEAKMF6zAMAwQAowXtAwQA
owXuAwQAowXxMAwDBACjBfMDBAGjBfQDBAOjBfgDBAC5/TYwDQYJKoZIhvcNAQEL
BQADggEBAEGjLvf/nA+lW0H/X/lPjy6aErbKoVnHYZTLfydgjkD0+rGbxG+rMQtg
ql7k7lVMz4xOZ0RsEi2Y3My7NDg0gCFx6njXxiEZoCBqNBhnrTxWfIHciO6iUDAw
e9OHkLMejn4WxDIYRKfcClQkwH6GumlZ5b47WUJo6g+EhYGBaaDduS+r+Y8Cj2km
WrpUXF43zD+wO95yIoqCzoFA31MU2Pd/KezRZQp41onyZQ2WwOXQJBK8/+S5MM8f
G2rb8HqFduPSg15kIxYH4TXglg6OCeDW8xPa+0qNdJwFWRq+jxxT1/tyHr/6lJCL
pcigQy6v2rqD3ySgZ8fZHtAEqBQ8QQA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:05 2024 by rpki-client on console-fra.rpki-client.org