Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Roqr1Jf4JntnzcKO6ncIyo7Kug0.roa
File: Roqr1Jf4JntnzcKO6ncIyo7Kug0.roa (raw, json)
Hash identifier: 4bCQh5uKTZnWCp+IyLOy4KvB3rkux1d2hrCKicXeZuo=
Subject key identifier: 46:8A:AB:D4:97:F8:26:7B:67:CD:C2:8E:EA:77:08:CA:8E:CA:BA:0D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B28BA8BE7FD8F26D3C757EA07346A9311
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Roqr1Jf4JntnzcKO6ncIyo7Kug0.roa
Signing time: Fri 13 Oct 2023 11:09:55 +0000
ROA not before: Fri 13 Oct 2023 11:09:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:ba:8b:e7:fd:8f:26:d3:c7:57:ea:07:34:6a:93:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 13 11:09:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468aabd497f8267b67cdc28eea7708ca8ecaba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:57:76:98:bc:58:b2:a0:6f:5e:97:1d:8a:b7:
ce:57:92:2e:59:61:06:51:69:07:46:1f:ae:9c:46:
83:48:90:92:07:f1:28:41:9d:00:92:7d:ef:3b:d7:
78:0e:e5:0b:0e:ff:a0:f0:66:22:0a:b3:96:d5:03:
5e:f8:7d:77:72:95:b9:90:5b:8c:fd:91:d2:64:39:
f8:e9:a5:24:81:67:c2:46:06:fa:96:c3:de:8d:ea:
3b:27:e8:2a:1a:4b:d5:70:c8:7d:e7:a6:bc:d9:aa:
78:71:aa:b0:64:95:f2:fb:f8:58:23:84:00:70:22:
65:1a:ef:40:8f:35:2e:4a:21:20:9c:ad:0f:40:69:
ac:50:0a:24:29:12:8c:cd:85:2a:25:56:ab:19:ff:
03:3e:2f:87:99:67:d4:ba:00:fc:53:f4:17:c2:c3:
7b:5d:a5:37:c3:87:3c:d1:ac:5a:c8:08:bb:b4:50:
fd:e0:52:64:3a:2a:41:de:8f:ce:08:1f:eb:f0:90:
dd:b8:c6:29:85:0c:76:bc:f2:ca:e0:ad:c8:11:82:
f9:12:97:4a:dd:dc:1f:65:91:1e:1c:f6:48:c4:de:
a8:8c:57:4c:70:6f:19:ca:67:b3:7d:9b:be:c9:3e:
3f:36:90:7c:2c:92:52:d8:dd:cb:78:ca:fb:5f:47:
dd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:AB:D4:97:F8:26:7B:67:CD:C2:8E:EA:77:08:CA:8E:CA:BA:0D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Roqr1Jf4JntnzcKO6ncIyo7Kug0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.62.0/24
163.5.71.0/24
163.5.75.0/24
163.5.79.0/24
163.5.83.0/24
163.5.87.0/24
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.120.0-163.5.122.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0-163.5.162.255
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.176.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0/24
163.5.212.0/24
163.5.217.0-163.5.218.255
163.5.220.0/24
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:42:74:e6:b3:a0:eb:75:bb:1f:25:24:88:67:d7:f5:a4:14:
84:5d:3b:97:1e:6b:38:76:30:cf:91:10:3f:8f:35:89:bb:f9:
89:61:96:61:ce:af:0e:bb:2b:4c:ee:05:2a:6a:09:a7:be:56:
e0:0f:5f:28:a0:e4:28:5f:ce:73:25:88:f8:4e:38:52:eb:4f:
aa:60:88:90:a0:ee:80:90:ee:47:00:86:33:ba:f1:f3:16:49:
d0:a5:0a:d3:c4:93:76:11:7a:92:6d:41:90:b5:a8:43:32:e2:
48:a6:d2:30:f4:7b:ed:59:fa:d4:a8:7d:61:65:f3:7e:a0:34:
e1:17:45:3a:e3:75:bc:34:f4:69:ed:71:3f:0f:7c:0b:cf:22:
27:9e:65:70:a7:0b:b5:49:ec:fb:cb:d6:2d:a6:f0:28:3c:90:
b4:e1:8e:f7:46:a7:d5:e2:d4:49:01:f3:28:b3:a3:99:13:76:
58:bc:af:ff:c0:ad:76:3c:68:ce:b8:5c:82:76:e5:76:80:3a:
01:b3:74:d2:3a:14:b3:b0:ce:90:b2:09:ed:f9:ef:a8:82:d5:
e9:ef:2c:66:14:bf:28:e6:02:af:77:f1:a4:da:fa:16:75:20:
40:a1:dd:d9:99:06:36:90:f9:d2:f1:5b:ec:fd:f3:a0:26:1d:
4d:da:92:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 15 17:41:56 2023 by rpki-client on console-fra.rpki-client.org