Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SOHXRNK86xqVqk4xjvhAGbgj3eE.roa
File: SOHXRNK86xqVqk4xjvhAGbgj3eE.roa (raw, json)
Hash identifier: saWH1136+W5XmXp+qMozNt8Jpeyaci/OwlvNcAzU+yc=
Subject key identifier: 48:E1:D7:44:D2:BC:EB:1A:95:AA:4E:31:8E:F8:40:19:B8:23:DD:E1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01898E863413EC425477C54DC93E0B04574F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SOHXRNK86xqVqk4xjvhAGbgj3eE.roa
Signing time: Tue 25 Jul 2023 19:28:27 +0000
ROA not before: Tue 25 Jul 2023 19:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8e:86:34:13:ec:42:54:77:c5:4d:c9:3e:0b:04:57:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 25 19:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48e1d744d2bceb1a95aa4e318ef84019b823dde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:20:13:e1:f3:7f:fd:cf:a7:22:80:59:32:
93:bc:7e:8a:94:dd:15:32:9f:61:7c:ea:80:8d:63:
e9:f4:d2:f6:10:d9:f6:1c:ca:a2:53:12:b3:15:0d:
30:a6:51:ba:2c:cc:d8:d1:ef:81:af:d5:d5:59:78:
67:3c:7e:e1:80:50:6f:7d:22:a4:eb:1d:f7:5b:f3:
1e:66:5a:5c:33:11:a5:c0:53:21:aa:f9:68:d4:72:
6c:34:8f:0b:89:34:e8:43:40:c7:9e:ab:43:b2:83:
cb:b6:80:ea:c8:72:ff:c4:0a:de:72:e5:f3:7f:7c:
89:39:18:c3:9a:c3:c8:24:88:20:9b:95:c9:84:9d:
5e:76:cd:00:36:67:f7:c0:3b:2c:1d:f8:90:69:45:
a1:05:f5:82:5a:a2:e6:89:3d:35:bc:11:7c:03:77:
72:46:ec:9f:1a:13:f9:d6:37:69:66:83:ef:7c:f7:
54:44:69:59:48:91:c7:f2:20:a8:5a:21:35:70:dd:
f2:c4:17:0c:7d:13:d1:81:be:99:ad:42:64:0e:d0:
96:5b:67:95:5d:76:fd:f6:b3:5c:9b:72:9a:3e:42:
ad:38:8b:7a:94:5a:0d:28:5e:5f:04:6f:97:43:48:
a5:02:3a:67:73:06:cc:3d:91:fe:4e:86:5c:e0:56:
c6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E1:D7:44:D2:BC:EB:1A:95:AA:4E:31:8E:F8:40:19:B8:23:DD:E1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SOHXRNK86xqVqk4xjvhAGbgj3eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/24
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.125.0-163.5.126.255
163.5.128.0/24
163.5.133.0-163.5.134.255
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.156.0-163.5.158.255
163.5.160.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.209.0-163.5.210.255
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b7:49:c2:3b:2e:97:80:18:ff:ed:fc:e3:46:83:d2:bd:35:
5a:a9:5d:f4:7e:8e:6e:83:1b:26:db:7a:f7:06:51:13:bc:d3:
ed:49:48:bd:82:d2:be:e2:73:b1:25:33:9d:6a:11:3c:bd:55:
48:b9:5f:23:cd:b4:73:da:1a:0e:ea:ba:22:b1:ab:17:4f:99:
77:e4:e1:7c:2c:50:a9:7c:40:d6:bc:ed:97:f1:1c:e0:01:eb:
af:65:a3:02:98:66:60:f1:45:8c:4c:31:e8:b9:0d:5a:b0:49:
16:54:90:3c:23:20:c7:3f:4c:4a:06:10:22:b1:fd:bb:6d:3e:
d3:f1:b9:f1:3e:fe:b4:86:f2:0d:99:4a:12:10:bc:36:e8:cd:
df:ec:88:59:e8:18:28:20:da:c8:e5:3a:0c:51:af:5a:4f:4a:
fb:44:05:48:d6:2e:3a:17:d8:64:94:79:1f:bd:2c:bc:a4:91:
fd:85:f0:60:ce:e3:1d:81:67:06:31:3d:15:54:4e:c3:2a:18:
e7:9b:94:54:9c:21:68:23:f9:42:6a:5b:ed:df:f7:fc:7e:5e:
13:e7:87:04:d9:e6:e1:89:0c:4a:e6:36:a0:c7:1b:4b:ab:a6:
d4:fe:79:79:8c:e6:67:e1:70:82:ce:65:12:4a:d8:ce:77:bc:
76:55:49:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 28 10:22:00 2023 by rpki-client on console-ams.rpki-client.org