Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UGpwRk7yN5g-hfXzNOsXv7goKPw.roa
File: UGpwRk7yN5g-hfXzNOsXv7goKPw.roa (raw, json)
Hash identifier: +SMlDdEhwuiZuOY6PA0/TMfl9ubctrF3HTRW6Fqy2x4=
Subject key identifier: 50:6A:70:46:4E:F2:37:98:3E:85:F5:F3:34:EB:17:BF:B8:28:28:FC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B14A4060199515509E285A86C72D20FFA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UGpwRk7yN5g-hfXzNOsXv7goKPw.roa
Signing time: Mon 09 Oct 2023 13:32:55 +0000
ROA not before: Mon 09 Oct 2023 13:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:a4:06:01:99:51:55:09:e2:85:a8:6c:72:d2:0f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 9 13:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=506a70464ef237983e85f5f334eb17bfb82828fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6b:52:9c:1f:f7:75:ca:b4:ff:05:8c:e3:9c:
1f:f0:01:34:7a:6c:8c:80:8d:41:c5:d5:f0:b4:78:
4f:36:2d:80:21:59:8f:ec:32:2e:14:ea:c5:d3:29:
db:9f:53:33:52:7b:4f:dd:dd:52:6e:29:71:80:23:
d4:58:05:3b:73:13:bc:a6:ce:dd:a0:d5:29:da:95:
fa:ad:0b:24:84:47:c9:a5:f0:b8:f0:e3:56:47:2b:
98:a2:8c:20:c8:84:cc:74:0c:97:d5:65:15:12:e0:
25:01:11:59:25:62:7f:7e:dd:a5:4b:3c:f3:d3:49:
d3:07:69:52:6e:79:ad:44:e3:0f:65:e1:e6:18:b1:
8a:91:af:bd:d9:1c:3a:d3:aa:f4:a2:93:21:29:a1:
35:ff:cf:2f:b3:40:cc:6f:4c:51:82:1d:e8:4c:cb:
80:fc:bd:5e:c1:33:28:5b:d5:4c:81:cc:31:b6:38:
06:2b:7b:77:9e:ed:fd:27:f1:2a:0f:70:ce:60:b2:
a1:5d:ff:4b:16:3c:1d:d8:8d:cf:ad:0a:a3:c5:89:
e9:41:63:06:e8:8d:38:cc:ba:79:47:73:02:77:f0:
99:ed:a8:c6:09:da:d8:22:eb:3d:cc:67:8c:b7:41:
c2:90:0b:bb:8d:16:9c:d6:c4:09:d9:27:a2:4e:d6:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:6A:70:46:4E:F2:37:98:3E:85:F5:F3:34:EB:17:BF:B8:28:28:FC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UGpwRk7yN5g-hfXzNOsXv7goKPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.71.0/24
163.5.74.0/24
163.5.79.0/24
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.120.0/22
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0-163.5.162.255
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.176.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.212.0/24
163.5.216.0-163.5.218.255
163.5.220.0/24
163.5.224.0/24
163.5.228.0/24
163.5.231.0/24
163.5.235.0/24
163.5.241.0-163.5.242.255
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a9:e4:c3:55:e3:ab:97:40:e4:db:2b:14:d3:2c:d9:aa:fb:
f7:9d:e1:db:41:3f:2c:fe:4f:96:f7:70:26:b9:fe:b6:16:0a:
64:db:70:36:c1:d9:ab:50:6d:a0:61:93:d3:7d:82:6b:97:8e:
3e:94:5b:3b:61:a0:bc:1a:a5:2f:68:2e:a8:44:d1:6d:88:73:
52:f8:23:b6:bf:ed:d2:a1:55:55:65:fa:3a:7f:52:b5:d2:84:
10:96:fb:1b:66:63:ef:27:86:00:be:5d:e8:78:75:c1:99:14:
ad:f4:e8:61:94:28:cd:cf:56:a5:82:5b:f2:62:d6:c6:cf:c2:
14:51:1b:93:97:25:a7:ad:22:52:01:53:92:06:5a:2c:08:4a:
69:51:78:8c:2c:a2:69:d9:74:ff:8b:06:e8:5e:ec:a8:0c:e0:
ea:e5:59:a9:fa:4c:61:8b:88:8a:b5:29:73:40:a7:09:b2:e2:
3a:ab:2a:9f:5e:14:d5:f2:db:85:ba:ae:29:5d:aa:37:20:05:
ec:f6:99:b8:16:98:85:e0:bb:84:f9:df:74:01:a4:63:c8:2d:
c5:95:ab:da:d6:47:54:df:4f:5b:3c:60:2b:f9:80:65:1a:52:
27:cc:06:ee:6f:8c:dd:a1:c8:6b:06:81:81:b8:0e:5a:86:79:
2c:eb:72:a4
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgISAYsUpAYBmVFVCeKFqGxy0g/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMxMDA5MTMzMjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDZhNzA0NjRlZjIzNzk4M2U4NWY1ZjMzNGViMTdiZmI4MjgyOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2tSnB/3dcq0/wWM45wf8AE0emyM
gI1BxdXwtHhPNi2AIVmP7DIuFOrF0ynbn1MzUntP3d1SbilxgCPUWAU7cxO8ps7d
oNUp2pX6rQskhEfJpfC48ONWRyuYoowgyITMdAyX1WUVEuAlARFZJWJ/ft2lSzzz
00nTB2lSbnmtROMPZeHmGLGKka+92Rw606r0opMhKaE1/88vs0DMb0xRgh3oTMuA
/L1ewTMoW9VMgcwxtjgGK3t3nu39J/EqD3DOYLKhXf9LFjwd2I3PrQqjxYnpQWMG
6I04zLp5R3MCd/CZ7ajGCdrYIus9zGeMt0HCkAu7jRac1sQJ2SeiTtbFDQIDAQAB
o4IDpTCCA6EwHQYDVR0OBBYEFFBqcEZO8jeYPoX18zTrF7+4KCj8MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVUdwd1JrN3lONWctaGZYek5Pc1h2N2dvS1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBuQYIKwYBBQUHAQcBAf8EggGoMIIBpDCCAaAEAgABMIIB
mAMEAKMFHgMEAKMFITAMAwQAowUjAwQAowUkAwQAowU6AwQAowU+AwQAowVAAwQA
owVCAwQAowVHAwQAowVKAwQAowVPAwQAowVTAwQBowVWAwQAowVZAwQBowVeAwQB
owViMAwDBAOjBWgDBACjBWowDAMEAaMFbgMEAKMFcgMEAqMFeAMEAKMFfgMEAKMF
gAMEAKMFhgMEAaMFijAMAwQAowWNAwQEowWAAwQAowWSAwQAowWUAwQBowWWAwQA
owWcMAwDBAWjBaADBACjBaIDBACjBaUDBACjBacwDAMEAaMFqgMEAKMFrAMEAKMF
sAMEAaMFsjAMAwQAowW1AwQAowW2AwQAowW6AwQBowW8AwQAowW/AwQAowXDMAwD
BACjBcUDBACjBcYDBACjBckwDAMEAKMFywMEAaMFzAMEAKMF1DAMAwQDowXYAwQA
owXaAwQAowXcAwQAowXgAwQAowXkAwQAowXnAwQAowXrMAwDBACjBfEDBACjBfID
BACjBfcwDAMEAKMF+QMEAaMF/AMEAKMF/zANBgkqhkiG9w0BAQsFAAOCAQEAsKnk
w1Xjq5dA5NsrFNMs2ar7953h20E/LP5PlvdwJrn+thYKZNtwNsHZq1BtoGGT032C
a5eOPpRbO2GgvBqlL2guqETRbYhzUvgjtr/t0qFVVWX6On9StdKEEJb7G2Zj7yeG
AL5d6Hh1wZkUrfToYZQozc9WpYJb8mLWxs/CFFEbk5clp60iUgFTkgZaLAhKaVF4
jCyiadl0/4sG6F7sqAzg6uVZqfpMYYuIirUpc0CnCbLiOqsqn14U1fLbhbquKV2q
NyAF7PaZuBaYheC7hPnfdAGkY8gtxZWr2tZHVN9PWzxgK/mAZRpSJ8wG7m+M3aHI
awaBgbgOWoZ5LOtypA==
-----END CERTIFICATE-----
Generated at Wed Oct 11 07:32:52 2023 by rpki-client on console-ams.rpki-client.org