Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UuSRH7XhXCER1All530nuKW5bKQ.roa
File: UuSRH7XhXCER1All530nuKW5bKQ.roa (raw, json)
Hash identifier: gtsQziY00wVxvpVGI2cSEm553SQXDods6haNgbzDuZA=
Subject key identifier: 52:E4:91:1F:B5:E1:5C:21:11:D4:09:65:E7:7D:27:B8:A5:B9:6C:A4
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189BB337352E13F6933B05D153A68A9A900
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UuSRH7XhXCER1All530nuKW5bKQ.roa
Signing time: Thu 03 Aug 2023 11:40:58 +0000
ROA not before: Thu 03 Aug 2023 11:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:33:73:52:e1:3f:69:33:b0:5d:15:3a:68:a9:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 3 11:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e4911fb5e15c2111d40965e77d27b8a5b96ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:07:04:95:b9:e0:62:7a:84:8b:1b:58:e6:
2c:41:3e:1c:c3:c1:4f:de:02:f2:55:77:8c:af:29:
4d:8a:77:ec:a0:57:46:79:01:f1:f7:5a:b4:56:80:
9e:d6:84:a6:c5:30:22:cf:75:52:fd:a8:3c:14:45:
47:e3:90:fc:c8:66:be:b8:10:52:49:09:82:b0:21:
26:8d:c5:6f:da:97:0c:cf:ef:b2:5e:a2:3e:2a:e7:
0c:69:80:89:02:7b:62:07:a4:ee:2e:b1:4c:3a:76:
ff:bc:6a:96:6b:e0:7b:ef:53:02:a9:64:dd:03:6e:
31:42:7f:3e:5f:7c:b2:51:c1:9a:cd:df:5b:33:73:
c7:23:96:7b:b2:dd:74:35:33:19:53:48:41:51:18:
d9:0e:e9:a2:03:9a:ab:b3:c7:d2:5a:b4:98:63:89:
29:52:24:43:65:44:3c:82:46:c8:02:d2:ec:0f:9a:
2c:73:10:29:aa:38:82:79:37:63:5a:da:4e:77:3a:
5a:41:e2:b5:47:27:d1:8f:51:1a:f8:7b:47:f0:52:
60:93:ef:15:63:a9:97:80:4f:7e:db:4f:8d:b9:3e:
cd:9f:2b:e3:39:79:1b:f8:47:1a:5b:ae:38:0e:85:
e8:ef:08:dd:a2:9f:8a:08:31:de:5a:96:82:00:c6:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:91:1F:B5:E1:5C:21:11:D4:09:65:E7:7D:27:B8:A5:B9:6C:A4
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/UuSRH7XhXCER1All530nuKW5bKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.59.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.124.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
03:2d:41:ab:7c:14:2b:d5:a9:08:8e:1a:cd:b6:76:94:21:93:
10:37:4f:1a:46:c2:27:84:69:d6:e5:4f:53:35:46:89:8b:19:
ea:84:26:0b:c8:fc:99:39:1b:4c:37:ec:2d:db:85:fb:0e:89:
ba:32:0a:b4:9d:14:e9:d5:ab:5a:33:1e:a3:6c:6c:bc:4d:c3:
07:09:79:ea:d4:5b:f4:f2:1f:48:ab:28:ad:a8:1e:e6:80:5c:
58:2e:76:9a:a8:43:d9:f5:5f:e4:3c:23:ea:20:24:6e:56:e9:
28:79:28:a6:ce:1e:e4:cd:5f:ee:03:29:d3:87:a9:29:dd:91:
f6:22:3f:17:77:f4:40:31:28:bb:64:b1:b4:9b:dd:53:e7:57:
52:1e:e9:70:06:29:ef:d6:a5:e6:0c:98:01:35:7c:fd:3f:e1:
f2:4a:35:5e:69:15:7d:58:3a:08:12:9f:df:c0:53:e1:ac:bc:
66:03:a7:60:a1:ec:da:c7:3a:1a:42:b0:e9:b0:c1:12:c8:79:
e4:2c:f1:e2:15:8f:d3:e3:4f:b4:f3:97:cc:b6:58:45:61:de:
e2:b5:b8:38:ba:18:64:42:e9:bd:0d:ec:4f:0f:06:4a:a4:f8:
a4:c7:d2:e0:6e:5f:8d:ef:cc:50:17:70:05:6b:71:94:4a:4e:
5e:f2:8f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 12:38:08 2023 by rpki-client on console-ams.rpki-client.org