Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Yfv67V8xyMNxoeA9PznJOg_Sdqc.roa
File: Yfv67V8xyMNxoeA9PznJOg_Sdqc.roa (raw, json)
Hash identifier: eASsfnUuuwB5bDX/J7z4Qm8jewCR35n5m/3N8UvEL8M=
Subject key identifier: 61:FB:FA:ED:5F:31:C8:C3:71:A1:E0:3D:3F:39:C9:3A:0F:D2:76:A7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189D4F429310587968DAE6F01A73C152D91
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Yfv67V8xyMNxoeA9PznJOg_Sdqc.roa
Signing time: Tue 08 Aug 2023 11:41:58 +0000
ROA not before: Tue 08 Aug 2023 11:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:f4:29:31:05:87:96:8d:ae:6f:01:a7:3c:15:2d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 11:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=61fbfaed5f31c8c371a1e03d3f39c93a0fd276a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0b:34:cd:72:18:1c:4c:42:1a:44:5c:79:37:
62:97:79:0e:2f:7a:4d:96:e5:2e:3a:8e:60:2f:bb:
73:e5:43:ee:93:25:ea:2c:2a:81:18:57:3d:7e:8d:
01:96:da:56:e8:c8:0c:3b:ec:0a:10:00:09:b6:66:
65:8f:66:56:43:46:c9:19:1d:d8:2e:93:2c:d3:4f:
af:0a:63:35:1c:fb:fc:30:b8:4e:4c:a3:eb:91:5c:
2d:fe:d0:5f:03:38:1f:c5:35:15:e8:45:00:63:e6:
56:ff:79:98:f6:e7:37:ca:b9:87:f3:5d:b3:81:9f:
ba:da:c7:0b:ed:0a:9a:9f:b4:d0:11:dd:da:fb:15:
ed:c6:aa:b3:d3:9a:d5:7e:4a:0d:7e:ff:11:f1:e2:
e6:9d:50:90:03:ba:4b:03:d5:b1:b5:d1:a0:5a:d8:
82:4a:31:71:e2:6e:89:77:6d:c2:27:5b:d2:48:22:
63:0b:b2:01:55:36:ee:6a:a6:5b:d5:30:a4:f5:58:
b5:a6:c0:e0:c7:ee:87:f9:bf:56:9d:ea:69:55:76:
3d:41:96:7e:33:1e:f6:fd:64:99:a1:5e:8c:54:b8:
36:5d:1d:fb:73:87:ff:52:71:70:61:fa:d4:23:54:
b4:4d:49:3d:33:21:7a:cf:b6:3a:c5:93:3a:97:18:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:FB:FA:ED:5F:31:C8:C3:71:A1:E0:3D:3F:39:C9:3A:0F:D2:76:A7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Yfv67V8xyMNxoeA9PznJOg_Sdqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.156.0/23
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/23
163.5.235.0/24
163.5.237.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
20:6b:19:41:38:86:34:08:9b:56:78:48:3d:de:e6:92:62:7f:
0a:cb:73:51:6c:48:92:12:bb:62:50:28:08:cc:42:c2:2b:61:
43:60:33:78:dd:02:5a:d1:51:24:4d:4d:d0:29:49:f8:ee:09:
94:61:10:4c:ab:a0:9e:1f:24:6c:0b:33:05:c5:0d:bc:84:6c:
f4:00:8c:62:a7:06:5c:77:28:c3:8a:aa:c0:78:d9:9c:04:2d:
a6:58:b7:23:2e:a2:82:2c:b6:0d:e4:64:4a:c9:70:b1:41:7f:
b5:26:b9:46:8c:93:83:da:7d:ae:94:e9:15:ea:fb:af:ee:bc:
7e:a6:65:0a:64:3e:9f:80:9a:04:59:d1:32:45:3c:9d:ec:6a:
ab:95:a2:94:40:a6:80:f8:3e:60:43:3c:00:58:ad:1a:24:ce:
7f:f4:c0:e0:89:70:9f:af:dd:c9:56:98:08:66:fb:7a:a3:1f:
32:cb:cb:9d:bc:28:55:fa:b5:e4:8c:73:8a:40:64:29:ce:0f:
17:53:30:6e:12:0e:6e:0f:fc:42:24:50:46:b1:b4:e2:87:5e:
c0:ac:69:e0:38:7e:49:9d:84:9d:29:92:e9:a7:45:eb:6e:7e:
2a:40:fa:24:11:03:d1:cb:75:ba:af:81:f8:0f:1a:ec:72:23:
d8:4e:47:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 10 12:59:43 2023 by rpki-client on console-fra.rpki-client.org