Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/a1OwG_4a_EImXHGnlhfFyGddVZM.roa
File: a1OwG_4a_EImXHGnlhfFyGddVZM.roa (raw, json)
Hash identifier: Nkk/nZQIHQ3a8JDwkZR+AE+3hbWJ+G7IePA5DwMTjt8=
Subject key identifier: 6B:53:B0:1B:FE:1A:FC:42:26:5C:71:A7:96:17:C5:C8:67:5D:55:93
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A8F26092D3BAD05D9B39BB820F27624E2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/a1OwG_4a_EImXHGnlhfFyGddVZM.roa
Signing time: Wed 13 Sep 2023 15:25:49 +0000
ROA not before: Wed 13 Sep 2023 15:25:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8f:26:09:2d:3b:ad:05:d9:b3:9b:b8:20:f2:76:24:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 13 15:25:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b53b01bfe1afc42265c71a79617c5c8675d5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:c4:8b:05:28:33:82:b9:b4:d2:de:5b:dd:
e6:f8:29:fa:bf:5e:26:bb:1a:25:54:f4:97:17:c2:
ce:67:10:e4:18:48:57:65:b8:2d:0a:32:88:ea:d6:
bf:dc:66:7e:af:0e:4a:77:76:1a:fe:53:68:80:c4:
3a:45:43:50:cb:29:75:77:c0:aa:2a:90:62:e6:59:
be:3c:20:bb:fb:70:27:02:3e:3a:3c:45:37:42:21:
33:ed:87:3a:43:91:b1:3a:70:60:e4:5e:04:2e:30:
c7:87:fe:9b:ea:3f:fb:59:3c:c3:71:a7:b0:bc:6d:
3d:d3:3b:42:f1:b8:5c:5e:cf:23:97:65:74:4b:94:
a1:38:8a:7a:bd:ac:32:ed:4c:bd:45:74:39:9c:26:
44:ca:d8:5f:9b:5d:25:a2:f5:df:3c:d7:e5:9d:04:
cc:a7:ad:c2:59:aa:5e:3d:ad:0a:1e:c8:2c:c8:3c:
42:b4:e0:59:33:ef:07:00:34:08:06:2b:31:89:49:
60:23:d0:dd:26:bd:fa:b2:63:ff:4d:05:c9:27:18:
a4:0c:10:db:ea:b6:6e:5a:59:78:88:2f:7a:c7:27:
d1:4b:a6:02:2c:fc:46:30:4d:58:19:d3:0c:97:f8:
1d:17:03:63:b1:a8:e1:cc:2c:29:3f:b3:dc:9f:9f:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:53:B0:1B:FE:1A:FC:42:26:5C:71:A7:96:17:C5:C8:67:5D:55:93
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/a1OwG_4a_EImXHGnlhfFyGddVZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.70.0/23
163.5.78.0/23
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.126.255
163.5.128.0/24
163.5.134.0-163.5.137.255
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0-163.5.167.255
163.5.170.0/24
163.5.172.0/24
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.209.255
163.5.211.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0-163.5.232.255
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:6c:35:e4:0a:72:ec:c2:ca:6f:1d:d5:46:d1:60:9f:b9:f3:
40:38:47:74:06:ac:cf:a2:2d:04:2d:9e:26:a7:53:29:7a:3d:
a6:5a:8c:83:63:3e:e8:29:64:ad:a8:90:e1:4d:33:99:9e:93:
90:7f:8a:96:7a:48:63:03:a7:f8:50:29:c8:9a:31:6e:55:87:
df:c6:c9:39:84:c2:10:2a:e2:18:bd:fd:46:76:ad:95:6c:d1:
3a:12:06:60:a3:16:9c:a7:f3:1b:d6:6e:99:de:62:1e:63:13:
77:37:81:7e:be:1a:52:2b:4a:73:fc:00:01:b7:a3:3b:12:16:
40:6f:f8:eb:13:75:62:56:cd:61:4f:2d:5a:9c:10:ed:21:eb:
f2:29:1f:74:6e:e8:85:6a:07:13:07:d1:26:04:28:fc:b1:73:
6d:fd:32:a7:91:30:3a:47:d4:6a:0b:9c:f3:9b:b6:ac:61:93:
20:f4:9b:09:55:f5:81:c9:9f:0a:a9:86:f6:38:e9:50:5e:7d:
da:99:67:a6:e8:9e:97:3e:44:80:23:16:37:ec:8c:e9:5e:73:
9e:4c:2c:9d:be:4a:1b:58:14:0b:56:4d:f8:95:4b:68:12:90:
77:8f:31:b4:f0:a3:c5:7b:7a:b8:52:26:34:24:aa:91:cf:c4:
15:9c:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 14 21:17:37 2023 by rpki-client on console-ams.rpki-client.org