Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/al3fepAmc4KfYHEiV5wvGac-RHI.roa
File: al3fepAmc4KfYHEiV5wvGac-RHI.roa (raw, json)
Hash identifier: xZCNgmQawh8wTZvSRg2Ddy26YOiAJshAds1S0c2QMQk=
Subject key identifier: 6A:5D:DF:7A:90:26:73:82:9F:60:71:22:57:9C:2F:19:A7:3E:44:72
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01898433FEFDE2E3483FA08633F6CCD82EDF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/al3fepAmc4KfYHEiV5wvGac-RHI.roa
Signing time: Sun 23 Jul 2023 19:22:27 +0000
ROA not before: Sun 23 Jul 2023 19:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:84:33:fe:fd:e2:e3:48:3f:a0:86:33:f6:cc:d8:2e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 23 19:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a5ddf7a902673829f607122579c2f19a73e4472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:43:d7:09:50:00:68:8e:88:53:85:a4:52:
6c:8e:09:46:5c:10:16:3b:a9:24:4d:2b:2c:25:8b:
c2:61:97:fe:66:0b:25:d2:5d:ac:50:7f:70:f2:ec:
7e:e2:f0:79:2d:0a:50:1e:63:2c:e3:83:95:55:03:
b1:77:8f:cc:e4:6b:31:e2:c7:2a:c9:40:9f:57:19:
df:0f:f0:e3:f3:99:c9:c2:41:ee:ed:20:18:db:0e:
1a:18:f1:0a:d7:ac:c3:4e:98:83:86:96:52:17:f7:
9d:c6:08:ba:56:f3:88:39:6e:f4:2a:49:e7:52:ea:
37:a9:bb:df:ab:0a:a9:e5:81:bd:0a:4a:3a:40:1e:
39:15:e9:bf:56:c5:c1:e0:89:ab:1f:d7:5e:6d:c7:
9c:d5:c8:3e:2f:bd:ae:b1:cc:20:2d:a2:cd:78:1d:
64:ab:e5:2d:9d:6d:c3:e9:25:94:ba:25:61:7b:38:
a4:b1:e2:d0:f4:b1:cc:89:b7:46:c9:88:a7:8f:18:
d0:4a:c5:87:79:ab:3d:be:15:e2:ab:57:50:1d:2c:
77:29:21:73:84:15:f4:88:ee:7d:1b:25:75:eb:33:
73:79:6e:58:60:cd:95:5b:cb:1a:0a:16:78:d8:31:
69:ed:6e:df:cd:a7:80:82:e9:a2:3e:9e:e6:99:95:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:5D:DF:7A:90:26:73:82:9F:60:71:22:57:9C:2F:19:A7:3E:44:72
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/al3fepAmc4KfYHEiV5wvGac-RHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.37.255
163.5.58.0/23
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/24
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.125.0-163.5.126.255
163.5.128.0/24
163.5.133.0-163.5.134.255
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.158.0/24
163.5.160.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.184.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.209.0-163.5.210.255
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.249.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
39:4b:b0:d9:f6:a8:51:68:bf:55:c8:cb:56:91:97:83:c7:3e:
a5:d8:b7:38:fa:61:8d:64:03:a3:64:c2:88:c5:8c:b3:ac:50:
20:75:9a:28:eb:f2:36:92:6d:3b:b6:0e:fb:f8:7f:ba:c6:ec:
7c:99:50:6b:00:b9:b4:06:58:7a:1a:e9:5a:17:f6:cf:47:3a:
d8:04:67:20:21:9c:4a:95:be:ca:2f:71:ff:d1:8f:c3:0e:17:
fd:91:54:c1:43:2e:e0:ce:dd:7a:dc:27:b4:74:4c:fb:2a:24:
86:19:e5:1b:4d:f9:fc:24:dd:fa:d9:5d:b0:f1:f5:63:d9:d6:
08:59:27:40:8f:e0:9b:e6:d1:ae:68:55:31:b3:2b:b3:a4:3c:
10:5a:0f:4a:f9:c9:9d:69:17:3f:35:46:07:bf:f1:f3:0d:cd:
53:5a:70:db:84:56:71:35:a4:21:66:60:40:75:0f:40:46:14:
9c:16:93:d3:a3:89:68:c2:32:6b:a9:40:e0:24:8b:d0:f0:52:
f4:b9:5e:28:9b:c5:13:86:5f:f9:e3:5e:a0:81:17:4a:67:f9:
f5:0b:84:c4:cc:73:23:c3:e3:cc:b9:0e:6a:cb:fe:62:ac:57:
eb:44:c3:b8:75:e9:7b:6c:03:a6:a2:6e:ec:a9:b9:60:03:a1:
5e:28:20:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 19:47:04 2023 by rpki-client on console-fra.rpki-client.org