Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/c3FpzSNv_jqY3V8w06nR_CV9Fjs.roa
File: c3FpzSNv_jqY3V8w06nR_CV9Fjs.roa (raw, json)
Hash identifier: u9tWYbH0e0eYeLwX1ELxC7GFXLY+oHkRTv3EZ8Up6fo=
Subject key identifier: 73:71:69:CD:23:6F:FE:3A:98:DD:5F:30:D3:A9:D1:FC:25:7D:16:3B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189CA446746D254F0CC7B0C24F61FC0BE4C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/c3FpzSNv_jqY3V8w06nR_CV9Fjs.roa
Signing time: Sun 06 Aug 2023 09:53:47 +0000
ROA not before: Sun 06 Aug 2023 09:53:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ca:44:67:46:d2:54:f0:cc:7b:0c:24:f6:1f:c0:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 6 09:53:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=737169cd236ffe3a98dd5f30d3a9d1fc257d163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:4c:37:5d:19:1b:31:dd:4a:3d:15:75:20:
8c:a1:ac:9b:b3:3c:a7:0d:ae:84:3b:76:ae:f6:8f:
28:25:a5:d6:e3:f3:03:2b:36:b2:e8:0b:5d:4c:82:
03:e8:8f:6f:4b:94:6e:f7:9c:58:4c:54:cd:59:a4:
d7:3d:2f:ff:6d:4f:82:b3:51:bd:37:8d:ec:60:d6:
53:5d:f4:e4:7e:29:91:cc:d0:0b:f2:c3:5b:37:a8:
d4:9f:c0:5f:ce:c1:1e:4c:14:ae:5e:d7:f6:47:e6:
c0:3f:ef:87:c0:0d:d7:77:59:e5:24:cc:ee:ce:bc:
2e:c2:72:25:b8:50:a3:37:b3:2f:5b:8a:e6:c9:72:
06:a9:10:f2:c3:b9:ca:2c:e3:db:48:cc:0c:d4:78:
eb:4b:e3:d0:19:47:cf:c6:42:c8:90:68:7b:c8:82:
dc:b1:8f:cc:0b:a8:d3:12:7b:71:ab:64:07:57:ab:
89:14:70:74:f0:ed:78:fc:62:dd:7a:21:f4:2c:e3:
e3:5c:bc:d0:8e:67:ab:b4:65:da:d1:d8:a7:6f:b2:
7d:56:da:80:91:1a:21:4b:83:de:dc:97:8b:c2:b2:
50:93:68:7b:a1:19:2e:d7:bb:45:ca:3a:e1:27:6b:
59:3f:0d:f4:c7:42:97:d0:5a:b0:5d:d0:c3:4a:12:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:69:CD:23:6F:FE:3A:98:DD:5F:30:D3:A9:D1:FC:25:7D:16:3B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/c3FpzSNv_jqY3V8w06nR_CV9Fjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.59.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/24
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.124.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/23
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.176.255
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.227.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
16:dc:88:2b:c7:10:3a:f0:6e:89:5d:52:e6:80:d4:4a:a7:f2:
7c:87:57:51:bc:90:2a:4e:8e:df:4f:3b:a7:5d:1d:c3:d9:7d:
f5:2f:60:03:01:b8:16:44:3b:b6:78:dc:dc:58:e1:6c:b6:01:
13:3a:c8:8d:52:87:d2:f6:71:c3:33:00:11:7d:b7:1d:43:a6:
fa:e5:4e:fd:c2:cc:41:2c:18:58:9a:f8:54:a1:a9:77:dd:c3:
27:6c:e3:6f:c0:be:62:ca:b6:98:00:f2:71:37:5c:f1:52:e7:
b2:22:4d:ae:23:ba:6f:fb:35:d1:ac:b0:45:d2:9d:87:a4:4f:
53:84:d4:7a:66:79:91:a3:2c:c6:19:dd:23:53:19:22:57:7d:
d1:e2:cb:e4:11:a2:fc:24:84:01:a2:2c:bd:d5:c8:9a:7b:a1:
b1:58:8d:c4:83:56:33:ab:94:38:01:33:2c:64:e3:36:ec:74:
dc:0a:b7:6e:21:4b:e3:30:e0:9b:e4:8a:e1:21:43:65:7b:4b:
5c:52:57:5b:d5:74:95:e8:32:55:8f:99:45:86:9c:9a:30:fe:
1a:4a:63:40:26:53:a4:46:c9:ff:1a:44:f6:59:5f:68:9b:c4:
49:45:a5:4c:24:05:1a:e7:8f:62:ad:d6:a7:4f:01:ff:6c:e4:
a0:ff:7b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 12:14:24 2023 by rpki-client on console-ams.rpki-client.org