Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cPhkV0tpuAbzWxOG9F8ktGRCH4E.roa
File: cPhkV0tpuAbzWxOG9F8ktGRCH4E.roa (raw, json)
Hash identifier: rPPhm62zEpyadcnqJMUi+8Sy5yNljLkqL7HqGZYK4Ss=
Subject key identifier: 70:F8:64:57:4B:69:B8:06:F3:5B:13:86:F4:5F:24:B4:64:42:1F:81
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189C598E41AB3BB613C5832BA78B9CC9578
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cPhkV0tpuAbzWxOG9F8ktGRCH4E.roa
Signing time: Sat 05 Aug 2023 12:07:58 +0000
ROA not before: Sat 05 Aug 2023 12:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Aug 2023 19:25:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c5:98:e4:1a:b3:bb:61:3c:58:32:ba:78:b9:cc:95:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 12:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70f864574b69b806f35b1386f45f24b464421f81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:55:21:c3:a7:6b:88:c7:af:fe:be:7a:5e:
fa:71:79:a5:5e:1d:ce:72:33:99:7b:f4:59:4b:07:
d6:ff:cd:e8:6f:57:5a:6d:7b:a1:54:d7:05:89:ec:
30:34:7a:9c:c8:a1:8a:64:78:06:67:b5:ce:c6:53:
81:ad:0b:ec:aa:58:06:72:4c:c4:0e:80:2d:45:8d:
c9:9a:43:91:7f:b5:4d:e5:95:a1:86:52:17:e6:04:
e6:71:f7:d8:bb:25:a1:89:51:e4:b8:4d:ac:2c:0c:
65:12:be:ed:c5:2a:fd:80:ba:cd:b2:3f:3f:3c:0a:
47:e6:51:0f:93:20:db:8c:42:90:4a:b3:7e:8d:13:
53:00:dc:2e:36:5f:31:fb:c4:48:21:18:8c:db:60:
f9:da:09:65:9c:7a:02:85:03:8b:b2:1a:e9:43:e4:
80:1e:4f:ba:4e:48:14:a9:c9:6c:6b:06:b3:94:0b:
0d:14:62:1e:cd:d4:26:ea:ee:96:e7:53:0b:81:c8:
e9:16:f0:88:d5:4d:c0:53:22:8c:dc:5b:17:ed:48:
8a:94:57:1c:a5:02:44:87:f6:ce:3f:ae:ef:e6:49:
3b:98:95:51:95:e6:78:05:38:83:a0:2f:42:a1:93:
6e:4f:6d:b0:bb:81:a0:b1:9d:b9:19:5c:60:38:a7:
2f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F8:64:57:4B:69:B8:06:F3:5B:13:86:F4:5F:24:B4:64:42:1F:81
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cPhkV0tpuAbzWxOG9F8ktGRCH4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.59.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.124.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.176.255
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ca:bf:ac:9b:70:44:31:fc:d4:68:7d:f3:bf:c4:e4:2f:f1:
e3:8d:14:c1:fe:29:0a:70:6a:a1:89:c0:b4:d0:c7:b9:af:00:
33:b8:0f:0e:6c:a7:90:0d:d1:90:1f:01:9c:1b:05:77:17:b9:
79:7f:c4:40:52:9d:d6:c3:25:7f:a2:28:34:ce:67:ce:ea:33:
4e:78:d0:1b:bc:28:46:cc:a9:01:c5:51:88:99:b7:23:e2:38:
cc:e2:f1:a0:a0:8e:50:84:08:c9:63:f7:aa:61:24:36:59:59:
2a:c4:0f:1d:13:40:4b:f6:4f:93:59:31:d1:8f:f1:97:6d:4b:
f1:0c:a2:84:8f:c1:80:c3:53:41:d2:c3:26:e8:90:3b:57:47:
21:92:f4:73:fe:53:a0:f6:29:2a:50:9e:b6:97:52:e4:83:85:
b1:6d:db:c3:ea:70:c1:8e:39:41:2c:c7:c1:39:94:eb:4e:d1:
5f:bc:b8:e2:f4:06:cb:e0:12:22:e5:79:e5:03:85:44:7a:0f:
b7:cc:15:7b:c7:35:61:ca:29:e5:58:8e:71:56:ea:bf:46:b7:
a4:cb:b3:bb:f0:22:5d:8b:f8:76:92:4f:90:38:65:53:74:e8:
93:b6:dc:99:22:c5:58:00:54:a9:af:e2:5b:76:01:83:22:92:
3e:07:bc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:07 2024 by rpki-client on console-fra.rpki-client.org