Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cmKUqnw8QEkZzg2st_1JCls9-Eo.roa
File: cmKUqnw8QEkZzg2st_1JCls9-Eo.roa (raw, json)
Hash identifier: abGOfYnaBoR2Pp7o4b+thjdxcXhUGnU6A9pErXgXjbI=
Subject key identifier: 72:62:94:AA:7C:3C:40:49:19:CE:0D:AC:B7:FD:49:0A:5B:3D:F8:4A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018761D021C428E4209BE449371F5528F67E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cmKUqnw8QEkZzg2st_1JCls9-Eo.roa
Signing time: Sat 08 Apr 2023 17:00:42 +0000
ROA not before: Sat 08 Apr 2023 17:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:d0:21:c4:28:e4:20:9b:e4:49:37:1f:55:28:f6:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 8 17:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=726294aa7c3c404919ce0dacb7fd490a5b3df84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:20:f8:77:93:0a:2e:66:65:99:97:81:b5:
cd:23:70:09:c6:b3:a8:84:ab:b0:0c:8d:0f:74:7a:
74:ae:e3:e1:e5:bb:e5:31:00:8c:76:d6:e8:cc:16:
ff:0b:48:54:a0:b6:b6:30:08:b1:7e:cd:b6:01:9e:
22:5a:1b:df:a4:00:2c:60:57:ae:de:c9:66:ff:ae:
7b:2a:c4:9d:50:12:c5:cd:80:08:4d:ed:eb:06:45:
0a:63:50:3d:92:16:e3:8c:78:77:42:28:8f:51:98:
2f:fb:cb:70:52:fe:e4:fa:13:e9:8a:bd:07:6b:75:
a9:55:15:61:ff:ee:d5:74:e6:4d:9c:88:e9:10:4b:
7c:e6:2f:48:26:24:c2:2c:29:5a:c1:1d:50:fe:3e:
90:ce:14:9f:27:e0:c7:1e:bb:55:91:71:98:46:82:
a3:1f:9f:e2:94:16:df:d6:53:cc:47:12:25:4d:b1:
40:3d:3b:69:d1:3e:57:6b:af:b7:22:69:5a:21:1b:
be:6a:bb:53:f5:e9:37:40:0f:1c:bf:14:99:a9:dd:
72:6d:f5:89:27:cc:e8:b4:95:fc:cb:19:a3:67:1e:
ee:18:5f:c3:49:97:61:03:f2:9f:0b:93:26:c5:b1:
84:d6:a2:38:9e:ca:18:50:37:ec:70:08:b8:15:00:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:62:94:AA:7C:3C:40:49:19:CE:0D:AC:B7:FD:49:0A:5B:3D:F8:4A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cmKUqnw8QEkZzg2st_1JCls9-Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0-163.5.30.255
163.5.32.0-163.5.36.255
163.5.38.0/24
163.5.58.0-163.5.64.255
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0-163.5.89.255
163.5.91.0-163.5.93.255
163.5.95.0-163.5.103.255
163.5.105.0-163.5.106.255
163.5.109.0-163.5.114.255
163.5.116.0-163.5.120.255
163.5.122.0/23
163.5.125.0-163.5.129.255
163.5.134.0/24
163.5.137.0-163.5.144.255
163.5.146.0-163.5.148.255
163.5.150.0-163.5.152.255
163.5.154.0-163.5.157.255
163.5.159.0-163.5.172.255
163.5.174.0/23
163.5.177.0-163.5.183.255
163.5.185.0-163.5.189.255
163.5.191.0-163.5.195.255
163.5.198.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.222.0-163.5.230.255
163.5.232.0/24
163.5.234.0/24
163.5.237.0-163.5.241.255
163.5.243.0-163.5.246.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a1:9e:9a:76:cc:d1:7f:c8:9a:00:fb:99:c9:f6:5a:7d:aa:
7b:b8:08:ff:4c:ef:d1:59:81:87:71:3b:50:f6:63:3d:e2:03:
42:e5:53:28:56:4b:a5:8e:c8:87:50:01:0f:7a:93:5f:a5:19:
a9:f8:3a:c4:8a:02:53:9e:d7:c8:1d:6f:91:40:2d:6c:1c:4f:
ba:72:80:f1:e0:cd:01:87:de:16:73:8f:49:2f:13:f1:c4:ec:
d2:02:b8:82:2f:cf:7f:a3:7e:3a:a0:4c:5b:02:21:99:fa:b2:
33:ab:3e:bc:f9:b4:0f:cd:d7:92:ad:9f:e0:97:e8:9f:47:4e:
af:31:65:cc:3b:fb:13:43:0d:7d:ef:05:6d:61:a4:3c:d8:99:
66:c0:e2:04:fe:71:e0:01:a8:9a:33:56:9b:60:30:df:fa:98:
4e:f0:1f:c4:b5:b6:92:c9:b7:f9:9e:49:4d:7f:de:7c:d4:8b:
65:a3:02:a0:15:a2:09:94:d7:c5:6c:73:10:18:5a:a3:42:3b:
25:f9:3d:8d:4f:86:ab:6b:b3:a2:5d:73:c2:a7:20:f8:bb:b0:
06:fc:5f:18:e6:65:83:66:62:d7:e0:39:68:e2:16:a5:09:87:
24:f8:37:44:48:86:02:b6:5c:d4:24:af:e4:5b:0a:76:a1:20:
23:96:56:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org