Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gAmL-g8Q605uCnh7DMyjl0UyEdc.roa
File: gAmL-g8Q605uCnh7DMyjl0UyEdc.roa (raw, json)
Hash identifier: 1OSAr/meTEOUHQFN+DQoFVnt7Fj47hUZQ8ruXj+caAU=
Subject key identifier: 80:09:8B:FA:0F:10:EB:4E:6E:0A:78:7B:0C:CC:A3:97:45:32:11:D7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B6FBCA65AC2B2C7E0D823E190C2F23DD6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gAmL-g8Q605uCnh7DMyjl0UyEdc.roa
Signing time: Fri 27 Oct 2023 06:05:16 +0000
ROA not before: Fri 27 Oct 2023 06:05:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:bc:a6:5a:c2:b2:c7:e0:d8:23:e1:90:c2:f2:3d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 06:05:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80098bfa0f10eb4e6e0a787b0ccca397453211d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2c:69:04:22:f9:cf:c2:23:1f:14:3a:3f:cc:
97:c0:86:f5:5e:cb:da:43:f9:4a:ce:b6:ee:5e:81:
43:bb:b7:6c:e8:3d:7e:e2:8a:09:cd:58:10:c8:d1:
26:bf:55:75:68:fe:f3:05:f1:f6:92:6c:3d:71:ba:
e5:90:39:b3:7f:10:f8:cd:d7:1d:3a:dd:e6:99:8c:
e5:a6:18:37:de:f0:28:05:68:b2:9e:1b:7c:b4:e6:
92:76:eb:0b:b6:8f:a6:8e:53:ba:25:fb:c2:26:5b:
b3:a8:24:b6:45:aa:79:01:6e:41:15:05:e8:bc:ff:
5a:7f:f8:37:91:e3:dd:5f:b2:74:04:ec:0e:f9:1a:
d8:fb:79:16:da:11:18:75:5c:0d:7e:e8:6f:4d:ab:
8b:77:d4:37:eb:33:8b:66:84:91:4e:11:3c:5f:b0:
bc:bc:72:a5:20:74:80:3f:c8:0d:e2:50:5f:b8:f7:
a0:8a:d2:49:ca:2b:78:d9:f2:65:8b:6a:05:52:11:
42:3f:29:f6:ba:d4:c0:77:fa:25:52:26:f8:3d:3d:
4c:08:5d:af:98:b2:31:e3:a1:23:c3:c3:73:c6:a4:
57:c6:16:72:a2:3b:21:a6:ca:bb:b8:93:20:1d:e5:
13:d8:f6:8a:10:42:55:12:9a:e2:10:8b:75:8a:5b:
40:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:8B:FA:0F:10:EB:4E:6E:0A:78:7B:0C:CC:A3:97:45:32:11:D7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gAmL-g8Q605uCnh7DMyjl0UyEdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.37.255
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.76.0/24
163.5.79.0/24
163.5.83.0/24
163.5.86.0/24
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.121.0-163.5.122.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0-163.5.162.255
163.5.165.0/24
163.5.167.0/24
163.5.170.0/24
163.5.172.0/24
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.208.0/24
163.5.217.0-163.5.218.255
163.5.222.0/24
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
32:3f:37:78:cc:e7:08:07:65:4e:22:6d:9c:c0:09:2b:8a:03:
08:21:f1:13:d1:8e:e2:d7:73:d2:64:aa:4a:8e:f7:38:e0:c3:
92:57:7e:3b:4a:11:be:ca:6c:6b:35:8f:87:eb:fa:c2:c9:a9:
10:f4:06:af:22:94:ce:6e:3c:46:71:75:a0:8f:d0:fd:3b:05:
72:01:e4:ed:b9:f2:63:4e:aa:0e:fd:24:db:cc:1d:80:aa:0f:
32:55:d0:53:c3:d2:82:b5:56:d0:41:9f:07:e0:47:0b:d4:ae:
a5:3b:94:2f:b4:7f:c0:07:5c:77:99:15:ae:55:f6:2a:04:44:
72:e4:2b:38:c3:f8:74:c1:6d:34:20:4f:63:6b:88:1a:42:9a:
dc:b4:44:60:26:b3:9e:4c:47:ee:80:8a:49:17:b2:da:e0:6a:
44:28:92:4f:80:b4:c2:5b:48:b1:df:cf:4a:5a:51:49:6b:ee:
77:3e:e5:bc:ea:9c:dc:b4:8f:19:ae:c5:d9:df:31:3c:62:0b:
6f:15:eb:fd:72:54:21:13:66:9f:de:81:3a:67:a5:c0:ed:b5:
9e:fa:d6:77:d5:25:f8:07:ee:17:dd:c5:49:a5:04:45:9c:11:
48:a0:63:08:a6:b1:3f:b8:7f:12:69:d4:25:94:2c:b4:e3:c6:
7c:b9:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 28 07:14:19 2023 by rpki-client on console-ams.rpki-client.org