Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gCdoWwHR2Hb2pj4j2Hgr-NvdDRI.roa
File: gCdoWwHR2Hb2pj4j2Hgr-NvdDRI.roa (raw, json)
Hash identifier: uvbYOoCHrQAAdrbQt96rdSIfWfggkjFD+kzNqXntAho=
Subject key identifier: 80:27:68:5B:01:D1:D8:76:F6:A6:3E:23:D8:78:2B:F8:DB:DD:0D:12
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B38151040A1C6D124170393F4A79F8357
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gCdoWwHR2Hb2pj4j2Hgr-NvdDRI.roa
Signing time: Mon 16 Oct 2023 10:43:06 +0000
ROA not before: Mon 16 Oct 2023 10:43:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:38:15:10:40:a1:c6:d1:24:17:03:93:f4:a7:9f:83:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 16 10:43:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8027685b01d1d876f6a63e23d8782bf8dbdd0d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:08:42:9c:59:ac:9d:5c:ed:15:37:b7:6d:
23:7d:54:40:c2:e3:7f:7f:3e:5b:61:b6:cd:a8:46:
5a:87:09:fe:ce:c5:ea:4f:5d:4e:66:99:aa:3e:43:
76:0a:c7:1f:15:0b:37:e2:13:4b:5a:25:3f:52:5e:
f5:17:44:01:19:75:e6:19:17:f6:bc:d8:a6:f5:73:
1c:98:c4:8e:47:18:ec:0d:50:29:56:e7:ff:ff:44:
ad:72:25:c4:5d:1a:a0:80:52:8d:d3:d3:8a:4e:d7:
95:d7:f0:9b:ac:eb:dd:17:95:66:38:71:da:55:68:
15:9f:32:ce:87:82:5a:24:96:08:1d:96:ed:f1:08:
48:da:2f:85:bd:a5:10:11:ed:5e:51:88:7b:af:3d:
19:eb:dd:61:4e:c6:1c:9b:aa:0f:cb:1c:ef:d2:f2:
29:4b:15:34:ac:69:69:8a:7d:2c:dc:3f:a6:0b:01:
41:ba:b0:b6:19:71:60:54:14:26:d8:0a:3f:6b:c4:
91:1c:13:64:0b:c7:98:9c:ac:16:1b:92:fa:5a:07:
de:91:55:5d:7a:3c:2b:ee:1a:77:61:70:69:ae:a6:
30:c8:ff:48:47:58:8e:41:44:1f:7b:49:ac:b7:4b:
77:35:ed:5c:4e:25:d2:9d:ec:d3:aa:13:80:aa:47:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:68:5B:01:D1:D8:76:F6:A6:3E:23:D8:78:2B:F8:DB:DD:0D:12
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gCdoWwHR2Hb2pj4j2Hgr-NvdDRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.62.0/24
163.5.71.0/24
163.5.75.0-163.5.76.255
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.120.0-163.5.122.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0-163.5.162.255
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.176.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0/24
163.5.212.0/24
163.5.217.0-163.5.218.255
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:78:63:67:1e:a0:e0:81:0e:ca:43:ca:c6:c3:a0:05:82:86:
43:0f:4f:1f:5d:9e:28:93:fc:f0:44:64:87:12:c6:ca:56:56:
5a:af:d9:57:95:22:2b:d5:25:28:c1:68:6d:e6:44:1c:0e:24:
34:a1:01:a4:fc:6a:d4:ad:84:20:69:1a:f9:6f:60:39:9a:81:
91:a1:67:b1:76:25:ed:bf:56:84:fc:f2:ba:bb:d2:52:7f:bd:
68:c1:c8:4d:f5:ba:4d:e5:9a:03:c6:a8:2a:27:ea:d0:e2:1d:
34:b1:80:18:e5:c8:0a:df:f6:63:31:65:1d:ff:45:e1:e5:0e:
b7:25:32:b9:d2:f5:53:3d:9b:be:a0:48:c6:85:5f:7a:20:bf:
c4:98:43:79:61:7b:70:c4:f7:c1:6e:7a:eb:4c:b0:af:c4:c2:
b3:e4:e6:95:7c:12:8e:be:15:92:82:24:69:9d:d8:ce:ad:53:
d0:62:21:8e:68:8d:71:80:76:f8:87:2a:e4:41:09:21:b4:de:
22:25:7b:34:98:8a:17:29:0f:62:c0:41:5d:71:2d:80:ff:e9:
17:03:9a:a1:97:3f:7d:33:ce:83:29:8b:76:58:f0:be:17:30:
22:82:a1:f6:90:bc:bf:31:da:e5:a6:2f:f6:08:e2:79:6a:8b:
78:50:b5:d4
-----BEGIN CERTIFICATE-----
MIIGezCCBWOgAwIBAgISAYs4FRBAocbRJBcDk/Snn4NXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMxMDE2MTA0MzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDI3Njg1YjAxZDFkODc2ZjZhNjNlMjNkODc4MmJmOGRiZGQwZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwcIQpxZrJ1c7RU3t20jfVRAwuN/
fz5bYbbNqEZahwn+zsXqT11OZpmqPkN2CscfFQs34hNLWiU/Ul71F0QBGXXmGRf2
vNim9XMcmMSORxjsDVApVuf//0StciXEXRqggFKN09OKTteV1/CbrOvdF5VmOHHa
VWgVnzLOh4JaJJYIHZbt8QhI2i+FvaUQEe1eUYh7rz0Z691hTsYcm6oPyxzv0vIp
SxU0rGlpin0s3D+mCwFBurC2GXFgVBQm2Ao/a8SRHBNkC8eYnKwWG5L6WgfekVVd
ejwr7hp3YXBprqYwyP9IR1iOQUQfe0mst0t3Ne1cTiXSnezTqhOAqkd67wIDAQAB
o4IDhzCCA4MwHQYDVR0OBBYEFIAnaFsB0dh29qY+I9h4K/jb3Q0SMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvZ0Nkb1d3SFIySGIycGo0ajJIZ3ItTnZkRFJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBmwYIKwYBBQUHAQcBAf8EggGKMIIBhjCCAYIEAgABMIIB
egMEAKMFHgMEAKMFITAMAwQAowUjAwQAowUkAwQAowU+AwQAowVHMAwDBACjBUsD
BACjBUwDBACjBU8DBACjBVMDBACjBVkDBAGjBV4DBAGjBWIwDAMEA6MFaAMEAKMF
ajAMAwQBowVuAwQAowVyMAwDBAOjBXgDBACjBXoDBACjBX4DBACjBYADBACjBYYD
BAGjBYowDAMEAKMFjQMEBKMFgAMEAKMFkgMEAKMFlAMEAaMFlgMEAKMFnDAMAwQF
owWgAwQAowWiAwQAowWlAwQAowWnMAwDBAGjBaoDBACjBawDBACjBbADBAGjBbIw
DAMEAKMFtQMEAKMFtgMEAKMFugMEAaMFvAMEAKMFvwMEAKMFwwMEAKMFxgMEAKMF
yTAMAwQAowXLAwQBowXMAwQAowXPAwQAowXUMAwDBACjBdkDBACjBdoDBACjBeAD
BACjBeQDBACjBesDBACjBfEDBACjBfcwDAMEAKMF+QMEAaMF/AMEAKMF/zANBgkq
hkiG9w0BAQsFAAOCAQEAT3hjZx6g4IEOykPKxsOgBYKGQw9PH12eKJP88ERkhxLG
ylZWWq/ZV5UiK9UlKMFobeZEHA4kNKEBpPxq1K2EIGka+W9gOZqBkaFnsXYl7b9W
hPzyurvSUn+9aMHITfW6TeWaA8aoKifq0OIdNLGAGOXICt/2YzFlHf9F4eUOtyUy
udL1Uz2bvqBIxoVfeiC/xJhDeWF7cMT3wW5660ywr8TCs+TmlXwSjr4VkoIkaZ3Y
zq1T0GIhjmiNcYB2+Icq5EEJIbTeIiV7NJiKFykPYsBBXXEtgP/pFwOaoZc/fTPO
gymLdljwvhcwIoKh9pC8vzHa5aYv9gjieWqLeFC11A==
-----END CERTIFICATE-----
Generated at Mon Oct 16 12:27:05 2023 by rpki-client on console-fra.rpki-client.org