Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/h38_FRSFtc_KUKXspjuQyRz9Pf4.roa
File: h38_FRSFtc_KUKXspjuQyRz9Pf4.roa (raw, json)
Hash identifier: rSVR4hV5EH0RmCMe+fZE31hKM51+w70UvhlYVKEqALI=
Subject key identifier: 87:7F:3F:15:14:85:B5:CF:CA:50:A5:EC:A6:3B:90:C9:1C:FD:3D:FE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188CB6E02F44E837A9BA08D8E6CB6EF8FAC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/h38_FRSFtc_KUKXspjuQyRz9Pf4.roa
Signing time: Sat 17 Jun 2023 22:16:04 +0000
ROA not before: Sat 17 Jun 2023 22:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 17:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:cb:6e:02:f4:4e:83:7a:9b:a0:8d:8e:6c:b6:ef:8f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 17 22:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=877f3f151485b5cfca50a5eca63b90c91cfd3dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:2f:02:15:00:6f:4b:bd:c3:83:4f:9e:97:
4e:72:e6:4b:0c:b8:3a:85:06:6d:95:17:52:e6:0c:
d4:6b:34:59:56:76:53:84:c5:24:6d:71:44:1c:ff:
db:a9:14:ad:38:96:2f:bd:c2:f6:97:5b:d1:99:a8:
55:e2:f2:be:8b:68:88:0a:60:a6:64:da:fe:3e:be:
c5:17:57:b3:ea:07:89:f5:d0:5e:c0:6b:cb:5f:c2:
2a:0b:09:e0:03:7d:26:0b:2c:5d:44:44:ed:22:ae:
b0:9f:ec:b5:fc:d1:36:69:78:11:45:6d:2f:fe:a7:
ff:7a:fd:b4:c9:b6:91:1a:5e:07:bd:56:1d:aa:98:
1a:6c:25:bd:58:95:2c:e2:9a:d1:70:c9:03:03:44:
16:c6:7a:ad:b9:cc:5d:aa:1b:23:b3:35:eb:88:d1:
4d:24:5f:27:b0:f2:c4:01:98:21:c1:9c:00:c8:7a:
f8:a2:a2:1c:aa:58:2b:08:fc:42:ac:03:67:b0:dc:
79:ff:9d:c5:2e:40:24:4b:7e:e2:b3:ae:0f:71:7a:
11:b5:e3:c6:94:57:68:af:90:36:f6:3a:a4:85:5f:
2f:67:18:b4:6f:bd:7a:02:0d:ed:cc:9d:57:08:50:
c8:78:fc:ec:ec:92:e2:a6:fc:7f:29:25:84:f6:55:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7F:3F:15:14:85:B5:CF:CA:50:A5:EC:A6:3B:90:C9:1C:FD:3D:FE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/h38_FRSFtc_KUKXspjuQyRz9Pf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0/23
163.5.105.0/24
163.5.107.0/24
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.153.0/24
163.5.159.0-163.5.164.255
163.5.167.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.207.0/24
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3a:0b:05:d5:29:3b:eb:7a:f5:b0:9c:68:9b:21:3a:58:bd:
14:ab:0c:bf:23:d2:05:72:86:1d:fa:8d:5d:49:1b:66:06:fd:
24:43:2d:d6:1d:4c:4f:12:53:03:2c:28:8a:a3:c2:27:60:98:
20:6b:65:82:30:fb:a5:8f:34:38:b7:f6:0c:6b:8d:03:c3:d0:
fc:05:d6:80:c8:c6:86:7f:1b:fe:40:88:c7:54:60:ed:2d:66:
57:82:9d:5c:be:5c:07:0a:06:a2:54:22:6c:dd:fc:8f:71:00:
5f:7a:15:2b:7a:8b:dc:41:f8:37:18:0e:e7:b3:be:4a:78:69:
08:fd:d0:46:7e:6a:e3:89:dc:68:3f:50:99:e9:13:8f:d0:3b:
48:4c:88:9a:3e:7d:ca:73:65:72:b5:fc:71:3a:99:aa:61:f0:
c0:b2:c8:20:65:4a:89:be:e4:cf:09:c6:05:3a:b1:c7:76:6b:
3b:8e:bc:98:81:4e:c5:8e:d6:82:a3:a3:f1:14:08:34:cc:54:
78:d5:3b:b2:6a:2c:80:63:10:8e:90:77:9f:40:65:a9:c7:f4:
f6:b5:f2:ff:53:23:67:6d:52:ca:e5:9c:c2:9a:40:21:47:ec:
d5:7d:5a:0e:9f:f5:4d:0a:d6:28:ad:52:77:42:83:0b:37:85:
3d:72:33:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:07 2024 by rpki-client on console-fra.rpki-client.org