Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hXK4SJ-5YH5mzFoAPmhGsz2KWmo.roa
File: hXK4SJ-5YH5mzFoAPmhGsz2KWmo.roa (raw, json)
Hash identifier: k55URWrVOvh7/nCuBnjQadTACD1RIf07BXJecO0rjR8=
Subject key identifier: 85:72:B8:48:9F:B9:60:7E:66:CC:5A:00:3E:68:46:B3:3D:8A:5A:6A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0185D9633B2E249E7BC14AA59166A2D0C3DA
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hXK4SJ-5YH5mzFoAPmhGsz2KWmo.roa
Signing time: Sun 22 Jan 2023 12:10:37 +0000
ROA not before: Sun 22 Jan 2023 12:10:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d9:63:3b:2e:24:9e:7b:c1:4a:a5:91:66:a2:d0:c3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jan 22 12:10:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8572b8489fb9607e66cc5a003e6846b33d8a5a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:03:58:fe:02:ec:fa:4d:3e:69:f5:0f:f7:
48:44:91:c8:fb:e4:1c:5f:68:be:91:4a:27:86:65:
c7:92:fe:e6:44:d8:29:d4:fd:22:27:32:ba:89:f4:
d6:31:1b:ec:0b:c1:d9:2b:8c:6d:ae:da:8a:35:05:
9d:e7:d7:36:eb:18:13:7e:52:ad:97:21:cf:4a:ec:
6d:ef:5a:41:80:04:38:d5:f2:58:89:07:c2:2b:3e:
4a:d5:42:30:79:34:26:c2:45:04:ce:93:53:a8:73:
bd:6c:aa:ea:16:53:31:a5:f8:44:26:1a:e2:6a:3a:
84:12:ef:32:fe:c8:56:20:e4:e0:ee:b8:dc:ec:ac:
9a:22:9e:35:77:56:6c:76:a8:3c:da:d9:f4:ed:ae:
7b:33:d4:75:61:05:f5:1a:8b:aa:3b:c8:84:6f:9d:
c7:50:9a:b6:13:c7:10:c3:3d:86:7f:01:42:44:9d:
26:89:2c:86:9b:7a:ae:63:c7:b2:0a:b3:45:5a:fa:
c1:8f:01:98:eb:6e:c6:17:37:e6:a9:44:e2:6e:93:
26:74:db:c6:0e:ad:5d:63:93:c3:32:38:bf:ab:63:
6a:13:f6:c8:d3:4b:42:e5:82:ce:b2:eb:fb:e0:6a:
4b:05:ca:c9:f1:35:5d:79:6d:4d:65:bf:08:16:59:
f3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:72:B8:48:9F:B9:60:7E:66:CC:5A:00:3E:68:46:B3:3D:8A:5A:6A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hXK4SJ-5YH5mzFoAPmhGsz2KWmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.38.0/23
163.5.70.0/24
163.5.72.0/24
163.5.74.0-163.5.79.255
163.5.88.0/23
163.5.91.0-163.5.106.255
163.5.108.0/22
163.5.113.0-163.5.114.255
163.5.116.0-163.5.120.255
163.5.122.0/23
163.5.125.0-163.5.129.255
163.5.131.0/24
163.5.134.0/23
163.5.137.0-163.5.142.255
163.5.144.0/24
163.5.146.0-163.5.148.255
163.5.150.0-163.5.152.255
163.5.154.0-163.5.157.255
163.5.159.0-163.5.172.255
163.5.174.0-163.5.189.255
163.5.191.0-163.5.192.255
163.5.194.0/24
163.5.199.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.222.0-163.5.230.255
163.5.237.0-163.5.241.255
163.5.243.0-163.5.246.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
49:60:e8:f6:aa:1c:41:ed:2f:a0:8b:56:19:4f:b2:4f:43:a1:
46:c2:89:a6:9d:b2:d3:45:31:d0:45:be:75:49:92:3c:0d:11:
b7:37:ef:fd:93:2e:d8:a5:c5:7b:c6:4a:9b:ce:a0:67:9c:dc:
f6:7e:70:78:71:15:f6:18:1c:d8:f1:74:7c:6e:c9:b5:d7:26:
24:f5:ad:9b:44:1d:aa:b0:d8:8c:64:a9:e4:95:16:82:41:15:
9a:e3:9f:32:ea:17:f0:6f:a3:83:3f:88:68:b6:97:9e:38:4f:
8a:d6:a6:7c:a7:06:63:d4:f6:bc:91:5f:b4:ad:af:6b:f3:05:
98:c3:ec:b7:a6:c4:e8:9a:76:b5:7b:b0:66:d8:08:e6:56:b7:
c1:95:bc:8b:3d:83:3b:84:50:9d:11:f6:34:3b:68:08:7a:74:
75:3e:a6:ce:77:2a:a7:0c:51:52:d0:39:32:49:7f:6f:22:92:
43:63:f2:0b:69:4f:e9:62:ef:aa:29:e3:13:f6:5c:23:48:1e:
d4:2e:6d:52:d0:a3:77:d5:8a:52:64:1f:e4:f0:bb:6c:37:9b:
80:2f:27:42:39:4d:5d:ed:55:5b:57:89:5e:b0:94:4b:34:60:
47:72:0f:87:30:53:01:7b:24:00:71:de:85:e4:e9:4e:c9:8e:
ea:a9:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org