Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i1aigGwKOf66SdKxHVTCWwNTcVE.roa
File: i1aigGwKOf66SdKxHVTCWwNTcVE.roa (raw, json)
Hash identifier: RXpS9PMhK7scPZ7e6VKSY3TRow2gGqIkHcdOxCnyTwA=
Subject key identifier: 8B:56:A2:80:6C:0A:39:FE:BA:49:D2:B1:1D:54:C2:5B:03:53:71:51
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189AD1BCCE5DD431463BDFA5C2D581BDC00
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i1aigGwKOf66SdKxHVTCWwNTcVE.roa
Signing time: Mon 31 Jul 2023 18:00:27 +0000
ROA not before: Mon 31 Jul 2023 18:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:1b:cc:e5:dd:43:14:63:bd:fa:5c:2d:58:1b:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 31 18:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b56a2806c0a39feba49d2b11d54c25b03537151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c1:72:22:1c:d4:31:4a:f1:80:da:7d:55:00:
06:a0:1f:e9:57:17:38:b4:8e:64:40:9a:5a:98:0c:
17:fe:49:8b:8b:1d:d4:15:6c:31:9c:53:da:7b:91:
79:31:cc:ac:4f:c2:0c:d7:4b:37:86:ac:bc:7c:20:
4e:1b:08:d5:b6:1d:99:20:69:2a:2a:96:49:97:bd:
02:27:9a:a4:05:d2:e3:a0:a2:f7:68:28:c5:00:96:
bd:38:12:95:4e:d1:81:7f:1e:9d:f5:17:c0:c0:64:
0d:4c:fb:87:56:25:0b:67:db:9f:3d:84:db:74:7d:
2e:d4:42:99:e6:0d:d0:d5:52:c1:b8:a9:5e:47:67:
3d:18:f5:75:73:65:f4:28:6a:56:da:0d:75:73:26:
9c:b5:d1:be:41:82:fc:1d:3d:e2:b7:83:c0:e8:61:
f4:e1:bb:8c:55:5c:84:41:0f:17:e5:b0:ce:de:72:
15:bf:3f:d4:cf:66:b8:2f:60:fe:21:d1:c7:9f:e4:
ef:da:4b:b6:c4:22:c5:88:38:0f:e7:9e:d5:d3:ef:
c2:1f:d9:c6:3d:73:c7:40:aa:51:54:33:f7:79:e8:
17:b3:a2:8a:51:d7:12:97:6a:45:72:1c:1f:8e:43:
d7:b5:97:0f:47:3e:e1:48:67:0b:f3:ee:98:29:43:
8d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:56:A2:80:6C:0A:39:FE:BA:49:D2:B1:1D:54:C2:5B:03:53:71:51
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/i1aigGwKOf66SdKxHVTCWwNTcVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.59.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/24
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.124.0-163.5.126.255
163.5.128.0/24
163.5.133.0-163.5.134.255
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/23
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
28:52:34:6b:df:7c:a7:d8:85:cf:13:b4:78:0f:b3:59:57:1a:
ff:8c:d7:be:a9:e0:ee:5f:bb:72:f5:20:78:62:8a:36:41:7c:
53:9d:fb:d4:f5:cd:46:0a:2a:62:f9:33:53:d1:14:99:cf:a8:
c8:71:4b:d5:f8:83:da:9e:e5:ae:04:30:81:70:88:88:20:06:
c0:c4:34:fb:7e:7f:1b:8e:ec:24:ee:c6:20:4d:ed:4c:d4:35:
0e:c6:50:22:a3:77:b0:6d:9e:35:26:69:09:2f:d6:1e:eb:da:
f9:8c:1c:90:1d:36:a7:92:9d:9d:bb:46:9b:23:35:c4:42:70:
ad:00:46:fa:90:61:32:23:7f:73:9b:7f:9b:76:a5:12:17:28:
26:59:87:86:43:c9:cb:c9:82:83:e6:a0:32:b2:34:f1:2e:aa:
d8:43:23:ea:31:39:39:d0:31:fb:b3:ad:f5:51:31:7b:17:57:
c7:bd:17:28:02:10:e6:f7:9b:4e:03:53:9b:e7:44:22:6b:42:
54:77:b2:81:10:b0:5f:2c:1c:8d:c8:74:89:61:89:68:77:cb:
32:fd:e5:9d:05:11:e8:3f:91:85:42:18:b5:02:48:e1:9b:2c:
50:3b:50:c2:89:8a:0d:4b:89:e2:11:2f:90:18:0b:73:be:2c:
35:16:b5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 14:34:48 2023 by rpki-client on console-ams.rpki-client.org