Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k2nhCpXBkexTFJAdmHqW1J1ZuF8.roa
File: k2nhCpXBkexTFJAdmHqW1J1ZuF8.roa (raw, json)
Hash identifier: M0pyKC7d4Hq5E5NkJ0evw0/df0++sKQpxUhuvm+7bCY=
Subject key identifier: 93:69:E1:0A:95:C1:91:EC:53:14:90:1D:98:7A:96:D4:9D:59:B8:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018890E0388D6681E2F89CB557DB93C06A4B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k2nhCpXBkexTFJAdmHqW1J1ZuF8.roa
Signing time: Tue 06 Jun 2023 13:23:13 +0000
ROA not before: Tue 06 Jun 2023 13:23:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:e0:38:8d:66:81:e2:f8:9c:b5:57:db:93:c0:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 6 13:23:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9369e10a95c191ec5314901d987a96d49d59b85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0f:cd:a8:37:81:b2:2e:a4:74:2e:00:14:0a:
28:08:c2:ad:76:38:d0:be:1e:b3:1e:1d:cc:ba:c1:
2b:62:f4:7a:5a:06:53:cb:5f:8b:2f:fe:f9:13:f1:
c3:cc:3d:6a:d0:8e:69:1f:84:3b:a7:eb:cf:d2:3b:
72:6f:03:7c:ab:08:89:61:fe:34:c6:22:32:5d:89:
1b:b9:d7:60:bf:4c:51:67:c1:e7:18:68:d8:93:70:
fc:0e:63:b2:85:6b:22:d1:0d:43:c5:f8:83:86:6f:
c6:c5:25:02:d1:62:4e:09:43:eb:67:78:84:e7:fd:
73:3b:8c:b8:da:85:59:99:56:9a:3c:2e:07:02:c2:
40:81:cb:5c:ee:bb:d5:c7:0e:86:e1:42:44:7a:48:
68:7f:5b:24:21:7d:2f:f0:5b:e5:28:c7:25:c1:af:
2e:57:2e:ba:1e:15:1c:d0:6b:7d:5f:ae:1e:0d:f5:
40:4e:46:8e:68:c0:f5:51:06:c1:4d:2b:16:06:af:
99:3d:86:17:90:de:94:ea:6a:8a:b5:03:09:2b:1c:
b4:3d:79:f2:c9:51:55:2b:89:ed:27:ef:0e:2c:0e:
28:eb:c3:b7:26:56:92:ef:33:07:bc:42:cc:ef:23:
db:0d:f1:80:60:52:92:8c:b5:de:08:1b:a4:5e:f9:
1e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:E1:0A:95:C1:91:EC:53:14:90:1D:98:7A:96:D4:9D:59:B8:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/k2nhCpXBkexTFJAdmHqW1J1ZuF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.153.0/24
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0/24
163.5.245.0/24
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
90:25:65:0c:b4:6a:3b:1a:61:66:36:a6:bd:d7:5f:19:fc:9c:
ef:70:7a:9b:57:ba:91:6b:22:e8:02:1e:30:fd:88:aa:f2:9c:
61:8d:1d:65:d3:1c:74:b5:17:c0:9b:ba:6f:e3:f1:72:9a:3b:
6d:45:21:7b:3f:ae:74:3b:14:71:16:3b:16:d9:db:97:5d:05:
8e:c3:ee:7d:be:2a:b3:11:9c:2c:9d:9d:e8:ec:73:89:e6:ec:
3c:1b:71:69:5f:40:6a:73:88:a0:f0:67:0d:e9:00:67:a5:9a:
0c:b1:5e:fd:f1:ac:97:c0:8d:ce:03:fc:a5:f1:64:ef:dd:09:
ad:22:b4:47:58:f7:5c:b8:2e:e3:06:a7:f8:ca:47:fb:61:c3:
83:76:e1:cc:57:d8:b1:87:c4:3b:3d:3a:da:f6:3a:ce:70:1e:
19:63:60:2e:d8:82:4e:08:24:c2:ab:ed:89:f9:50:88:67:29:
6c:36:b3:a6:e9:e3:3d:0f:e3:51:45:13:b5:a1:49:77:e3:a9:
27:78:e6:19:e5:48:46:2b:8a:f9:04:18:9f:14:da:7f:fa:62:
fc:39:af:af:76:19:cb:24:52:87:ba:bd:f7:72:9e:fc:1a:44:
12:07:4f:97:2b:6b:d5:56:d7:39:6e:4c:e6:1e:dc:e3:98:39:
89:de:81:60
-----BEGIN CERTIFICATE-----
MIIG6DCCBdCgAwIBAgISAYiQ4DiNZoHi+Jy1V9uTwGpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjA2MTMyMzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzY5ZTEwYTk1YzE5MWVjNTMxNDkwMWQ5ODdhOTZkNDlkNTliODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g/NqDeBsi6kdC4AFAooCMKtdjjQ
vh6zHh3MusErYvR6WgZTy1+LL/75E/HDzD1q0I5pH4Q7p+vP0jtybwN8qwiJYf40
xiIyXYkbuddgv0xRZ8HnGGjYk3D8DmOyhWsi0Q1DxfiDhm/GxSUC0WJOCUPrZ3iE
5/1zO4y42oVZmVaaPC4HAsJAgctc7rvVxw6G4UJEekhof1skIX0v8FvlKMclwa8u
Vy66HhUc0Gt9X64eDfVATkaOaMD1UQbBTSsWBq+ZPYYXkN6U6mqKtQMJKxy0PXny
yVFVK4ntJ+8OLA4o68O3JlaS7zMHvELM7yPbDfGAYFKSjLXeCBukXvkeuQIDAQAB
o4ID9DCCA/AwHQYDVR0OBBYEFJNp4QqVwZHsUxSQHZh6ltSdWbhfMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvazJuaENwWEJrZXhURkpBZG1IcVcxSjFadUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICCAYIKwYBBQUHAQcBAf8EggH3MIIB8zCCAe8EAgABMIIB
5wMEAKMFHjAMAwQFowUgAwQAowUkAwQBowU6MAwDBACjBT0DBAajBQADBACjBUMw
DAMEAaMFRgMEAKMFSAMEAaMFSjAMAwQAowVNAwQEowVAAwQAowVTAwQBowVWAwQA
owVZMAwDBACjBVsDBACjBVwDBACjBV8wDAMEAKMFYQMEAqMFYDAMAwQAowVpAwQA
owVqMAwDBAGjBW4DBAKjBXAwDAMEAKMFdQMEAKMFdgMEAaMFeDAMAwQAowV9AwQA
owWAAwQAowWGMAwDBAGjBYoDBASjBYADBACjBZIDBACjBZQDBAGjBZYDBACjBZkD
BACjBZswDAMEAKMFnwMEAKMFpDAMAwQBowWmAwQAowWqAwQAowWsAwQAowWvMAwD
BACjBbEDBAKjBbAwDAMEAKMFtQMEAKMFtjAMAwQAowW5AwQAowW6AwQBowW8AwQA
owW/AwQBowXCAwQAowXGMAwDBACjBckDBAGjBcwDBACjBdIDBAGjBdQwDAMEA6MF
2AMEAKMF3DAMAwQBowXeAwQAowXgMAwDBAGjBeIDBACjBeQDBACjBeYDBACjBegw
DAMEAKMF7QMEAKMF7gMEAKMF8QMEAKMF8wMEAKMF9QMEAKMF+DALAwQBowX6AwMB
owQDBAC5/TYwDQYJKoZIhvcNAQELBQADggEBAJAlZQy0ajsaYWY2pr3XXxn8nO9w
eptXupFrIugCHjD9iKrynGGNHWXTHHS1F8Cbum/j8XKaO21FIXs/rnQ7FHEWOxbZ
25ddBY7D7n2+KrMRnCydnejsc4nm7DwbcWlfQGpziKDwZw3pAGelmgyxXv3xrJfA
jc4D/KXxZO/dCa0itEdY91y4LuMGp/jKR/thw4N24cxX2LGHxDs9Otr2Os5wHhlj
YC7Ygk4IJMKr7Yn5UIhnKWw2s6bp4z0P41FFE7WhSXfjqSd45hnlSEYrivkEGJ8U
2n/6Yvw5r692GcskUoe6vfdynvwaRBIHT5cra9VW1zluTOYe3OOYOYnegWA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org