Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/luJfYLX9CSkwI6h9BWnDiBTWqNc.roa
File: luJfYLX9CSkwI6h9BWnDiBTWqNc.roa (raw, json)
Hash identifier: HmLxFVtr4aiLWtTN/LbKMl81wcdRYpKdtlfNgUeUz9U=
Subject key identifier: 96:E2:5F:60:B5:FD:09:29:30:23:A8:7D:05:69:C3:88:14:D6:A8:D7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188722427F76ACC7D6E2F2B69328FD5398C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/luJfYLX9CSkwI6h9BWnDiBTWqNc.roa
Signing time: Wed 31 May 2023 14:09:12 +0000
ROA not before: Wed 31 May 2023 14:09:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.90.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:24:27:f7:6a:cc:7d:6e:2f:2b:69:32:8f:d5:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: May 31 14:09:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=96e25f60b5fd09293023a87d0569c38814d6a8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:dc:59:1c:41:12:98:95:05:39:e5:34:54:
e3:f9:fe:1d:87:b7:d0:28:3d:94:98:ac:7d:99:f9:
56:e6:db:72:d8:34:08:5b:89:7f:17:a2:03:69:61:
53:e5:72:e5:dc:64:16:bd:34:3c:ff:d1:b6:c8:20:
08:98:98:78:86:3a:5c:f0:35:8a:5a:d3:7d:6d:43:
74:57:5f:43:b9:d9:42:99:bd:ce:d9:6a:c1:ed:7d:
03:33:2b:92:84:15:bd:1c:22:7e:8b:6a:e3:d3:cb:
f9:6d:8b:25:73:18:f4:2d:5b:6a:f3:db:7f:3f:75:
4d:f3:69:93:da:eb:3b:d9:c9:45:02:91:14:68:5b:
3f:fb:cd:a1:18:8b:c4:f1:b5:b1:54:50:0a:17:6e:
b6:08:31:1c:4d:c5:16:42:46:40:78:66:9e:c5:21:
57:f8:3c:48:b0:01:3d:4a:ec:87:67:9f:ae:d2:5b:
81:24:91:0e:9b:2c:79:7b:3c:3f:a3:3b:f8:4c:3c:
d7:77:f7:53:f5:91:a7:7d:88:cd:09:c6:fc:57:e8:
79:68:83:d2:50:6e:a0:d8:31:fc:a5:62:ff:ed:2c:
60:b3:41:e9:3e:8a:33:9b:ca:d6:dc:49:a9:90:bb:
0e:cb:73:af:8b:62:5f:a0:4e:a7:bb:0a:dc:3a:58:
be:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E2:5F:60:B5:FD:09:29:30:23:A8:7D:05:69:C3:88:14:D6:A8:D7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/luJfYLX9CSkwI6h9BWnDiBTWqNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.117.0-163.5.121.255
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0-163.5.148.255
163.5.150.0/23
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.213.0/24
163.5.216.0/22
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0/24
163.5.245.0/24
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e3:67:62:4a:c7:14:48:d7:64:21:6f:89:1a:d2:e3:2f:14:
52:f9:5e:85:a8:66:ed:be:63:f3:86:23:34:46:ff:86:82:42:
01:0d:ab:d4:bd:ba:81:c7:ea:e2:8d:1c:d1:ba:55:1e:7d:49:
33:85:73:8f:ee:ed:c9:e0:17:d8:cc:7b:20:a2:c4:84:f6:8f:
2e:d3:7d:90:78:87:c0:b4:60:f7:c1:06:2a:f3:a8:70:2f:c4:
5d:43:fe:4a:8e:72:19:5c:3b:92:18:bb:8c:76:d4:a3:f4:42:
31:ab:a6:4e:59:2f:b4:00:6f:a0:d2:b0:0f:ff:fd:e2:1c:d3:
8c:fa:56:5e:e9:ed:1d:a5:8e:8a:c4:53:da:df:13:37:77:42:
70:ad:33:31:e0:f2:eb:b2:80:33:70:10:e1:85:27:bd:57:67:
a4:d9:c9:c8:5e:6b:b5:1f:bb:28:e3:64:83:3d:71:cd:a8:cd:
71:20:af:71:56:81:a3:f1:c3:cf:9a:de:03:c9:01:b2:ed:73:
81:c7:48:79:d0:89:13:f0:49:4a:a6:4e:43:d4:6a:b8:e1:09:
0f:5e:5d:c6:44:31:98:73:40:4f:04:79:75:df:05:96:69:70:
cb:ee:48:b4:d0:86:16:a4:bf:dd:e8:a5:dd:92:ef:92:09:db:
87:a9:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org