Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/onTiV5vb9pJDDhcYQ4EvSbkHaiA.roa
File: onTiV5vb9pJDDhcYQ4EvSbkHaiA.roa (raw, json)
Hash identifier: Z4uIZHdlmt/LRulKIER0rpuQ9JHZpxMIRXtNX4DOCxg=
Subject key identifier: A2:74:E2:57:9B:DB:F6:92:43:0E:17:18:43:81:2F:49:B9:07:6A:20
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0187A480DD9EDBD81DBB95F976A619C73797
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/onTiV5vb9pJDDhcYQ4EvSbkHaiA.roa
Signing time: Fri 21 Apr 2023 15:48:41 +0000
ROA not before: Fri 21 Apr 2023 15:48:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:80:dd:9e:db:d8:1d:bb:95:f9:76:a6:19:c7:37:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 21 15:48:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a274e2579bdbf692430e171843812f49b9076a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:94:70:5a:65:3c:7c:79:2a:a8:85:10:e8:
bc:9e:aa:7c:d3:d3:c0:6d:2e:c1:a3:d1:24:6b:f7:
86:95:ef:d9:3d:90:4a:32:1e:e1:cf:d0:9a:c4:14:
e8:44:2c:55:1a:c9:ab:d1:cd:f7:4d:2c:f3:e1:87:
18:6c:5f:72:03:ad:6b:90:5a:1e:d2:44:bc:69:10:
b1:05:bf:34:0a:d2:f3:a3:2a:06:7e:d4:85:34:ee:
77:39:47:a8:ea:cb:a9:4b:d5:d8:11:f3:11:0b:ac:
00:f1:8b:02:ea:f9:6c:da:ac:fc:64:cd:d5:6e:af:
ac:09:f0:b8:55:6a:ac:46:86:55:cb:2b:c3:ca:a6:
28:0d:31:60:a5:55:59:5e:1f:65:35:bc:e1:96:87:
24:42:62:90:0e:cb:df:0e:f7:be:a9:b6:7d:95:76:
da:ad:f6:b8:2b:70:44:3c:e5:d4:d4:cb:76:63:12:
8e:66:8d:d0:d9:86:14:13:2e:37:86:91:a1:c0:06:
d9:ac:e3:09:d3:e6:c9:a7:a6:41:20:3f:09:ad:9d:
6b:30:b3:dd:4a:59:1a:f2:76:95:a0:f4:6b:10:a7:
7d:54:56:a8:05:8e:ac:4b:99:fd:37:40:c0:0e:09:
ea:27:e7:88:0e:70:e3:cc:bf:d8:e2:8b:cd:30:3c:
c6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:E2:57:9B:DB:F6:92:43:0E:17:18:43:81:2F:49:B9:07:6A:20
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/onTiV5vb9pJDDhcYQ4EvSbkHaiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0-163.5.30.255
163.5.32.0-163.5.36.255
163.5.38.0/24
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0-163.5.89.255
163.5.91.0-163.5.93.255
163.5.95.0-163.5.100.255
163.5.102.0/23
163.5.105.0-163.5.106.255
163.5.109.0-163.5.114.255
163.5.116.0-163.5.121.255
163.5.123.0/24
163.5.125.0-163.5.129.255
163.5.134.0/24
163.5.137.0-163.5.144.255
163.5.146.0-163.5.148.255
163.5.150.0-163.5.152.255
163.5.154.0-163.5.157.255
163.5.159.0-163.5.172.255
163.5.174.0/23
163.5.177.0-163.5.183.255
163.5.185.0-163.5.189.255
163.5.191.0-163.5.195.255
163.5.198.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.222.0-163.5.230.255
163.5.232.0/24
163.5.234.0/24
163.5.236.0-163.5.241.255
163.5.243.0-163.5.246.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e4:0c:d0:90:9d:d2:5e:78:cf:3a:26:69:13:f1:82:3e:35:
8b:6c:14:62:19:90:b6:a7:69:3a:49:67:7a:ad:76:21:49:f2:
20:12:18:87:b8:ab:0b:5b:ee:8e:59:47:3f:2e:16:f4:c0:3d:
03:d3:0e:7f:50:92:e0:ae:09:ed:8d:8a:09:7c:6d:1f:93:50:
1e:4e:7d:f6:a8:7d:04:a4:b3:cd:ff:e0:e1:d0:0b:b8:b9:af:
f3:28:85:42:76:1f:99:2b:dc:2b:44:3e:b2:30:0f:12:3d:48:
c2:91:1b:bf:8d:20:9f:ce:c2:5c:69:b5:23:16:38:5a:70:ad:
f3:73:e1:62:d8:a0:ee:0c:49:e6:21:9b:e8:b2:1f:54:f1:f4:
39:8e:a7:c9:a6:43:59:ae:59:15:1c:e9:51:7c:a7:1e:1b:82:
5f:63:d8:fc:d9:cc:de:89:6e:8a:b8:59:09:0f:af:7f:fc:a1:
48:75:64:3d:53:cb:3a:8d:1d:2b:46:1c:98:b3:44:ec:9c:1c:
71:b3:2d:a4:8d:d0:a6:86:fe:0f:c5:2f:f8:ca:a1:ef:76:e2:
44:0d:40:6d:96:92:05:a0:85:87:47:3b:91:ab:63:e0:22:12:
2f:6b:e4:20:52:97:b6:fc:15:75:d0:68:e4:38:3f:3d:7d:e7:
26:40:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org