Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pcZtbtDVK_kar-j7qHvnBJ0Ybs4.roa
File: pcZtbtDVK_kar-j7qHvnBJ0Ybs4.roa (raw, json)
Hash identifier: L7hxn4ChKw696hUY555KveTVi8K22pJJCoqHo0NPozA=
Subject key identifier: A5:C6:6D:6E:D0:D5:2B:F9:1A:AF:E8:FB:A8:7B:E7:04:9D:18:6E:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0188A07B9034B9FF3430BC2C4127E71A1542
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pcZtbtDVK_kar-j7qHvnBJ0Ybs4.roa
Signing time: Fri 09 Jun 2023 14:07:12 +0000
ROA not before: Fri 09 Jun 2023 14:07:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a0:7b:90:34:b9:ff:34:30:bc:2c:41:27:e7:1a:15:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jun 9 14:07:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5c66d6ed0d52bf91aafe8fba87be7049d186ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:47:3b:93:4f:5f:76:8b:93:70:13:d7:f0:
de:6d:e9:74:4a:dd:5a:ff:75:c7:6f:ab:c1:02:79:
f6:4f:99:c3:39:3c:73:40:24:0f:4d:60:8d:9d:49:
86:8e:d0:19:70:56:0b:26:a1:f4:41:2e:0f:c0:9d:
c7:ce:07:57:1d:c4:e0:d9:60:14:15:ea:e1:a4:54:
c9:16:23:f0:c0:b8:00:26:8d:a3:c3:7e:52:7b:60:
d1:76:25:1c:31:f0:6e:b9:36:48:45:50:24:9d:12:
ea:da:3e:df:11:c1:0e:c8:48:48:fe:90:d3:6c:8d:
a3:76:2b:c8:af:87:08:5a:9f:6f:7d:23:71:e9:34:
c2:01:e1:e6:09:e5:89:27:ef:62:a8:b4:b0:60:2f:
67:bd:f3:48:53:eb:89:21:dc:ec:0f:ea:8f:4e:71:
d6:46:79:7e:20:61:8a:0c:73:d3:5c:84:97:86:ab:
f3:76:fd:fb:61:58:f0:cb:0f:46:c9:25:7f:e6:56:
39:82:ea:d4:ea:68:38:0a:51:41:16:9c:f6:f3:b3:
8a:ae:3f:8a:c5:fe:03:15:22:8a:41:59:fc:2c:ed:
cd:e5:d0:ba:96:7d:58:58:92:b1:bb:bc:e1:78:67:
9d:67:d2:eb:d7:4f:24:3e:64:39:38:3c:6f:85:57:
aa:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:6D:6E:D0:D5:2B:F9:1A:AF:E8:FB:A8:7B:E7:04:9D:18:6E:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pcZtbtDVK_kar-j7qHvnBJ0Ybs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.32.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.63.255
163.5.67.0/24
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.99.255
163.5.105.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.117.0-163.5.118.255
163.5.120.0/23
163.5.125.0-163.5.128.255
163.5.134.0/24
163.5.138.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.153.0/24
163.5.155.0/24
163.5.159.0-163.5.164.255
163.5.166.0-163.5.170.255
163.5.172.0/24
163.5.175.0/24
163.5.177.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.194.0/23
163.5.198.0/24
163.5.201.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.222.0-163.5.224.255
163.5.226.0-163.5.228.255
163.5.230.0/24
163.5.232.0/24
163.5.237.0-163.5.238.255
163.5.241.0-163.5.245.255
163.5.248.0/24
163.5.250.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b1:69:b1:2d:96:ad:49:76:ad:2d:51:96:ed:4c:a7:3d:00:
81:2d:9f:2d:3a:bd:99:d9:b5:fd:b7:9d:c0:3a:92:be:a3:a4:
5f:ee:ed:ab:41:16:c5:cc:47:09:ba:99:90:80:26:f2:c1:b2:
3e:77:ec:fd:bc:e0:8c:c5:9e:66:2f:cb:c7:a5:18:41:04:61:
7b:c5:90:5c:e1:f7:6d:6d:05:e2:96:41:e6:e2:ec:e6:b6:de:
72:45:dc:ed:dd:4b:1e:a6:39:e3:06:7e:27:4f:9a:4a:d2:50:
99:1b:67:e2:8e:df:c0:07:24:38:65:f5:fd:d6:c4:7f:0f:a3:
47:16:37:5a:90:de:cb:ef:4b:94:7a:f8:b5:d2:13:57:fb:f4:
bc:a1:53:f9:6a:49:e4:7a:af:37:ca:e0:f4:3a:5f:75:4a:8e:
21:76:7f:36:c5:7b:d5:04:3b:2b:e9:1f:93:11:a5:2a:6f:7e:
10:f1:8f:1e:f4:52:ec:40:98:e0:b4:fe:ca:17:28:d9:08:3f:
20:2f:5d:74:b3:76:4c:66:1c:a3:f8:c2:d0:0e:8a:83:70:c0:
23:3d:73:12:b6:c5:8e:26:3a:1d:31:d8:0f:66:1e:00:43:a7:
b3:b6:a7:08:55:69:fd:5e:e5:a9:60:28:84:00:1f:44:38:f8:
da:8f:64:3f
-----BEGIN CERTIFICATE-----
MIIG3jCCBcagAwIBAgISAYige5A0uf80MLwsQSfnGhVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNjA5MTQwNzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWM2NmQ2ZWQwZDUyYmY5MWFhZmU4ZmJhODdiZTcwNDlkMTg2ZWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpVHO5NPX3aLk3AT1/Debel0St1a
/3XHb6vBAnn2T5nDOTxzQCQPTWCNnUmGjtAZcFYLJqH0QS4PwJ3HzgdXHcTg2WAU
FerhpFTJFiPwwLgAJo2jw35Se2DRdiUcMfBuuTZIRVAknRLq2j7fEcEOyEhI/pDT
bI2jdivIr4cIWp9vfSNx6TTCAeHmCeWJJ+9iqLSwYC9nvfNIU+uJIdzsD+qPTnHW
Rnl+IGGKDHPTXISXhqvzdv37YVjwyw9GySV/5lY5gurU6mg4ClFBFpz287OKrj+K
xf4DFSKKQVn8LO3N5dC6ln1YWJKxu7zheGedZ9Lr108kPmQ5ODxvhVeq8wIDAQAB
o4ID6jCCA+YwHQYDVR0OBBYEFKXGbW7Q1Sv5Gq/o+6h75wSdGG7OMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcGNadGJ0RFZLX2thci1qN3FIdm5CSjBZYnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB/gYIKwYBBQUHAQcBAf8EggHtMIIB6TCCAeUEAgABMIIB
3QMEAKMFHjAMAwQFowUgAwQAowUkAwQBowU6MAwDBACjBT0DBAajBQADBACjBUMw
DAMEAaMFRgMEAKMFSAMEAaMFSjAMAwQAowVNAwQEowVAAwQAowVTAwQBowVWAwQA
owVZMAwDBACjBVsDBACjBVwDBACjBV8wDAMEAKMFYQMEAqMFYDAMAwQAowVpAwQA
owVqMAwDBAGjBW4DBAKjBXAwDAMEAKMFdQMEAKMFdgMEAaMFeDAMAwQAowV9AwQA
owWAAwQAowWGMAwDBAGjBYoDBASjBYADBACjBZIDBAKjBZQDBACjBZkDBACjBZsw
DAMEAKMFnwMEAKMFpDAMAwQBowWmAwQAowWqAwQAowWsAwQAowWvMAwDBACjBbED
BAKjBbAwDAMEAKMFtQMEAKMFtjAMAwQAowW5AwQAowW6AwQBowW8AwQAowW/AwQB
owXCAwQAowXGMAwDBACjBckDBAGjBcwDBACjBdIDBAGjBdQwDAMEA6MF2AMEAKMF
3DAMAwQBowXeAwQAowXgMAwDBAGjBeIDBACjBeQDBACjBeYDBACjBegwDAMEAKMF
7QMEAKMF7jAMAwQAowXxAwQBowX0AwQAowX4MAsDBAGjBfoDAwGjBAMEALn9NjAN
BgkqhkiG9w0BAQsFAAOCAQEAqLFpsS2WrUl2rS1Rlu1Mpz0AgS2fLTq9mdm1/bed
wDqSvqOkX+7tq0EWxcxHCbqZkIAm8sGyPnfs/bzgjMWeZi/Lx6UYQQRhe8WQXOH3
bW0F4pZB5uLs5rbeckXc7d1LHqY54wZ+J0+aStJQmRtn4o7fwAckOGX1/dbEfw+j
RxY3WpDey+9LlHr4tdITV/v0vKFT+WpJ5HqvN8rg9DpfdUqOIXZ/NsV71QQ7K+kf
kxGlKm9+EPGPHvRS7ECY4LT+yhco2Qg/IC9ddLN2TGYco/jC0A6Kg3DAIz1zErbF
jiY6HTHYD2YeAEOns7anCFVp/V7lqWAohAAfRDj42o9kPw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org