Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pr5HI5OOR7AB_bDYK_zWp_LaHlc.roa
File: pr5HI5OOR7AB_bDYK_zWp_LaHlc.roa (raw, json)
Hash identifier: EVWgJhgj5yeeyjYzdOu/7+wAZnd2RvcZn+SX59Fb4oo=
Subject key identifier: A6:BE:47:23:93:8E:47:B0:01:FD:B0:D8:2B:FC:D6:A7:F2:DA:1E:57
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A85E016F4F2AD556F8D03A69F42090798
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pr5HI5OOR7AB_bDYK_zWp_LaHlc.roa
Signing time: Mon 11 Sep 2023 20:12:50 +0000
ROA not before: Mon 11 Sep 2023 20:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:e0:16:f4:f2:ad:55:6f:8d:03:a6:9f:42:09:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 11 20:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6be4723938e47b001fdb0d82bfcd6a7f2da1e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:c0:3f:a1:d3:d1:fb:d8:d7:26:c6:8a:4b:
5b:a0:40:80:81:c3:54:e4:55:7b:30:50:53:3e:57:
0f:27:b7:83:40:99:2a:3a:d5:37:12:c7:09:41:46:
ea:22:4d:bc:7f:bd:88:bd:3f:b4:04:1e:15:65:21:
70:18:54:95:4a:94:61:e6:12:3c:8c:23:a5:10:00:
c8:4f:90:08:70:db:1f:f1:ae:9e:fd:a5:40:a4:f3:
ff:75:03:7e:b5:9b:8a:60:25:9a:6a:9b:00:95:ae:
73:a9:d7:ba:6c:57:f5:03:07:a5:df:0f:d9:7e:d7:
02:9f:98:2a:5f:7a:52:19:d9:76:a5:00:e3:75:2b:
82:e1:73:bd:ab:54:a0:2b:3e:ac:ce:5a:c1:df:31:
1a:1a:cd:68:f7:81:a6:f0:80:8e:42:ed:01:1e:0c:
b9:a8:77:43:e7:23:a8:34:2a:1e:74:b0:be:24:8f:
f5:d9:32:62:75:de:7d:3d:eb:e6:80:0e:34:46:cd:
a4:54:76:8b:74:0b:6f:e4:c3:5f:42:23:76:78:23:
f8:94:52:18:19:17:c4:b5:bc:7b:31:99:51:55:ab:
cb:69:2f:09:59:dc:0c:1b:62:db:c6:1b:a6:74:c2:
fb:2c:26:37:8f:9f:1c:46:ee:c1:9f:84:80:79:0b:
8e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BE:47:23:93:8E:47:B0:01:FD:B0:D8:2B:FC:D6:A7:F2:DA:1E:57
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/pr5HI5OOR7AB_bDYK_zWp_LaHlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.70.0/23
163.5.75.0/24
163.5.78.0/23
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.126.255
163.5.128.0/24
163.5.134.0-163.5.137.255
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0-163.5.167.255
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0-163.5.232.255
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:94:cf:72:97:65:53:2a:85:dc:e9:81:5c:8e:e4:37:9d:2b:
2b:8c:ba:ca:39:31:19:94:f4:4a:df:30:71:3f:08:4e:d9:d2:
5e:d4:4c:0d:69:89:6c:28:b0:73:76:23:50:7b:28:83:0a:ae:
1e:6f:5f:b5:5c:08:b5:ae:ce:43:cf:38:89:df:60:d1:d7:10:
45:fc:30:35:9e:97:87:1c:9a:2a:ea:8d:1b:13:9f:05:13:d6:
4c:41:fe:a8:9c:1e:05:31:9c:01:bc:1d:3b:4b:46:c7:30:1a:
d7:8d:3c:56:ec:3a:38:0c:6d:d6:6b:28:1f:12:4e:0b:53:ec:
93:8f:cc:18:ae:54:f0:3e:19:8d:e2:07:2f:54:ff:12:4b:43:
5f:4e:c6:9d:78:f7:fe:32:3e:ab:23:85:87:57:ef:ff:17:e4:
91:a9:dd:ae:29:62:7f:be:92:1e:fb:7b:c7:0e:24:3c:3c:cd:
b0:23:ab:10:f0:7b:d9:29:68:be:f2:5b:50:a1:95:b3:cd:41:
b8:cc:9b:70:47:76:1b:ad:94:af:1e:fa:6e:92:fa:7f:3a:92:
ae:e4:00:08:c5:9c:9c:91:49:5d:1c:4a:8c:51:1a:d2:57:f0:
26:68:c3:b1:29:c9:e1:c4:4b:ed:15:7e:ef:e8:e4:c5:e8:3d:
e6:78:25:57
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgISAYqF4Bb08q1Vb40Dpp9CCQeYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwOTExMjAxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmJlNDcyMzkzOGU0N2IwMDFmZGIwZDgyYmZjZDZhN2YyZGExZTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjObAP6HT0fvY1ybGiktboECAgcNU
5FV7MFBTPlcPJ7eDQJkqOtU3EscJQUbqIk28f72IvT+0BB4VZSFwGFSVSpRh5hI8
jCOlEADIT5AIcNsf8a6e/aVApPP/dQN+tZuKYCWaapsAla5zqde6bFf1Awel3w/Z
ftcCn5gqX3pSGdl2pQDjdSuC4XO9q1SgKz6szlrB3zEaGs1o94Gm8ICOQu0BHgy5
qHdD5yOoNCoedLC+JI/12TJidd59PevmgA40Rs2kVHaLdAtv5MNfQiN2eCP4lFIY
GRfEtbx7MZlRVavLaS8JWdwMG2LbxhumdML7LCY3j58cRu7Bn4SAeQuOfwIDAQAB
o4IDwTCCA70wHQYDVR0OBBYEFKa+RyOTjkewAf2w2Cv81qfy2h5XMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcHI1SEk1T09SN0FCX2JEWUtfeldwX0xhSGxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB1QYIKwYBBQUHAQcBAf8EggHEMIIBwDCCAbwEAgABMIIB
tAMEAKMFHgMEAKMFITAMAwQAowUjAwQAowUkAwQAowU6AwQAowU+AwQAowVAAwQB
owVCAwQBowVGAwQAowVLAwQBowVOAwQAowVTAwQBowVWAwQAowVZAwQBowVeAwQA
owVhMAwDBACjBWMDBACjBWQwDAMEA6MFaAMEAKMFajAMAwQBowVuAwQCowVwMAwD
BACjBXkDBACjBX4DBACjBYAwDAMEAaMFhgMEAaMFiAMEAKMFizAMAwQAowWNAwQE
owWAAwQAowWSAwQAowWUAwQBowWWMAwDBACjBZsDBACjBZwDBACjBaAwDAMEAaMF
ogMEA6MFoAMEAKMFqgMEAaMFrDAMAwQAowWvAwQCowWwMAwDBACjBbUDBACjBbYD
BACjBboDBAGjBbwDBACjBb8DBACjBcMDBACjBcYDBACjBckwDAMEAKMFywMEAaMF
zDAMAwQAowXPAwQBowXUMAwDBAOjBdgDBACjBdwwDAMEAKMF3wMEAKMF4AMEAKMF
5DAMAwQAowXnAwQAowXoAwQAowXrAwQAowXxAwQAowX0MAwDBACjBfcDBAGjBfwD
BACjBf8wDQYJKoZIhvcNAQELBQADggEBALSUz3KXZVMqhdzpgVyO5DedKyuMuso5
MRmU9ErfMHE/CE7Z0l7UTA1piWwosHN2I1B7KIMKrh5vX7VcCLWuzkPPOInfYNHX
EEX8MDWel4ccmirqjRsTnwUT1kxB/qicHgUxnAG8HTtLRscwGteNPFbsOjgMbdZr
KB8STgtT7JOPzBiuVPA+GY3iBy9U/xJLQ19Oxp149/4yPqsjhYdX7/8X5JGp3a4p
Yn++kh77e8cOJDw8zbAjqxDwe9kpaL7yW1ChlbPNQbjMm3BHdhutlK8e+m6S+n86
kq7kAAjFnJyRSV0cSoxRGtJX8CZow7EpyeHES+0Vfu/o5MXoPeZ4JVc=
-----END CERTIFICATE-----
Generated at Tue Sep 12 16:23:49 2023 by rpki-client on console-fra.rpki-client.org