Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ptC_UJeNEfN1KMtkirzcvn9cbXw.roa
File: ptC_UJeNEfN1KMtkirzcvn9cbXw.roa (raw, json)
Hash identifier: XYBYAFbXwMXj44s1sLFSNt17x4Itnc1PPtGxMgDGCFM=
Subject key identifier: A6:D0:BF:50:97:8D:11:F3:75:28:CB:64:8A:BC:DC:BE:7F:5C:6D:7C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018B47C9279FF340891B5F4796D4F2CAD8F3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ptC_UJeNEfN1KMtkirzcvn9cbXw.roa
Signing time: Thu 19 Oct 2023 11:54:07 +0000
ROA not before: Thu 19 Oct 2023 11:54:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:c9:27:9f:f3:40:89:1b:5f:47:96:d4:f2:ca:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 19 11:54:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6d0bf50978d11f37528cb648abcdcbe7f5c6d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:c8:60:dc:6b:9c:ca:23:f0:81:19:f1:a5:
f8:b0:8f:f2:c2:ee:91:c1:cf:7e:30:a9:ea:3c:59:
be:46:3a:90:46:7b:d8:50:fa:04:35:34:41:1a:76:
fa:69:55:be:cf:20:fc:59:04:3c:2f:fe:12:90:c9:
6a:70:5b:26:94:d3:46:b9:91:ab:7f:3c:f6:66:50:
94:d1:aa:f8:81:af:99:a4:6a:9e:ed:30:4e:ad:75:
71:5b:6e:92:f9:07:e2:3d:8b:27:ef:ef:7f:ee:2e:
56:b3:e6:70:c7:33:91:8f:4e:dd:cd:5e:76:a3:a5:
92:b8:e7:6e:66:6b:de:a4:6e:17:ff:8f:e6:7d:a4:
69:d6:6b:f5:b1:f1:bc:5d:be:3d:fd:4d:e2:fc:b4:
e3:ee:de:cb:f6:da:36:3e:10:22:03:50:41:6d:fc:
b3:ce:ec:9d:ee:c5:4c:81:9f:84:24:29:d6:67:b4:
0e:8c:18:d6:6e:93:86:7c:86:f5:ca:11:58:77:e9:
d2:e2:1e:d7:88:21:85:f1:6a:cc:2d:1f:a7:88:59:
65:a7:4c:0b:e0:5c:d9:89:2a:b3:ea:bb:d2:a5:0c:
df:24:bb:c1:ed:90:4d:f6:d8:b8:c7:24:ed:81:b4:
26:57:83:da:19:cd:a3:fc:d5:49:bf:6d:d4:10:b3:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D0:BF:50:97:8D:11:F3:75:28:CB:64:8A:BC:DC:BE:7F:5C:6D:7C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ptC_UJeNEfN1KMtkirzcvn9cbXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.71.0/24
163.5.75.0-163.5.76.255
163.5.78.0/23
163.5.83.0/24
163.5.86.0/24
163.5.89.0/24
163.5.94.0/23
163.5.98.0/23
163.5.104.0-163.5.106.255
163.5.110.0-163.5.114.255
163.5.120.0-163.5.122.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0-163.5.162.255
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.176.0/24
163.5.178.0/24
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0/24
163.5.212.0/24
163.5.217.0-163.5.218.255
163.5.222.0/24
163.5.224.0/24
163.5.228.0/24
163.5.235.0/24
163.5.241.0/24
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:56:60:3b:5d:99:7a:11:15:ae:f6:b4:42:9b:79:6d:a8:6a:
57:5d:85:88:4d:9f:15:4f:a6:ac:e0:32:2f:80:c0:76:3f:50:
59:f3:4f:60:74:4b:af:20:5b:9e:bb:48:72:0b:7a:ed:0e:87:
9c:6f:19:d1:a4:dd:4b:f1:8d:15:92:17:d9:ab:04:71:83:fb:
b9:ea:ca:e1:0a:fc:65:c0:5b:17:84:af:ca:4c:50:06:a7:37:
cf:d5:a5:82:85:1b:fa:0a:89:53:61:e5:9f:33:4c:66:8a:4d:
e9:4e:03:ee:11:fe:b5:26:a3:bf:6a:d9:9a:fe:5d:98:13:5b:
4b:91:fb:c7:99:42:83:65:a9:c0:64:1b:ac:05:90:c2:37:14:
89:00:04:e8:c1:88:b9:95:b3:a2:a4:45:9f:0e:d0:75:8d:32:
bb:3e:97:aa:9d:75:30:4f:74:d2:a5:e5:8d:35:22:5c:b6:97:
eb:b2:21:60:ec:58:05:8d:e1:e0:d8:a4:4c:34:34:8c:18:ed:
8d:c0:f9:06:b4:f0:e2:42:a6:55:5a:38:ef:36:54:af:8a:2e:
f5:76:31:0d:e0:12:54:df:76:e7:07:50:81:49:e4:7a:82:c6:
b1:75:71:20:16:46:e9:20:42:37:bc:cc:ce:68:b6:8b:da:8d:
54:2a:dc:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 23:04:48 2023 by rpki-client on console-fra.rpki-client.org