Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q5PersZQg_V-2U7hdlv0eXgX6dg.roa
File: q5PersZQg_V-2U7hdlv0eXgX6dg.roa (raw, json)
Hash identifier: 0YQhiw90vokFGxUmLsJcyKt56dyeVK/SBROJsHUtRa8=
Subject key identifier: AB:93:DE:AE:C6:50:83:F5:7E:D9:4E:E1:76:5B:F4:79:78:17:E9:D8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018ACD7B7F1CD039491A8DC2FB4DCD0FEAD7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q5PersZQg_V-2U7hdlv0eXgX6dg.roa
Signing time: Mon 25 Sep 2023 17:55:37 +0000
ROA not before: Mon 25 Sep 2023 17:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:7b:7f:1c:d0:39:49:1a:8d:c2:fb:4d:cd:0f:ea:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 25 17:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab93deaec65083f57ed94ee1765bf4797817e9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:4b:46:d6:e9:e1:ff:28:d9:b2:b9:9a:30:
79:91:0a:6f:fc:35:c9:16:71:0b:b3:4b:76:ba:6f:
dc:20:9b:c1:d7:8d:69:f1:62:8b:e7:52:79:bd:2e:
f3:03:30:7f:78:f3:2f:77:34:0b:95:65:1a:b4:b8:
aa:f1:82:f2:7b:c9:c8:bb:ce:10:77:b6:a7:66:44:
47:7b:78:c1:6b:f2:8b:06:a0:26:cb:f0:80:46:fe:
f6:13:ab:98:be:3a:3f:5c:68:24:91:b0:d3:20:d2:
b1:c8:85:4b:e6:07:8d:4c:ed:32:dc:69:be:2a:a2:
a0:19:30:f7:25:54:6c:b5:4f:ee:9f:c0:a0:9f:28:
e2:2d:7c:f7:5d:be:05:46:a6:03:9f:dd:61:2d:2d:
6a:c1:46:59:2a:8e:42:68:f4:b1:aa:a3:3f:eb:21:
11:46:bd:6c:6c:d8:02:e2:9d:cb:09:a1:ce:37:58:
e8:ec:81:63:7c:0b:7c:50:91:34:b9:cd:78:b1:08:
53:46:01:23:ff:17:85:71:98:03:18:51:9c:d5:68:
0e:71:f9:ce:35:d5:99:14:f6:67:19:6b:1f:0f:c8:
e5:3e:ac:f9:4a:4f:ae:d2:35:46:09:72:39:47:dd:
97:8d:e6:5a:5f:d5:8c:5d:f5:d1:70:e6:0b:34:16:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:93:DE:AE:C6:50:83:F5:7E:D9:4E:E1:76:5B:F4:79:78:17:E9:D8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q5PersZQg_V-2U7hdlv0eXgX6dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.71.0/24
163.5.78.0/23
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.123.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.136.0/23
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.156.0/24
163.5.160.0/24
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.208.0/24
163.5.211.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0/24
163.5.235.0/24
163.5.241.0-163.5.242.255
163.5.244.0/24
163.5.247.0/24
163.5.249.0-163.5.255.255
Signature Algorithm: sha256WithRSAEncryption
8b:de:5d:16:ee:f7:3e:4d:e2:59:8b:b4:ec:b1:90:98:b8:84:
44:f7:2b:ed:22:27:5a:4a:0d:49:32:d5:80:49:4c:59:55:e5:
a5:82:93:73:bb:12:f7:68:29:ce:7c:6e:cf:6c:0c:7a:5e:75:
45:92:02:d6:31:1c:e0:19:8b:e9:35:51:a3:00:3a:4c:5b:56:
73:a9:91:75:44:bf:db:8d:c0:10:6d:de:bd:07:c1:40:cd:5e:
c0:5a:49:a4:fb:77:31:d2:15:c3:38:18:37:7e:cc:f2:a8:3b:
b2:f1:0a:c6:17:72:9e:52:57:04:c8:f8:85:5e:26:cd:48:f3:
eb:09:16:01:53:aa:8e:f7:4d:0e:da:bd:12:f1:c6:ca:1e:84:
eb:37:77:88:43:ab:1e:58:ab:09:cd:7d:6f:e4:3b:ec:50:40:
7d:71:d6:95:2b:72:01:79:c3:18:5b:be:03:12:81:ac:0d:eb:
16:3d:70:4c:23:8e:a5:5e:c0:65:1a:19:dd:df:d4:5c:c8:fb:
82:a8:f7:c5:a7:8f:30:10:9e:31:59:46:50:fb:cb:87:66:3a:
d2:11:1f:55:f3:07:79:20:15:88:89:81:29:75:db:b9:fa:23:
9a:bc:dc:62:42:fd:c2:f3:0f:ec:fd:97:fa:a3:78:b2:c2:86:
8a:18:8e:5f
-----BEGIN CERTIFICATE-----
MIIGpDCCBYygAwIBAgISAYrNe38c0DlJGo3C+03ND+rXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwOTI1MTc1NTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjkzZGVhZWM2NTA4M2Y1N2VkOTRlZTE3NjViZjQ3OTc4MTdlOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArahLRtbp4f8o2bK5mjB5kQpv/DXJ
FnELs0t2um/cIJvB141p8WKL51J5vS7zAzB/ePMvdzQLlWUatLiq8YLye8nIu84Q
d7anZkRHe3jBa/KLBqAmy/CARv72E6uYvjo/XGgkkbDTINKxyIVL5geNTO0y3Gm+
KqKgGTD3JVRstU/un8CgnyjiLXz3Xb4FRqYDn91hLS1qwUZZKo5CaPSxqqM/6yER
Rr1sbNgC4p3LCaHON1jo7IFjfAt8UJE0uc14sQhTRgEj/xeFcZgDGFGc1WgOcfnO
NdWZFPZnGWsfD8jlPqz5Sk+u0jVGCXI5R92XjeZaX9WMXfXRcOYLNBZRFQIDAQAB
o4IDsDCCA6wwHQYDVR0OBBYEFKuT3q7GUIP1ftlO4XZb9Hl4F+nYMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcTVQZXJzWlFnX1YtMlU3aGRsdjBlWGdYNmRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBxAYIKwYBBQUHAQcBAf8EggGzMIIBrzCCAasEAgABMIIB
owMEAKMFHjAMAwQAowUhAwQAowUkAwQAowU6AwQAowU+AwQAowVAAwQAowVCAwQA
owVHAwQBowVOAwQAowVTAwQBowVWAwQAowVZAwQBowVeAwQAowVhMAwDBACjBWMD
BACjBWQwDAMEA6MFaAMEAKMFajAMAwQBowVuAwQCowVwMAwDBACjBXkDBAKjBXgD
BACjBX4DBACjBYADBACjBYYDBAGjBYgDBACjBYswDAMEAKMFjQMEBKMFgAMEAKMF
kgMEAqMFlAMEAKMFnAMEAKMFoAMEAKMFpQMEAKMFpzAMAwQBowWqAwQAowWsMAwD
BACjBa8DBAKjBbAwDAMEAKMFtQMEAKMFtgMEAKMFugMEAaMFvAMEAKMFvwMEAKMF
wwMEAKMFxgMEAKMFyTAMAwQAowXLAwQBowXMAwQAowXQMAwDBACjBdMDBAGjBdQw
DAMEA6MF2AMEAKMF3DAMAwQAowXfAwQAowXgAwQAowXkAwQAowXnAwQAowXrMAwD
BACjBfEDBACjBfIDBACjBfQDBACjBfcwCwMEAKMF+QMDAaMEMA0GCSqGSIb3DQEB
CwUAA4IBAQCL3l0W7vc+TeJZi7TssZCYuIRE9yvtIidaSg1JMtWASUxZVeWlgpNz
uxL3aCnOfG7PbAx6XnVFkgLWMRzgGYvpNVGjADpMW1ZzqZF1RL/bjcAQbd69B8FA
zV7AWkmk+3cx0hXDOBg3fszyqDuy8QrGF3KeUlcEyPiFXibNSPPrCRYBU6qO900O
2r0S8cbKHoTrN3eIQ6seWKsJzX1v5DvsUEB9cdaVK3IBecMYW74DEoGsDesWPXBM
I46lXsBlGhnd39RcyPuCqPfFp48wEJ4xWUZQ+8uHZjrSER9V8wd5IBWIiYEpddu5
+iOavNxiQv3C8w/s/Zf6o3iywoaKGI5f
-----END CERTIFICATE-----
Generated at Tue Sep 26 20:19:27 2023 by rpki-client on console-fra.rpki-client.org