Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vMg-u2ZvCEvaQSZYo9E3h4YBwPY.roa
File: vMg-u2ZvCEvaQSZYo9E3h4YBwPY.roa (raw, json)
Hash identifier: 8rzsrKbik5kh1lzjTznfsmClnON5+Z9BLhIsa1mS5Og=
Subject key identifier: BC:C8:3E:BB:66:6F:08:4B:DA:41:26:58:A3:D1:37:87:86:01:C0:F6
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0189FEA88BE101D9E9740DEF8CC70E35D578
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vMg-u2ZvCEvaQSZYo9E3h4YBwPY.roa
Signing time: Wed 16 Aug 2023 14:03:25 +0000
ROA not before: Wed 16 Aug 2023 14:03:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:a8:8b:e1:01:d9:e9:74:0d:ef:8c:c7:0e:35:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 16 14:03:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcc83ebb666f084bda412658a3d137878601c0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b8:64:4c:be:a9:5a:b5:87:c0:97:a6:7e:f1:
7f:dc:05:2a:90:9b:e9:6f:13:eb:58:04:81:82:86:
8e:c9:23:8c:f4:98:28:2a:a0:eb:86:04:3f:4b:2a:
fc:71:5b:4d:8a:a7:fb:1c:4d:20:74:ea:a1:71:44:
81:4a:d8:26:2b:d3:b1:77:99:12:9a:0e:3d:5b:b9:
b8:84:f9:82:be:22:9b:38:3d:98:4f:b6:aa:80:72:
a8:bd:a4:e2:11:37:34:02:d9:4e:bb:62:40:9b:e1:
b9:ab:2a:9a:53:9b:05:2e:ad:ac:56:69:3a:a9:d3:
2f:e0:2f:70:18:c3:3c:53:38:5e:92:2e:a8:ef:b9:
3c:95:8b:ab:04:f9:c9:dc:d1:aa:6d:40:df:93:72:
7f:70:48:ce:e3:23:4e:ab:51:c2:81:6b:a3:a4:c1:
ea:01:2f:a7:21:29:ea:60:32:e3:78:f3:0a:88:e6:
40:24:74:ca:7a:81:ee:f9:a0:ec:1f:e0:77:d2:7c:
2b:f9:ff:a0:ab:46:34:22:d5:00:0c:c9:e7:2f:d9:
61:94:80:5f:56:bf:cb:30:2a:16:78:bb:72:fd:cd:
a1:58:4a:32:b9:96:23:92:91:9f:73:e2:8d:fa:2e:
27:d2:7f:78:c5:a4:04:30:a8:6f:cc:e4:44:ea:56:
64:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C8:3E:BB:66:6F:08:4B:DA:41:26:58:A3:D1:37:87:86:01:C0:F6
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/vMg-u2ZvCEvaQSZYo9E3h4YBwPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/23
163.5.61.0-163.5.62.255
163.5.64.0/24
163.5.66.0/24
163.5.70.0-163.5.72.255
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/23
163.5.89.0/24
163.5.91.0-163.5.92.255
163.5.95.0/24
163.5.97.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.126.255
163.5.128.0/24
163.5.134.0/24
163.5.136.0/22
163.5.141.0-163.5.143.255
163.5.145.0-163.5.146.255
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.157.255
163.5.160.0/21
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.232.0/23
163.5.235.0/24
163.5.237.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:02:6b:4c:e0:3e:a9:1b:b6:95:fd:24:3d:58:92:93:5f:37:
90:6e:19:97:fc:af:f0:d4:fd:6d:9b:82:ba:e0:65:d5:de:6c:
dd:32:8d:af:e2:f3:4f:d1:a0:a9:ce:f0:bf:15:83:59:da:5e:
83:a9:11:39:64:0c:65:38:67:18:51:b6:03:68:26:ec:f5:08:
a6:0d:ab:62:29:5b:41:4b:2d:77:01:a1:f4:1f:dd:9c:ad:68:
84:9b:cc:d0:c7:98:ae:e9:46:7c:79:1d:ea:b2:dd:5d:e6:c9:
e1:5b:38:8a:b9:7a:bc:8e:d3:a2:ba:be:2a:f0:b9:19:40:7b:
69:a6:c0:6e:49:e7:00:cd:e8:77:78:ba:81:11:5e:44:e2:57:
61:9f:99:86:b7:fe:78:92:a0:c3:6a:5c:b7:1a:c5:0b:5d:42:
99:e1:f4:58:50:fd:b5:55:b0:54:8b:69:15:00:a8:bc:62:33:
fa:92:0a:63:14:ff:c3:1b:40:bb:ed:47:e3:7d:74:34:b5:42:
76:7f:dd:db:71:0d:a2:a2:5d:62:7e:9e:d6:ea:1c:81:13:b5:
f5:8a:ba:83:53:90:ed:14:5e:93:05:1b:01:3e:36:6d:61:27:
b3:84:54:fb:92:7a:64:f4:79:26:7b:bc:13:63:28:ed:7a:ab:
bb:43:d2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 18 18:50:53 2023 by rpki-client on console-fra.rpki-client.org