Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wnUJ5roxQzQJZjYObh-5KXOD5RE.roa
File: wnUJ5roxQzQJZjYObh-5KXOD5RE.roa (raw, json)
Hash identifier: J9r8gRBuplVsrH/Z5k7keY/ozlUo3qu+7bBrXQHUqo0=
Subject key identifier: C2:75:09:E6:BA:31:43:34:09:66:36:0E:6E:1F:B9:29:73:83:E5:11
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018A7FC292158BE4A003559C6E7F8FCD59E1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wnUJ5roxQzQJZjYObh-5KXOD5RE.roa
Signing time: Sun 10 Sep 2023 15:42:52 +0000
ROA not before: Sun 10 Sep 2023 15:42:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 20:11:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7f:c2:92:15:8b:e4:a0:03:55:9c:6e:7f:8f:cd:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 10 15:42:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c27509e6ba3143340966360e6e1fb9297383e511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:cf:2c:7a:d3:6a:19:ee:0d:fe:a5:09:4d:
e5:48:3c:37:2c:d9:bb:d5:72:d0:89:a0:9a:69:e4:
d2:af:26:9e:60:5f:31:53:36:b3:0a:f1:60:02:99:
63:8e:89:8e:38:ab:7a:d3:4b:22:38:6d:26:9d:64:
c7:ab:23:58:54:6b:3f:cb:1f:77:f5:b6:e5:a5:65:
cc:ce:f5:e0:06:80:c7:e8:6a:79:6f:8d:20:fa:32:
b2:2e:44:81:d2:7f:3f:4f:10:e0:9b:31:1c:1e:8d:
be:21:63:53:ac:74:eb:d5:2b:91:bc:4f:5f:09:0f:
77:2e:14:4b:e7:9e:02:ef:d5:ef:83:58:3b:9f:5f:
1b:1b:e8:a1:b6:06:b3:ed:13:99:24:7d:66:57:b2:
d5:d6:8b:a7:f1:f2:ab:a9:7d:25:35:a3:74:6b:0a:
e3:06:02:1e:5e:b4:c2:32:2e:4d:5c:f2:56:f9:d9:
57:ae:83:68:44:aa:93:67:cc:3b:ad:24:d8:ee:57:
63:de:c1:8c:33:dc:31:0d:8e:9a:9b:49:2c:80:4f:
47:db:7b:54:97:2a:84:c3:71:d5:30:93:e4:03:0f:
71:64:e7:a2:60:ba:99:bf:d0:5d:4f:cd:13:c8:75:
c9:78:e6:4d:46:1f:87:67:14:f9:07:ea:4b:f6:12:
77:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:75:09:E6:BA:31:43:34:09:66:36:0E:6E:1F:B9:29:73:83:E5:11
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/wnUJ5roxQzQJZjYObh-5KXOD5RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.75.0/24
163.5.77.0-163.5.79.255
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.126.255
163.5.128.0/24
163.5.134.0-163.5.137.255
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0-163.5.167.255
163.5.170.0/24
163.5.172.0/23
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0-163.5.233.255
163.5.235.0/24
163.5.241.0/24
163.5.244.0/24
163.5.247.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cc:f7:98:90:37:37:31:94:6e:18:a2:ea:90:34:2e:37:ed:
52:14:e9:54:26:45:2c:c4:45:a7:02:f0:8b:57:56:83:89:4c:
c3:21:2f:36:4d:c1:56:b6:f0:17:56:13:82:1f:38:42:08:e3:
ff:9d:42:4e:5a:ef:a6:75:40:71:e9:57:af:de:8a:a7:8b:49:
e6:d6:53:c6:8c:06:90:de:b8:a1:03:39:7b:1d:75:7a:77:93:
48:c0:09:ab:3b:b3:d1:4c:ce:e5:53:86:a8:0a:ef:c2:6c:63:
7e:25:9a:cf:c7:6d:5f:44:d0:8b:ba:3f:8c:f4:10:55:d4:d3:
54:d8:79:e9:55:e0:72:b9:47:94:39:d7:ac:34:73:18:02:c0:
6f:72:1e:63:b3:de:c0:0d:bf:b4:3d:b1:ea:de:e1:e4:d0:61:
0a:dd:91:c7:e6:26:98:b0:b1:e2:e7:5d:3a:8c:58:44:fa:3f:
c8:a9:4a:7c:99:5a:6f:68:eb:77:a2:39:68:f4:2b:49:68:64:
67:67:2c:e7:15:87:18:10:c9:9d:d8:3f:fc:ee:07:41:84:30:
59:7d:88:a7:6f:82:ca:27:e0:fc:3a:db:1b:e5:f4:a0:82:cd:
72:6a:05:73:17:54:5f:e1:12:59:f5:eb:ad:22:ee:a5:09:ad:
9f:ad:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org