Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xFkER3gbAlD2-ziSnL2RRKabqyk.roa
File: xFkER3gbAlD2-ziSnL2RRKabqyk.roa (raw, json)
Hash identifier: OqIhmTfsTYKGoFEAsPAkjHm4Y+1ntCabTlsZVq48LgI=
Subject key identifier: C4:59:04:47:78:1B:02:50:F6:FB:38:92:9C:BD:91:44:A6:9B:AB:29
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018AC3B9059D74BC178B09F3B1FD6914FC47
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xFkER3gbAlD2-ziSnL2RRKabqyk.roa
Signing time: Sat 23 Sep 2023 20:26:37 +0000
ROA not before: Sat 23 Sep 2023 20:26:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c3:b9:05:9d:74:bc:17:8b:09:f3:b1:fd:69:14:fc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 20:26:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4590447781b0250f6fb38929cbd9144a69bab29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:38:2a:50:11:5d:84:be:b6:e4:f6:f9:8f:02:
2d:82:89:f8:d3:81:ca:e0:a5:8c:25:c5:29:b5:60:
a3:09:84:96:89:1b:bb:a5:25:0c:49:4b:e8:34:da:
78:2e:d5:2f:ae:f8:f8:40:9d:97:b9:5f:45:b9:b1:
39:64:b0:3b:36:14:0f:05:0f:ac:25:62:bd:60:0e:
45:46:70:d3:b9:b0:3d:33:c8:f0:43:e5:95:41:64:
e6:12:58:ff:1b:26:18:52:45:01:a5:78:d1:22:bb:
89:37:27:e5:6a:c6:7c:64:63:0b:e0:cd:ba:20:ca:
e4:a5:97:a1:fb:93:6b:e5:b2:76:27:f0:36:c6:26:
4e:ec:71:83:6a:fb:bb:c0:7a:53:6a:dc:20:fc:2f:
a1:16:d5:dc:1c:e1:5d:03:7b:e8:7c:b8:04:cc:eb:
69:11:e4:35:0b:66:b9:a1:94:1a:fd:ee:0a:ae:d6:
39:83:50:27:8f:95:da:da:78:7d:dd:2a:dc:84:b4:
9b:e8:3f:37:93:07:4d:ae:18:96:c2:19:bb:1d:6f:
44:8c:3c:aa:e8:64:df:c3:d0:ce:38:ae:d8:28:34:
8f:e1:be:eb:85:85:33:89:41:aa:ca:13:d5:90:cb:
13:79:42:9b:4c:6d:f0:50:9f:f7:18:54:df:1c:00:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:04:47:78:1B:02:50:F6:FB:38:92:9C:BD:91:44:A6:9B:AB:29
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xFkER3gbAlD2-ziSnL2RRKabqyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.71.0/24
163.5.78.0/23
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.123.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0-163.5.137.255
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0/24
163.5.165.0/24
163.5.167.0/24
163.5.170.0/24
163.5.172.0/24
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.208.255
163.5.211.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0/24
163.5.235.0/24
163.5.241.0-163.5.242.255
163.5.244.0/24
163.5.247.0/24
163.5.249.0-163.5.253.255
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:79:3b:9d:6b:23:4d:cc:43:8e:68:59:95:5a:01:f3:56:3c:
77:1b:e4:ff:81:73:08:2f:29:11:aa:ea:e8:6d:f8:d6:da:cb:
e5:b3:76:09:48:9d:f6:be:94:25:b0:88:ec:46:c9:dd:0c:46:
60:8b:a2:8f:a1:7a:13:c6:64:fa:92:ac:0b:55:ca:dd:90:4d:
5a:4a:ec:0d:27:09:52:55:b2:9e:87:61:de:af:07:89:23:91:
de:af:14:20:30:31:08:a8:c8:25:b2:16:6f:62:c2:9e:12:b6:
05:88:c3:98:b4:21:c7:45:a2:02:b0:be:15:ff:92:f2:4b:1b:
45:da:3c:29:b3:89:94:d3:ac:24:a2:da:20:e4:78:62:fb:a3:
d1:39:9c:03:77:88:55:8c:de:7e:5b:09:4b:ad:a3:7e:77:48:
47:16:1f:15:a4:fd:df:5f:21:49:56:bc:b4:62:f3:79:9b:46:
4a:48:ac:5b:89:56:7b:d1:02:59:46:07:5e:ab:32:51:1f:71:
5a:7c:00:a1:1b:47:01:2f:43:d6:95:4b:bf:ec:3a:11:9a:cd:
b6:43:53:1b:76:84:be:16:9b:92:5f:9a:81:90:2d:dc:e1:85:
16:8d:8d:8b:57:cd:13:ea:c4:7b:74:5e:df:d4:be:f7:83:3e:
33:3a:c2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 18:10:43 2023 by rpki-client on console-fra.rpki-client.org