Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/y_yiENLthbO-SJY_BFa4EJo9g_E.roa
File: y_yiENLthbO-SJY_BFa4EJo9g_E.roa (raw, json)
Hash identifier: t4So50Lj09WBqI43sS8WDXcnhEW7AR2xJt2a4S+9j34=
Subject key identifier: CB:FC:A2:10:D2:ED:85:B3:BE:48:96:3F:04:56:B8:10:9A:3D:83:F1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01899BEE824E6955F02170CD733DD05064B1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/y_yiENLthbO-SJY_BFa4EJo9g_E.roa
Signing time: Fri 28 Jul 2023 09:57:26 +0000
ROA not before: Fri 28 Jul 2023 09:57:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:9b:ee:82:4e:69:55:f0:21:70:cd:73:3d:d0:50:64:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 28 09:57:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbfca210d2ed85b3be48963f0456b8109a3d83f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:be:3a:28:85:07:db:55:3e:03:3c:bd:eb:
0a:b3:7c:46:1c:fa:0a:75:15:34:ee:68:ec:14:cd:
6d:fa:a6:9d:42:a4:2c:1f:3d:ce:02:42:f1:ae:cc:
ed:45:21:51:1a:66:9f:0b:e5:82:fe:89:43:74:a7:
1a:14:d4:ca:7d:9a:b6:2b:4d:85:12:bd:d1:5c:b3:
82:47:10:2c:35:b0:e2:55:19:cb:00:04:db:ef:ff:
96:72:68:63:36:2a:9c:60:af:7e:6f:52:49:90:5c:
f2:09:c9:9c:3c:a1:e8:4c:0e:c2:21:85:08:bd:8c:
fe:ec:ec:5c:48:97:2c:42:0a:68:a1:55:18:78:b2:
25:85:c9:fc:57:cf:43:28:38:ee:00:51:40:a9:bc:
38:ac:ba:46:c2:f1:c2:fa:cd:89:b4:be:a5:ba:73:
62:c1:9b:21:27:16:78:e8:0d:98:5b:ea:de:a9:46:
27:cd:b0:8d:f9:50:b7:d6:39:48:ff:81:a0:53:cd:
e2:ad:13:8f:dd:99:18:27:85:5b:9d:e7:b3:49:ef:
ad:6a:f3:14:f3:57:62:a6:bc:4c:a4:37:f8:f9:46:
d7:49:e4:af:b9:c2:36:b5:8d:eb:31:03:11:ad:11:
df:7f:1e:80:d5:33:f8:d5:69:dc:5b:b3:8f:a4:cc:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FC:A2:10:D2:ED:85:B3:BE:48:96:3F:04:56:B8:10:9A:3D:83:F1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/y_yiENLthbO-SJY_BFa4EJo9g_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0/24
163.5.35.0-163.5.36.255
163.5.59.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.74.0/23
163.5.77.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0/24
163.5.89.0/24
163.5.92.0/24
163.5.95.0/24
163.5.98.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.118.0/24
163.5.120.0-163.5.122.255
163.5.124.0-163.5.126.255
163.5.128.0/24
163.5.133.0-163.5.134.255
163.5.138.0/23
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/23
163.5.159.0-163.5.165.255
163.5.167.0/24
163.5.170.0/24
163.5.172.0/23
163.5.175.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.185.0-163.5.186.255
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.197.0-163.5.198.255
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.210.0/24
163.5.212.0/23
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.226.0/24
163.5.228.0/24
163.5.230.0/24
163.5.232.0/24
163.5.235.0/24
163.5.237.0-163.5.238.255
163.5.241.0/24
163.5.243.0-163.5.245.255
163.5.249.0-163.5.253.255
163.5.255.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:d3:7c:34:50:b9:d8:37:6c:70:15:81:aa:c7:ec:54:c4:7d:
35:9e:73:e5:46:4e:51:3f:8e:3b:f8:2e:90:a8:19:8d:69:06:
71:b2:34:5e:29:5a:7e:64:1a:da:44:d2:ff:37:19:80:39:bf:
9e:1a:be:48:3d:a4:ee:4b:3b:71:96:9a:7e:fb:b8:30:d0:5e:
07:83:1f:b8:b8:5d:fa:41:cc:04:d5:4f:89:30:01:bd:62:d4:
d3:61:19:01:61:8b:dd:5c:3e:91:e0:fb:29:c7:cd:bc:df:17:
3f:41:f4:02:31:be:27:a1:bc:bc:d8:1d:b5:56:72:14:c4:68:
32:19:2e:a7:99:48:7d:2d:ce:c9:50:23:9d:9f:a2:29:17:18:
36:2d:aa:1f:7d:c6:7b:1e:08:19:87:4c:a0:71:54:74:fd:a4:
cf:33:77:f6:6f:1d:30:bf:f2:48:a7:74:d2:0d:72:ce:c8:4d:
e8:77:b2:25:ea:aa:5e:d5:2f:72:1a:d9:43:26:ee:fb:88:82:
4d:e6:61:78:29:e0:36:22:e0:bd:79:9e:44:21:17:92:76:f5:
1d:3e:23:51:05:37:19:28:81:19:22:e4:a0:b0:0f:bc:f3:7b:
ee:5b:d6:43:55:9e:73:e3:8b:9a:6e:43:54:57:5c:f2:44:e2:
40:97:33:22
-----BEGIN CERTIFICATE-----
MIIHBTCCBe2gAwIBAgISAYmb7oJOaVXwIXDNcz3QUGSxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjMwNzI4MDk1NzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmZjYTIxMGQyZWQ4NWIzYmU0ODk2M2YwNDU2YjgxMDlhM2Q4M2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCe+OiiFB9tVPgM8vesKs3xGHPoK
dRU07mjsFM1t+qadQqQsHz3OAkLxrsztRSFRGmafC+WC/olDdKcaFNTKfZq2K02F
Er3RXLOCRxAsNbDiVRnLAATb7/+WcmhjNiqcYK9+b1JJkFzyCcmcPKHoTA7CIYUI
vYz+7OxcSJcsQgpooVUYeLIlhcn8V89DKDjuAFFAqbw4rLpGwvHC+s2JtL6lunNi
wZshJxZ46A2YW+reqUYnzbCN+VC31jlI/4GgU83irROP3ZkYJ4VbneezSe+tavMU
81diprxMpDf4+UbXSeSvucI2tY3rMQMRrRHffx6A1TP41WncW7OPpMyuPwIDAQAB
o4IEETCCBA0wHQYDVR0OBBYEFMv8ohDS7YWzvkiWPwRWuBCaPYPxMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEveV95aUVOTHRoYk8tU0pZX0JGYTRFSm85Z19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICJQYIKwYBBQUHAQcBAf8EggIUMIICEDCCAgwEAgABMIIC
BAMEAKMFHgMEAKMFITAMAwQAowUjAwQAowUkAwQAowU7AwQAowU+AwQAowVAAwQB
owVCMAwDBAGjBUYDBACjBUgDBAGjBUowDAMEAKMFTQMEBKMFQDAMAwQAowVTAwQA
owVUAwQAowVWAwQAowVZAwQAowVcAwQAowVfMAwDBAGjBWIDBACjBWQwDAMEA6MF
aAMEAKMFajAMAwQBowVuAwQCowVwAwQAowV2MAwDBAOjBXgDBACjBXowDAMEAqMF
fAMEAKMFfgMEAKMFgDAMAwQAowWFAwQAowWGAwQBowWKMAwDBACjBY0DBASjBYAD
BACjBZIDBACjBZQDBAGjBZYDBAGjBZwwDAMEAKMFnwMEAaMFpAMEAKMFpwMEAKMF
qgMEAaMFrAMEAKMFrwMEAaMFsjAMAwQAowW1AwQAowW2MAwDBACjBbkDBACjBboD
BAGjBbwDBACjBb8DBACjBcMwDAMEAKMFxQMEAKMFxgMEAKMFyTAMAwQAowXLAwQB
owXMAwQAowXSAwQBowXUMAwDBAOjBdgDBACjBdwwDAMEAKMF3wMEAKMF4AMEAKMF
4gMEAKMF5AMEAKMF5gMEAKMF6AMEAKMF6zAMAwQAowXtAwQAowXuAwQAowXxMAwD
BACjBfMDBAGjBfQwDAMEAKMF+QMEAaMF/AMEAKMF/wMEALn9NjANBgkqhkiG9w0B
AQsFAAOCAQEAm9N8NFC52DdscBWBqsfsVMR9NZ5z5UZOUT+OO/gukKgZjWkGcbI0
XilafmQa2kTS/zcZgDm/nhq+SD2k7ks7cZaafvu4MNBeB4MfuLhd+kHMBNVPiTAB
vWLU02EZAWGL3Vw+keD7KcfNvN8XP0H0AjG+J6G8vNgdtVZyFMRoMhkup5lIfS3O
yVAjnZ+iKRcYNi2qH33Gex4IGYdMoHFUdP2kzzN39m8dML/ySKd00g1yzshN6Hey
JeqqXtUvchrZQybu+4iCTeZheCngNiLgvXmeRCEXknb1HT4jUQU3GSiBGSLkoLAP
vPN77lvWQ1Wec+OLmm5DVFdc8kTiQJczIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:36 2024 by rpki-client on console-ams.rpki-client.org