Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4jZ-adTsAAwS7RDhuY6fkoDvrYs.roa
File: 4jZ-adTsAAwS7RDhuY6fkoDvrYs.roa (raw, json)
Hash identifier: sqbcI2Es7KxzAZFgHigD+kqWhmb6ZI6/8Hb3Yj6md6Y=
Subject key identifier: E2:36:7E:69:D4:EC:00:0C:12:ED:10:E1:B9:8E:9F:92:80:EF:AD:8B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182F940B17AB29042115D9429EB8602887C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4jZ-adTsAAwS7RDhuY6fkoDvrYs.roa
Signing time: Thu 01 Sep 2022 13:32:22 +0000
ROA not before: Thu 01 Sep 2022 13:32:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:40:b1:7a:b2:90:42:11:5d:94:29:eb:86:02:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 1 13:32:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2367e69d4ec000c12ed10e1b98e9f9280efad8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:d9:80:4a:75:6c:86:bb:a9:f5:25:5c:bf:
ad:74:fc:9b:d3:f9:c9:ba:9a:b1:ca:88:23:68:9c:
a0:70:c4:df:29:d0:f3:81:24:e2:63:07:9b:36:0b:
a1:5b:f5:4d:d0:13:4e:c6:f6:5b:c8:c6:41:14:8c:
2f:cc:6e:6f:d9:f5:7d:64:b1:98:47:2a:6c:3a:23:
62:fc:da:17:5d:78:10:9e:4f:ed:f4:7d:be:bf:35:
cd:09:8b:63:7f:ff:c3:2d:ab:57:b3:27:24:b0:16:
dc:be:44:0e:46:0f:0e:3c:8d:cc:b6:3a:a9:5e:1f:
cf:01:1c:59:4b:85:3f:bb:77:35:09:65:ab:fa:fd:
3b:24:10:c8:d0:cc:1a:30:b5:7c:e3:80:6a:ae:87:
7c:41:7e:e4:07:3d:10:60:c2:54:e3:03:4a:91:7f:
17:5c:d3:5e:74:2e:97:84:3b:cf:5b:d5:f1:73:53:
d3:16:e1:35:dd:38:f8:2d:5d:81:1e:cc:20:3d:fa:
cc:a0:dd:a6:f2:5d:bf:d4:68:a5:c5:27:de:77:97:
76:fc:aa:04:f6:19:5f:5c:62:c5:b2:db:5c:5e:30:
ce:2d:49:29:f9:79:c1:bd:74:a3:1d:45:f1:33:9d:
b8:b0:5c:e8:ce:6e:1f:ef:b9:ef:6c:e5:38:fa:e5:
bb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:7E:69:D4:EC:00:0C:12:ED:10:E1:B9:8E:9F:92:80:EF:AD:8B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4jZ-adTsAAwS7RDhuY6fkoDvrYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.155.0-163.5.157.255
163.5.170.0-163.5.178.255
163.5.180.0/24
163.5.182.0-163.5.189.255
163.5.194.0-163.5.200.255
163.5.206.0-163.5.209.255
Signature Algorithm: sha256WithRSAEncryption
2d:6e:4f:82:bd:49:c9:e0:76:b6:6c:67:f3:4d:4d:9f:64:40:
4d:a2:a1:9c:4a:7b:0b:9f:90:3d:bc:e0:e6:cb:e8:d7:f1:a8:
a8:81:d6:11:d5:54:47:b4:b7:f7:e3:ba:af:cc:69:0e:d8:3e:
6b:45:b9:80:4e:e4:dc:46:df:41:5d:94:49:99:6f:3c:98:dd:
b0:3d:9d:8b:0e:93:bd:58:30:19:6c:f7:63:34:43:a9:5e:c1:
9f:ed:29:b7:ae:25:00:7d:c2:92:5b:18:91:da:f8:b7:c1:a3:
cd:4c:31:98:43:34:e2:94:78:a9:e7:b5:2e:1f:e2:29:fb:6d:
04:76:12:3c:79:2b:8c:64:b0:93:9c:c9:f4:b3:0e:d2:bc:ed:
5f:a7:db:5e:9e:af:93:c1:10:dd:00:60:8b:d9:dd:bd:f9:42:
57:72:4d:8c:c8:dc:8a:52:2a:51:ea:20:60:22:be:7e:85:ac:
76:18:ba:d2:c3:c9:e0:cc:72:04:ff:84:c1:52:ba:1a:68:c6:
2c:5a:88:ec:dc:e9:36:ca:8c:02:4a:49:3f:d7:32:e4:f3:c2:
be:bf:a6:30:f7:85:86:09:a8:f2:ba:8b:29:46:84:da:c2:2f:
0a:97:da:3e:05:a2:23:08:18:8d:eb:a9:22:da:77:4b:bf:71:
1b:50:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org