Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0kdw9LzAxA2GERd-_F_t7mfv-YI.roa
File: 0kdw9LzAxA2GERd-_F_t7mfv-YI.roa (raw, json)
Hash identifier: wUmUImWhBl/63ZqomXi+fmOVWywpuwb9Cgop189IlNE=
Subject key identifier: D2:47:70:F4:BC:C0:C4:0D:86:11:17:7E:FC:5F:ED:EE:67:EF:F9:82
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01852E3B244605F122468F95EE2BEBFFB007
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0kdw9LzAxA2GERd-_F_t7mfv-YI.roa
Signing time: Tue 20 Dec 2022 06:31:45 +0000
ROA not before: Tue 20 Dec 2022 06:31:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2e:3b:24:46:05:f1:22:46:8f:95:ee:2b:eb:ff:b0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 20 06:31:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d24770f4bcc0c40d8611177efc5fedee67eff982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:e5:8b:7a:c2:7a:22:8e:67:da:f3:5c:de:
6c:a8:10:86:eb:88:40:43:80:09:40:25:cf:58:01:
99:bc:76:43:4d:8b:77:c8:44:d9:08:88:16:4c:1a:
af:d3:9d:fe:ef:34:3a:bd:54:8d:b2:15:3f:e8:ed:
a0:7f:c4:00:29:e4:b3:0d:da:fa:5f:b6:26:9b:4a:
41:28:e8:8c:f2:ab:a2:b4:9b:ee:c2:16:ad:12:66:
d7:a0:b8:78:c6:23:f4:df:ca:dd:a5:4a:e9:ff:61:
59:5f:9c:fe:ec:bf:97:10:79:75:e2:0e:7f:36:da:
91:b4:8d:a9:1b:58:ae:7d:92:11:c3:45:1b:75:63:
4f:b5:56:34:18:b9:0c:3f:46:9c:7f:4d:82:62:95:
0a:83:6a:d6:7c:1c:24:b1:92:ff:54:8d:dd:0c:cc:
39:27:8a:3d:80:dc:fc:e7:45:58:95:1c:03:26:00:
77:19:9f:3f:47:c5:fd:db:0b:fc:44:a4:08:79:f5:
3b:1d:d2:42:91:62:b1:2b:f8:da:a1:f8:9e:66:42:
d1:8a:ab:c1:25:8d:6a:1d:9e:f7:20:8b:bc:70:08:
d2:c1:85:b4:ea:a8:43:c6:ce:b8:f5:73:af:69:73:
ce:b6:f6:09:3c:10:65:fd:84:11:a0:16:43:6f:12:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:70:F4:BC:C0:C4:0D:86:11:17:7E:FC:5F:ED:EE:67:EF:F9:82
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0kdw9LzAxA2GERd-_F_t7mfv-YI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.94.0/23
163.5.113.0/24
163.5.116.0/24
163.5.135.0-163.5.136.255
163.5.142.0/24
163.5.173.0/24
163.5.186.0/24
163.5.195.0-163.5.197.255
Signature Algorithm: sha256WithRSAEncryption
40:dd:ef:a7:08:a3:36:62:c3:7d:1d:66:73:e7:30:be:d7:bb:
0d:bc:4d:e6:6a:45:9c:b3:73:a3:6b:0e:51:b5:ea:6c:18:f5:
ef:84:2d:ca:0e:b5:c7:f2:61:28:a6:ef:a9:20:19:0d:ab:60:
e9:a9:9c:8b:55:96:32:b1:b1:a9:62:69:da:86:52:6c:fd:6d:
c9:fc:d1:3a:0e:77:ab:ed:ea:99:6a:69:1b:b2:64:83:39:af:
2c:8c:4d:0c:f2:61:60:0b:14:15:91:f4:69:6d:7e:9b:e4:77:
bc:7f:a4:36:45:c6:03:17:84:83:ef:75:35:aa:05:91:a9:ec:
2a:96:3e:43:eb:26:e4:98:61:ea:86:45:76:b4:b9:08:43:b3:
28:11:ae:25:0c:c4:f2:60:16:7d:7c:48:a6:7b:70:c3:bf:b9:
00:94:ba:75:7a:14:8c:7c:0d:02:59:1d:46:dd:95:aa:9b:d7:
f9:1d:77:44:15:1f:83:d8:fd:84:88:ce:e9:c2:8b:d3:2c:72:
8f:a4:b3:62:61:f7:8f:b6:97:d3:d6:df:69:b7:5b:1f:37:0d:
7f:72:89:41:1b:91:25:9e:4a:b2:01:1f:c5:56:1f:fd:11:c3:
75:5a:4d:b6:eb:16:ed:33:ee:d8:25:a3:8e:81:70:1a:49:c0:
83:0d:f8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org