Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-FPKAmWzPrT5xV_vJ5_9WJKHfJo.roa
File: 1-FPKAmWzPrT5xV_vJ5_9WJKHfJo.roa (raw, json)
Hash identifier: tNWIcF/lrtZqCXxWxcPR4FZUl9Y3pP21YjhIEHdiDGI=
Subject key identifier: F8:53:CA:02:65:B3:3E:B4:F9:C5:5F:EF:27:9F:FD:58:92:87:7C:9A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184996BF2800C6DCC751512B0031E9DBBA1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-FPKAmWzPrT5xV_vJ5_9WJKHfJo.roa
Signing time: Mon 21 Nov 2022 09:01:39 +0000
ROA not before: Mon 21 Nov 2022 09:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 163.5.194.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:6b:f2:80:0c:6d:cc:75:15:12:b0:03:1e:9d:bb:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 21 09:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f853ca0265b33eb4f9c55fef279ffd5892877c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:fe:4e:6d:39:58:64:a7:47:9a:5a:c3:bd:
15:f5:9d:25:62:c1:13:42:3a:10:f1:32:84:aa:dd:
7d:f4:11:be:ba:b1:e6:e6:71:47:aa:fc:1d:58:0e:
d9:c5:d1:2c:8a:28:bc:f1:20:9b:e7:f8:b0:55:eb:
45:9a:61:c6:e0:9c:ad:aa:e9:bd:f3:5f:bb:8f:47:
03:b1:ea:14:b9:a4:8f:e2:7f:20:ca:bb:a3:e0:b1:
d9:f0:8d:16:42:77:5c:64:17:f8:d8:09:9f:19:d0:
ca:9b:3b:ae:15:f6:ba:2e:90:8d:40:c1:ac:e5:2c:
f1:36:d8:0f:d9:84:fe:d8:61:2a:73:e9:26:e1:29:
8d:4d:31:7a:36:3a:bd:3d:e0:0b:bb:14:5b:bd:5c:
9f:7e:07:e8:4a:03:74:d5:af:64:78:0b:87:d6:f9:
f7:fc:1d:2d:4a:67:e6:2a:0d:90:b6:59:72:5a:75:
5d:92:09:a4:6d:5e:8a:61:3b:17:1f:0c:a6:a5:51:
6c:0f:41:1c:12:38:da:6b:d1:57:8c:59:da:a4:7b:
f6:b3:1b:4e:4b:d3:6e:ed:a7:9c:0e:d5:bf:5d:a7:
73:48:e5:dd:a8:b3:2d:3d:e3:67:c4:70:12:04:62:
03:92:7f:e7:09:b4:39:21:d3:86:89:6a:a6:36:77:
c0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:53:CA:02:65:B3:3E:B4:F9:C5:5F:EF:27:9F:FD:58:92:87:7C:9A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-FPKAmWzPrT5xV_vJ5_9WJKHfJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.141.0/24
163.5.146.0/24
163.5.162.0/24
163.5.194.0/24
163.5.224.0/24
Signature Algorithm: sha256WithRSAEncryption
60:70:fc:00:3c:d3:b1:db:92:31:a0:70:e3:6f:dd:13:ba:09:
e1:1e:98:4e:78:5d:43:6b:0a:92:5f:e4:87:71:b1:6a:fe:f6:
18:4f:0d:48:68:7a:af:10:e0:a0:ec:f7:ea:e3:97:70:59:d6:
af:25:7c:4e:f1:33:87:46:f0:49:32:08:4f:44:84:db:9a:9c:
6f:18:d4:1d:4e:0e:01:da:69:73:16:16:24:68:b0:5c:83:42:
d7:f8:71:96:91:2e:61:4a:32:9e:ba:06:05:81:2c:83:0d:11:
54:55:14:78:9d:ff:e2:3f:22:c3:e7:1f:92:b9:8c:a8:09:9e:
a0:99:ed:f7:ef:42:f5:d0:cb:a4:86:a4:27:e1:2f:fa:f4:ea:
50:9a:ce:fd:20:ba:71:71:c5:8b:d1:0d:61:1d:3d:47:44:f0:
8f:4d:3a:d0:bd:b9:14:0d:64:1b:45:33:17:83:b6:7b:36:0c:
7d:35:0f:7b:3b:95:2d:ce:65:fd:9c:a5:cc:d6:b6:65:bf:19:
b6:93:27:9c:4c:3e:54:32:b7:18:e9:17:97:51:c3:55:f5:5e:
b0:e2:e6:2b:ea:39:c8:f8:61:85:6a:3d:09:22:28:dd:1a:d8:
3f:33:a0:de:0f:93:b2:a2:99:4c:da:8f:87:b9:a6:70:72:6d:
e0:81:8d:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYSZa/KADG3MdRUSsAMenbuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMTIxMDkwMTM5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODUzY2EwMjY1YjMzZWI0ZjljNTVmZWYyNzlmZmQ1ODkyODc3YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttv+Tm05WGSnR5paw70V9Z0lYsET
QjoQ8TKEqt199BG+urHm5nFHqvwdWA7ZxdEsiii88SCb5/iwVetFmmHG4Jytqum9
81+7j0cDseoUuaSP4n8gyruj4LHZ8I0WQndcZBf42AmfGdDKmzuuFfa6LpCNQMGs
5SzxNtgP2YT+2GEqc+km4SmNTTF6Njq9PeALuxRbvVyffgfoSgN01a9keAuH1vn3
/B0tSmfmKg2QtllyWnVdkgmkbV6KYTsXHwympVFsD0EcEjjaa9FXjFnapHv2sxtO
S9Nu7aecDtW/XadzSOXdqLMtPeNnxHASBGIDkn/nCbQ5IdOGiWqmNnfAawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhTygJlsz60+cVf7yef/ViSh3yaMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMS1GUEtBbVd6UHJUNXhWX3ZKNV85V0pLSGZKby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw
MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAKMFjQME
AKMFkgMEAKMFogMEAKMFwgMEAKMF4DANBgkqhkiG9w0BAQsFAAOCAQEAYHD8ADzT
sduSMaBw42/dE7oJ4R6YTnhdQ2sKkl/kh3Gxav72GE8NSGh6rxDgoOz36uOXcFnW
ryV8TvEzh0bwSTIIT0SE25qcbxjUHU4OAdppcxYWJGiwXINC1/hxlpEuYUoynroG
BYEsgw0RVFUUeJ3/4j8iw+cfkrmMqAmeoJnt9+9C9dDLpIakJ+Ev+vTqUJrO/SC6
cXHFi9ENYR09R0Twj0060L25FA1kG0UzF4O2ezYMfTUPezuVLc5l/ZylzNa2Zb8Z
tpMnnEw+VDK3GOkXl1HDVfVesOLmK+o5yPhhhWo9CSIo3RrYPzOg3g+TsqKZTNqP
h7mmcHJt4IGNzw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org