Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-QgvBUF_AP1ciNy-NhopVjpVWrw.roa
File: 1-QgvBUF_AP1ciNy-NhopVjpVWrw.roa (raw, json)
Hash identifier: eRviuJI/UO9CX7QpHkjUYeSUpfeen+xFNSH3EmHflH4=
Subject key identifier: F9:08:2F:05:41:7F:00:FD:5C:88:DC:BE:36:1A:29:56:3A:55:5A:BC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018404CF6802A108F495DBAC1C5E504036A3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-QgvBUF_AP1ciNy-NhopVjpVWrw.roa
Signing time: Sun 23 Oct 2022 12:26:52 +0000
ROA not before: Sun 23 Oct 2022 12:26:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.90.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:cf:68:02:a1:08:f4:95:db:ac:1c:5e:50:40:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 23 12:26:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9082f05417f00fd5c88dcbe361a29563a555abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:83:39:7d:5b:1a:54:a8:b2:30:3c:b8:ef:
24:19:a6:51:37:43:9f:9e:fd:81:5c:d2:93:31:df:
ab:31:8f:5e:ac:d5:b7:6f:d0:0d:56:01:4a:05:2e:
cb:07:4a:fb:f8:94:39:ba:6f:17:c2:7b:c9:dd:99:
8c:d7:4b:b6:0d:85:2c:92:ac:10:ed:55:c5:41:9e:
b7:bc:ef:a1:e8:3e:37:a1:38:47:4b:ce:85:ce:d2:
9f:ff:df:98:02:7f:1b:ab:df:c0:f6:2d:4c:e1:dc:
88:88:6d:25:01:ce:e8:f1:8f:b1:02:61:b7:a3:3e:
b6:c7:98:06:0a:0d:ce:41:a8:ee:ea:3c:00:7c:e2:
53:ad:3c:6a:00:87:94:e7:eb:68:85:3d:5d:0a:b0:
bd:6c:90:d8:81:2b:4f:93:10:ac:7b:54:7d:b3:65:
7e:cc:d8:8e:80:c2:61:02:aa:d3:6d:f1:5c:d1:76:
9f:e7:39:41:89:e2:8d:7a:3a:2a:0e:c2:26:1f:32:
c3:0f:1d:72:1d:30:f9:14:4f:7b:68:0a:a0:c2:c6:
b6:96:fb:6f:9e:64:02:1c:a7:15:d3:47:42:94:7f:
6f:f3:de:15:96:e3:21:78:d3:e5:e8:25:84:f7:01:
0c:fd:db:8c:36:3d:b4:66:99:b7:96:54:d7:9b:c0:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:2F:05:41:7F:00:FD:5C:88:DC:BE:36:1A:29:56:3A:55:5A:BC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1-QgvBUF_AP1ciNy-NhopVjpVWrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
163.5.140.0-163.5.142.255
163.5.233.0/24
163.5.236.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ce:3d:41:86:16:f0:ef:da:45:1e:ac:87:79:28:c3:c5:eb:
78:c2:e4:71:ae:98:37:24:87:82:20:2f:e3:bd:c8:b7:5c:21:
6a:be:db:e1:b0:9b:3f:a7:0f:42:71:61:e2:c4:49:57:16:9a:
00:f8:22:cb:b5:3c:80:df:cf:c2:d1:f9:6d:da:03:00:3a:30:
94:d5:a4:a7:65:54:81:53:d3:2f:11:dd:06:2e:30:51:21:40:
b9:95:15:ea:25:53:c8:a0:f7:44:60:10:a5:d8:5b:f9:c3:ca:
3f:c5:e0:89:6b:de:75:53:92:d7:b9:21:92:f6:b6:92:12:ab:
57:7a:1f:7a:88:ea:ec:0a:36:c0:25:5f:c6:a0:29:31:30:c4:
65:6e:1d:85:36:f5:04:f1:4c:41:2c:25:17:8a:14:53:ad:1f:
d0:f7:08:88:80:fe:64:75:52:06:c0:c4:1b:52:2f:b7:34:ea:
48:ab:a9:71:c0:24:d5:e6:b6:5f:1b:87:87:b5:e6:9d:a8:f4:
c3:0e:8b:c2:01:5f:3d:d5:c2:96:4a:c8:e9:2b:06:13:89:61:
c9:54:66:26:5b:62:98:0a:40:19:4b:63:86:21:0b:06:79:36:
d2:43:d7:1b:46:51:9b:c1:59:fd:84:49:03:61:b1:36:03:c7:
1c:26:de:3f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYQEz2gCoQj0ldusHF5QQDajMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMDIzMTIyNjUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTA4MmYwNTQxN2YwMGZkNWM4OGRjYmUzNjFhMjk1NjNhNTU1YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aeDOX1bGlSosjA8uO8kGaZRN0Of
nv2BXNKTMd+rMY9erNW3b9ANVgFKBS7LB0r7+JQ5um8XwnvJ3ZmM10u2DYUskqwQ
7VXFQZ63vO+h6D43oThHS86FztKf/9+YAn8bq9/A9i1M4dyIiG0lAc7o8Y+xAmG3
oz62x5gGCg3OQaju6jwAfOJTrTxqAIeU5+tohT1dCrC9bJDYgStPkxCse1R9s2V+
zNiOgMJhAqrTbfFc0Xaf5zlBieKNejoqDsImHzLDDx1yHTD5FE97aAqgwsa2lvtv
nmQCHKcV00dClH9v894VluMheNPl6CWE9wEM/duMNj20Zpm3llTXm8A5AQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPkILwVBfwD9XIjcvjYaKVY6VVq8MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMS1RZ3ZCVUZfQVAxY2lOeS1OaG9wVmpwVldydy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTMvZDAyZGZiLTk2NzMtNDlhOC05NzFjLTlmZTk0MTA4ZmYw
MS8xL0RPaFJ0dDFkTms3aG5nczRJQnMtamZKaVM4cy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA/BggrBgEFBQcBBwEB/wQwMC4wLAQCAAEwJgMEAKMFWjAM
AwQCowWMAwQAowWOAwQAowXpAwQAowXsAwQAowX3MA0GCSqGSIb3DQEBCwUAA4IB
AQAvzj1Bhhbw79pFHqyHeSjDxet4wuRxrpg3JIeCIC/jvci3XCFqvtvhsJs/pw9C
cWHixElXFpoA+CLLtTyA38/C0flt2gMAOjCU1aSnZVSBU9MvEd0GLjBRIUC5lRXq
JVPIoPdEYBCl2Fv5w8o/xeCJa951U5LXuSGS9raSEqtXeh96iOrsCjbAJV/GoCkx
MMRlbh2FNvUE8UxBLCUXihRTrR/Q9wiIgP5kdVIGwMQbUi+3NOpIq6lxwCTV5rZf
G4eHteadqPTDDovCAV891cKWSsjpKwYTiWHJVGYmW2KYCkAZS2OGIQsGeTbSQ9cb
RlGbwVn9hEkDYbE2A8ccJt4/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org