Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1VfPIEyZB6-L5sbVKcjSY7ariOw.roa
File: 1VfPIEyZB6-L5sbVKcjSY7ariOw.roa (raw, json)
Hash identifier: 2iRqYTYJiuItfJsCiS5DHE8I7b9ICCY5ty3ZJskaCJU=
Subject key identifier: D5:57:CF:20:4C:99:07:AF:8B:E6:C6:D5:29:C8:D2:63:B6:AB:88:EC
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018335EB34CB8D02E60A986C00321A956CDB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1VfPIEyZB6-L5sbVKcjSY7ariOw.roa
Signing time: Tue 13 Sep 2022 08:15:50 +0000
ROA not before: Tue 13 Sep 2022 08:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.227.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:eb:34:cb:8d:02:e6:0a:98:6c:00:32:1a:95:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 13 08:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d557cf204c9907af8be6c6d529c8d263b6ab88ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:87:45:c7:ce:32:44:79:0b:c9:ad:f8:dc:9f:
46:c8:a5:30:63:fc:8d:68:dd:07:cb:93:71:db:af:
7e:c7:ca:68:38:f8:28:10:17:8f:e0:50:ce:9e:27:
d6:4a:06:1d:2e:e4:0f:3d:f8:e8:e2:02:94:88:8f:
35:3e:b4:48:b2:0c:c8:20:ad:11:94:49:c5:97:af:
e0:f7:fe:3c:c7:e0:29:70:0d:2c:46:ee:66:6d:43:
77:fb:20:85:d8:c0:6f:e0:b8:af:00:ca:f5:a5:bf:
84:84:74:65:d6:63:76:ee:7c:cc:51:f6:b1:cc:10:
d9:fb:a8:9f:b0:a3:a5:c6:23:b0:88:e4:aa:16:de:
77:a4:7a:0a:57:a1:82:80:85:cf:5e:6e:22:b9:cc:
cc:7f:f2:ca:72:f1:31:c6:c1:25:c5:37:3f:b3:d1:
52:2b:b4:8b:fa:18:41:09:be:78:62:9d:32:60:3e:
29:e7:37:16:3d:31:9f:50:08:68:79:8e:56:10:3e:
39:12:2f:9b:b9:fc:5b:da:36:66:5f:1c:c4:f0:49:
84:da:05:97:bd:30:c7:e4:2a:8f:bb:3c:ee:9b:3d:
de:43:92:44:fa:5f:88:d4:fd:8e:6b:9f:d9:8d:a9:
a5:02:fb:10:9d:50:8e:83:18:96:6c:e9:24:94:e1:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:57:CF:20:4C:99:07:AF:8B:E6:C6:D5:29:C8:D2:63:B6:AB:88:EC
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1VfPIEyZB6-L5sbVKcjSY7ariOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.152.0/24
163.5.158.0/24
163.5.166.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.226.0/23
163.5.246.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3f:d7:0e:e9:0a:3c:27:bf:99:3c:d3:8d:2a:07:0f:e6:55:
fc:b1:99:85:92:5f:20:e7:29:7d:4d:a3:72:34:10:71:ec:99:
41:fb:ab:dd:77:c8:ef:d7:24:6a:9c:f9:3e:7d:87:99:24:97:
38:ea:3a:42:e3:a2:9c:ba:00:a3:8c:2c:ac:9c:c9:fd:d6:24:
52:d1:1f:e6:0a:4c:df:4b:8d:b1:f7:de:33:2f:b6:e6:d0:ff:
e7:25:bb:f8:db:fe:b9:d9:33:67:76:be:2e:fd:7f:f0:1a:1b:
5b:74:91:c7:5c:ce:29:84:7c:40:a9:96:fb:1d:e7:f8:27:ba:
60:fe:7d:ab:dd:b6:d3:46:24:33:f6:e3:a8:f4:81:fa:8a:e0:
77:36:68:cc:a2:1c:32:31:19:c0:a6:e6:4f:a8:b3:51:60:de:
c7:57:a3:de:4f:73:38:86:95:5a:59:0b:bf:62:a5:e6:8d:a5:
53:48:f5:2e:30:a3:c3:7c:2a:3a:d2:3d:96:e2:f7:d0:14:b8:
08:7d:dc:7e:a8:e1:72:9e:9c:21:c2:6e:2d:38:19:15:a6:2c:
52:8c:18:15:d6:a7:6c:74:28:3b:f5:11:99:3d:e1:f7:75:75:
ba:2f:e2:07:fa:a0:d2:e3:70:90:3f:a7:79:97:4f:a4:8d:9a:
ea:21:20:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org