Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1jj7_T8grecCFfBsbF7hrG-ECp4.roa
File: 1jj7_T8grecCFfBsbF7hrG-ECp4.roa (raw, json)
Hash identifier: bjuFBnvDub1ZCfEk3Lx3fpmjGu/pCYPrsW5B/Pcd7eM=
Subject key identifier: D6:38:FB:FD:3F:20:AD:E7:02:15:F0:6C:6C:5E:E1:AC:6F:84:0A:9E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0181E4635329BE17BA6FC830B1A84B9EA100
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1jj7_T8grecCFfBsbF7hrG-ECp4.roa
Signing time: Sat 09 Jul 2022 19:15:23 +0000
ROA not before: Sat 09 Jul 2022 19:15:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:e4:63:53:29:be:17:ba:6f:c8:30:b1:a8:4b:9e:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 9 19:15:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d638fbfd3f20ade70215f06c6c5ee1ac6f840a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:fa:f0:e2:48:89:c5:93:2d:53:83:e7:6c:
6d:a2:45:26:95:d5:3c:fb:a6:4f:ea:5f:8b:1a:a4:
2d:2d:33:81:cd:c9:2c:f9:be:dc:bc:3a:84:51:13:
2a:b3:3d:8a:70:9b:3a:48:4d:b7:4b:c6:af:d9:9c:
f9:61:6d:99:de:44:a9:34:fc:22:25:9a:6c:7c:d1:
22:67:70:61:1c:6e:1b:7e:29:a9:22:d3:17:7c:ed:
b9:59:b4:c0:41:da:b9:c7:8a:90:9c:e2:f3:ec:3e:
b4:6f:86:f5:8b:56:f6:fd:7b:51:34:0a:9e:fa:64:
a7:bf:3e:e9:32:21:15:21:82:7e:cf:7c:ca:27:8c:
ae:2e:b9:8f:f4:c3:19:ad:52:e7:18:d6:a0:da:10:
75:d8:84:c7:ab:58:c7:74:d8:2f:ac:25:0c:44:b3:
0b:31:97:7f:5c:39:45:1c:0e:ac:44:71:64:6b:8d:
45:93:c2:9a:c7:ec:4d:03:cc:61:85:b3:86:71:04:
93:e7:48:c1:d7:f7:0e:a0:f0:80:30:3f:81:3a:6c:
23:29:4c:d8:a1:e7:14:52:6b:8c:dc:c1:45:fe:7d:
a3:df:cb:7f:24:95:19:4f:91:9f:3f:14:0a:22:56:
c1:d6:6b:f4:d1:3b:66:a1:f0:a1:e7:fb:0b:ee:ff:
2a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:FB:FD:3F:20:AD:E7:02:15:F0:6C:6C:5E:E1:AC:6F:84:0A:9E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/1jj7_T8grecCFfBsbF7hrG-ECp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.127.0-163.5.169.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f5:99:79:0f:86:91:9e:4d:0b:30:4b:8e:c1:7d:17:5c:97:
61:cd:0a:77:df:e4:c7:2d:e9:b7:8c:0f:bc:e5:8f:c5:be:89:
35:30:72:a6:3e:db:1f:26:55:d1:e5:88:65:f0:dd:cb:8a:33:
5d:bd:39:18:ae:ad:d7:a4:7b:72:ee:e2:e9:5d:34:e6:6f:fe:
dd:85:38:12:10:8e:45:1d:4f:c9:be:ab:19:ac:f9:ff:60:45:
01:17:74:fd:2b:d4:e8:11:89:de:ac:fb:57:50:de:85:9d:d0:
d7:2b:5b:de:f4:dc:5e:9e:59:95:3a:87:3a:8a:59:24:b7:e9:
fd:dc:3b:2a:0c:d9:48:66:50:e2:1b:03:ff:08:f7:4a:e2:d9:
88:f7:60:72:33:a8:26:f1:f0:18:0f:42:7d:95:e0:cc:2c:5c:
10:76:df:3c:10:b0:5c:dc:32:3e:3d:bb:f5:e5:9a:f8:66:26:
53:2d:fc:b8:19:ff:e3:b6:f6:21:f9:ee:b9:7c:25:3b:a5:43:
38:65:85:ff:45:9e:73:90:93:12:ea:e4:aa:3b:2f:8b:f1:34:
99:b1:da:14:14:0c:f0:53:c2:fa:34:f0:81:39:cf:9a:81:e6:
a3:61:18:15:e5:47:79:48:27:75:a6:ae:a1:77:2b:8f:c5:1c:
cc:cc:51:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org