Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4J7l5O3Mz8TXs7_HPm3ZTFjtcJA.roa
File: 4J7l5O3Mz8TXs7_HPm3ZTFjtcJA.roa (raw, json)
Hash identifier: 6smtwkOBmevac4u6jEy7IndW7rNA6dSYwtueglWlPw8=
Subject key identifier: E0:9E:E5:E4:ED:CC:CF:C4:D7:B3:BF:C7:3E:6D:D9:4C:58:ED:70:90
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183AED27BC2265FFBCE357AC9FC08BD8E96
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4J7l5O3Mz8TXs7_HPm3ZTFjtcJA.roa
Signing time: Thu 06 Oct 2022 19:42:53 +0000
ROA not before: Thu 06 Oct 2022 19:42:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ae:d2:7b:c2:26:5f:fb:ce:35:7a:c9:fc:08:bd:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 6 19:42:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e09ee5e4edcccfc4d7b3bfc73e6dd94c58ed7090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:a2:2d:11:95:ae:2d:b0:35:66:a6:87:26:
d0:06:2b:70:e2:46:cc:7f:ec:59:da:5b:39:39:a7:
d7:fd:cf:7c:9a:90:f8:03:8a:de:9b:f1:66:d8:ed:
1d:f6:f4:09:3b:b0:13:51:12:ce:4f:7b:56:13:19:
89:ab:83:b7:ae:04:bc:2a:8a:96:3f:69:a3:7b:07:
04:08:1d:67:a2:dc:48:03:5b:62:61:f0:af:66:06:
1b:b9:23:bb:42:42:af:72:a3:7d:99:67:34:24:47:
9c:12:cc:01:a8:95:3b:ce:7c:f9:de:2b:9e:bb:a6:
ba:60:79:00:93:79:e0:a8:40:58:f9:77:97:d9:de:
b7:1f:c1:37:8c:db:38:c6:c3:c6:d9:b2:ca:94:37:
1c:ad:2c:88:c8:14:e0:e9:e0:6c:ba:89:e0:8a:e9:
cb:3b:92:50:ed:98:3f:d3:5a:f0:47:a3:b5:92:02:
8a:15:60:89:48:8a:e8:c5:0a:7d:c6:48:64:bf:78:
05:e1:4d:d5:34:51:7e:c0:0e:bf:0c:5e:3c:f5:99:
ae:6b:0c:d3:29:91:2b:33:09:43:4e:58:9c:a9:55:
9d:fb:4a:8e:b4:3b:6d:72:66:08:1f:80:03:61:c4:
c4:26:78:28:7f:ff:40:71:f0:8c:db:90:c8:83:fa:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9E:E5:E4:ED:CC:CF:C4:D7:B3:BF:C7:3E:6D:D9:4C:58:ED:70:90
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/4J7l5O3Mz8TXs7_HPm3ZTFjtcJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.37.0/24
163.5.91.0/24
163.5.97.0/24
163.5.99.0/24
163.5.118.0/24
163.5.124.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
37:60:91:99:56:44:d8:83:42:25:42:21:51:29:ed:e4:57:00:
38:f3:28:6f:33:d6:dc:2a:a2:9d:fd:d6:d1:43:97:7c:23:1b:
83:57:93:12:cb:56:56:3a:67:f7:15:d5:8b:b4:45:f2:c9:52:
37:fe:70:6d:a1:d8:a3:ea:e2:62:aa:b1:72:8a:ee:cf:04:6b:
1d:58:2f:8c:c5:33:fd:8c:7f:8b:f7:3e:df:48:fc:a8:ba:24:
4d:9f:63:66:a7:d0:5b:99:43:b7:25:fd:c4:97:41:63:b2:ab:
27:29:96:88:12:bf:32:3c:70:41:63:38:e1:ca:07:fa:a2:b0:
d5:72:a9:63:98:ae:24:69:1b:6c:5d:50:67:1a:a5:e3:c8:b5:
9d:1b:55:6c:14:9f:a1:c9:88:05:1b:11:33:13:b6:ce:d4:04:
a5:18:ec:c5:bc:ec:d5:94:52:87:f3:60:a2:f6:7f:80:63:13:
d2:35:0b:55:b4:8f:a8:d0:e5:e4:e4:9e:0b:fd:53:2c:c6:fc:
8e:54:0d:40:52:36:cf:e7:ef:d6:ef:c7:af:4e:3a:de:2c:2e:
73:64:da:31:05:62:9a:a3:e3:0c:f5:47:05:4e:48:6c:91:31:
ee:35:1f:e8:bf:ea:56:f0:ad:3a:29:b4:66:70:74:9c:5b:f8:
85:ae:bc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org