Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5CME1nrGeYfC-LDRYsCNLk8DVjo.roa
File: 5CME1nrGeYfC-LDRYsCNLk8DVjo.roa (raw, json)
Hash identifier: qC4BfwTU7ng4ssv/k277w/SGJd/CCQKhohuV2S9ojNQ=
Subject key identifier: E4:23:04:D6:7A:C6:79:87:C2:F8:B0:D1:62:C0:8D:2E:4F:03:56:3A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183FBA25AA0988BB0788C820879ADBDBD66
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5CME1nrGeYfC-LDRYsCNLk8DVjo.roa
Signing time: Fri 21 Oct 2022 17:41:04 +0000
ROA not before: Fri 21 Oct 2022 17:41:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.183.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:a2:5a:a0:98:8b:b0:78:8c:82:08:79:ad:bd:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 21 17:41:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e42304d67ac67987c2f8b0d162c08d2e4f03563a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f3:81:7a:5c:1a:67:fa:ab:5f:49:c5:a5:02:
8a:f8:e0:17:0a:71:6f:fa:96:07:a4:c3:f4:53:7a:
86:be:1c:29:2a:08:84:9f:4c:3b:ba:8a:59:32:b1:
70:1c:2f:2f:eb:14:47:d0:36:a7:86:62:8b:d5:bc:
04:e2:14:1a:10:f4:f8:b9:a1:ad:d9:e0:55:02:47:
1f:5d:e2:50:9a:95:d6:ba:4c:e2:7c:24:24:7d:0b:
31:e2:69:6e:b6:ef:36:de:8a:df:c7:25:be:6b:dd:
1f:00:78:ab:18:8a:24:c0:56:4e:a5:71:a2:90:c9:
86:8f:8b:68:21:bf:cc:91:03:f3:d4:3f:61:8d:c6:
4c:10:ce:c2:b4:44:a6:b8:94:9a:4f:f7:41:a1:d0:
cb:0b:8d:ff:31:6c:e3:83:d8:88:d8:cf:28:6d:12:
80:de:4d:55:01:c8:fa:a1:1b:d3:ba:c5:dd:09:f3:
b8:a1:5a:19:20:c6:c8:81:64:36:c2:cf:1c:c2:63:
cb:62:1e:1e:53:9d:9b:b9:c9:cf:dc:0a:f2:aa:cb:
8b:f7:c8:08:6c:9d:7c:b4:49:c1:32:af:58:e2:1c:
a2:16:6f:87:6b:0d:2e:f2:2f:2b:4e:8b:84:a0:c3:
54:96:86:57:b2:34:d0:4e:34:f4:8d:4d:e9:0a:0d:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:04:D6:7A:C6:79:87:C2:F8:B0:D1:62:C0:8D:2E:4F:03:56:3A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5CME1nrGeYfC-LDRYsCNLk8DVjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.122.0/24
163.5.139.0/24
163.5.183.0/24
163.5.238.0/24
163.5.240.0/24
163.5.244.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:49:a8:9f:e3:1d:b2:25:b0:4f:72:47:35:99:9f:f6:8f:b4:
fb:33:81:e8:8d:0c:48:4c:e9:4a:71:07:c9:22:4f:06:b3:99:
75:29:7c:f4:d9:6e:c7:52:3d:02:c7:34:a0:2b:38:63:49:02:
24:05:bd:01:3d:86:12:61:e0:0b:eb:08:bf:44:6c:43:d7:45:
3d:46:82:17:f8:cb:3e:44:08:4b:f4:86:ec:b0:7c:b3:03:7b:
d2:65:ce:c9:fc:62:77:60:5a:70:9a:94:d9:0b:69:25:50:36:
b6:dc:ad:f9:ba:dd:8a:a8:be:c3:1f:91:fb:b1:f0:10:93:a3:
c4:b1:cb:30:3e:ab:15:ae:b7:90:5e:8c:57:53:1f:69:5a:57:
fb:06:51:54:f1:93:df:bd:9e:7c:55:09:e2:cd:25:2e:3d:8c:
dc:ab:49:55:74:c2:db:5f:2b:36:e1:fe:e6:28:b2:7a:e2:a6:
ff:96:1d:fd:04:0b:f4:6f:9c:e4:18:93:6b:83:3d:5d:eb:b1:
90:fa:4a:8e:95:5c:a8:e2:34:59:59:a1:b1:81:14:ed:94:eb:
7a:9e:15:bf:0f:7b:f3:9a:48:56:d2:c3:1f:21:1b:76:2a:56:
94:4e:44:63:a3:ef:98:ef:bc:9c:12:30:21:67:a1:50:22:9c:
3f:ba:a5:8e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYP7olqgmIuweIyCCHmtvb1mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMDIxMTc0MTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDIzMDRkNjdhYzY3OTg3YzJmOGIwZDE2MmMwOGQyZTRmMDM1NjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofOBelwaZ/qrX0nFpQKK+OAXCnFv
+pYHpMP0U3qGvhwpKgiEn0w7uopZMrFwHC8v6xRH0DanhmKL1bwE4hQaEPT4uaGt
2eBVAkcfXeJQmpXWukzifCQkfQsx4mlutu823orfxyW+a90fAHirGIokwFZOpXGi
kMmGj4toIb/MkQPz1D9hjcZMEM7CtESmuJSaT/dBodDLC43/MWzjg9iI2M8obRKA
3k1VAcj6oRvTusXdCfO4oVoZIMbIgWQ2ws8cwmPLYh4eU52bucnP3AryqsuL98gI
bJ18tEnBMq9Y4hyiFm+Haw0u8i8rTouEoMNUloZXsjTQTjT0jU3pCg2ixwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFOQjBNZ6xnmHwviw0WLAjS5PA1Y6MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvNUNNRTFuckdlWWZDLUxEUllzQ05MazhEVmpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAowV6AwQA
owWLAwQAowW3AwQAowXuAwQAowXwAwQAowX0AwQAowX/MA0GCSqGSIb3DQEBCwUA
A4IBAQBMSaif4x2yJbBPckc1mZ/2j7T7M4HojQxITOlKcQfJIk8Gs5l1KXz02W7H
Uj0CxzSgKzhjSQIkBb0BPYYSYeAL6wi/RGxD10U9RoIX+Ms+RAhL9IbssHyzA3vS
Zc7J/GJ3YFpwmpTZC2klUDa23K35ut2KqL7DH5H7sfAQk6PEscswPqsVrreQXoxX
Ux9pWlf7BlFU8ZPfvZ58VQnizSUuPYzcq0lVdMLbXys24f7mKLJ64qb/lh39BAv0
b5zkGJNrgz1d67GQ+kqOlVyo4jRZWaGxgRTtlOt6nhW/D3vzmkhW0sMfIRt2KlaU
TkRjo++Y77ycEjAhZ6FQIpw/uqWO
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org