Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Cd_44_du_9tkPQMtahyH5hATwQ.roa
File: 6Cd_44_du_9tkPQMtahyH5hATwQ.roa (raw, json)
Hash identifier: f/j8ex88b9yTf9XpwSUwqWw2yBqaJUaAdIQ/Hhmdp08=
Subject key identifier: E8:27:7F:E3:8F:DD:BB:FF:6D:90:F4:0C:B5:A8:72:1F:98:40:4F:04
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184F7909E10001FBB99DFA18241088FCB42
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Cd_44_du_9tkPQMtahyH5hATwQ.roa
Signing time: Fri 09 Dec 2022 15:46:00 +0000
ROA not before: Fri 09 Dec 2022 15:46:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:90:9e:10:00:1f:bb:99:df:a1:82:41:08:8f:cb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 9 15:46:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8277fe38fddbbff6d90f40cb5a8721f98404f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:00:d2:19:2d:63:f6:00:ad:c2:4c:cf:9c:
b4:1b:cb:ff:a2:b3:91:15:46:69:1c:7a:fd:5b:47:
3e:cb:c8:3d:83:62:e7:14:60:14:ae:f5:20:55:68:
c8:f4:47:2a:ea:2a:14:48:6f:30:e8:35:b1:67:1d:
48:6f:55:2a:6a:1b:68:1e:d6:5b:6e:9f:8d:28:4f:
f9:bf:1c:b6:7a:06:78:1e:21:65:47:6a:fc:b7:48:
ae:9d:35:23:52:26:01:c1:e9:b0:9f:0a:fc:32:5a:
82:37:85:ce:9b:5e:23:c8:38:af:0c:be:7b:51:7f:
84:64:76:f2:64:54:3a:6b:4b:7a:a0:dc:ec:80:06:
50:9e:f6:dc:33:ce:23:2b:00:f8:5b:fd:2f:97:69:
13:43:87:04:b9:9a:c7:86:92:92:78:73:dd:df:dd:
65:25:87:31:e1:5d:13:f0:c0:69:8b:da:96:af:c2:
b4:14:6f:37:79:eb:4d:ba:39:fe:bb:86:61:30:1a:
1b:fb:10:ce:62:75:36:ec:e0:f1:f9:d3:9f:b1:84:
9a:10:5f:8a:f8:ee:a5:ee:44:72:13:8a:b8:8b:29:
31:b2:99:da:d3:43:e3:23:77:e6:40:15:42:de:92:
bd:23:0f:f8:ee:51:57:55:ac:84:4c:4b:88:a1:24:
24:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:27:7F:E3:8F:DD:BB:FF:6D:90:F4:0C:B5:A8:72:1F:98:40:4F:04
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/6Cd_44_du_9tkPQMtahyH5hATwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.33.0-163.5.34.255
163.5.37.0-163.5.39.255
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.124.0/24
163.5.131.0/24
163.5.152.0/24
163.5.169.0/24
163.5.214.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b1:0d:36:50:61:99:8a:da:80:65:dc:79:5a:fe:73:f8:08:
55:2c:a3:79:50:aa:b2:e3:58:67:79:0c:4f:54:1c:ae:bb:e5:
2b:2b:71:9f:f6:48:c5:c4:3a:a3:8e:6e:af:68:80:90:c3:47:
e0:c2:1c:07:5d:59:14:a4:bc:e7:e3:2b:ac:6f:f4:35:d1:f9:
48:79:b8:4c:60:fb:c3:de:20:2e:10:1e:72:aa:8d:78:0d:36:
fb:ec:01:d2:20:e3:00:88:2f:4f:60:9c:ea:01:d0:c0:48:d3:
51:6d:60:e9:f1:8f:22:eb:66:6c:64:0c:21:06:11:d3:ce:04:
39:f7:9b:94:0f:57:2c:35:a7:c9:43:ce:2a:7c:f9:8f:cb:86:
e6:ff:84:94:99:64:4a:84:81:ac:ee:65:a8:9a:94:7f:39:d2:
dd:cc:a5:b9:be:5d:9d:6b:11:e2:69:25:39:4d:ea:e6:88:d2:
71:8d:35:0c:ae:23:e2:07:e2:a6:70:17:ae:06:59:41:64:57:
1a:5e:4b:d1:3c:a9:a5:99:db:2d:07:4d:c7:4e:7e:2f:c5:46:
36:e9:82:9d:29:0d:c0:06:94:59:e0:a6:19:d2:76:45:b8:c2:
70:3b:96:6a:f9:62:2b:34:e9:f5:c8:b5:44:8c:2f:0c:d2:11:
63:f4:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org