Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B6c0VrxZVjeEyMMrlZOE1UBOAVY.roa
File: B6c0VrxZVjeEyMMrlZOE1UBOAVY.roa (raw, json)
Hash identifier: pp+WCDqG5G4qjx1jezDCO8Xh6wjwVB6DdeDpkVgrOjU=
Subject key identifier: 07:A7:34:56:BC:59:56:37:84:C8:C3:2B:95:93:84:D5:40:4E:01:56
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183804640F36449AE3D86B6EC195A02AEE3
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B6c0VrxZVjeEyMMrlZOE1UBOAVY.roa
Signing time: Tue 27 Sep 2022 18:47:11 +0000
ROA not before: Tue 27 Sep 2022 18:47:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.90.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:80:46:40:f3:64:49:ae:3d:86:b6:ec:19:5a:02:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 27 18:47:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=07a73456bc59563784c8c32b959384d5404e0156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fe:cb:ac:b4:65:fd:46:3c:0b:85:9e:4b:01:
f5:dc:ca:59:b8:ae:63:15:b8:12:07:07:3b:83:78:
ff:0c:b7:33:82:06:a7:f3:5f:c4:67:cc:98:dc:17:
89:9b:b5:8d:0b:1c:b3:15:1c:51:97:8e:17:4d:8f:
38:02:e6:fc:a5:fa:8c:31:6c:e3:e5:57:34:14:cd:
ff:cd:36:70:fa:c5:76:95:f2:73:af:6c:96:96:57:
8b:33:a0:56:b2:60:54:ab:36:a6:4c:6d:91:ee:82:
07:05:3f:36:fe:de:a1:24:cb:5b:fc:d6:ed:a1:f1:
bf:16:bc:69:c7:3f:05:6e:ee:6a:58:29:23:b4:9e:
32:7e:bc:85:17:f8:bf:04:e6:3e:5d:81:34:a5:69:
f2:ef:85:6c:7c:ac:ad:65:a5:11:94:fc:82:82:e3:
65:ac:f3:d3:27:eb:c2:3b:0f:e2:60:a1:c1:ac:da:
cf:0d:b7:91:e0:f7:79:48:4d:18:3e:73:10:76:00:
b6:74:b6:c9:16:d0:af:06:ae:99:c6:00:0a:ce:2b:
75:dc:2b:5c:7c:d6:fc:03:18:06:77:7b:c9:33:0f:
7a:39:61:ec:74:f1:be:4c:93:2f:2c:85:fd:cf:d0:
f4:4a:b7:69:38:86:33:9a:52:e8:64:ee:da:de:55:
ce:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A7:34:56:BC:59:56:37:84:C8:C3:2B:95:93:84:D5:40:4E:01:56
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/B6c0VrxZVjeEyMMrlZOE1UBOAVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
163.5.112.0/24
163.5.114.0/24
163.5.130.0/24
163.5.140.0-163.5.142.255
163.5.233.0/24
163.5.236.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1b:dd:cb:f5:4f:b7:f8:02:6b:f9:9f:28:22:1f:19:09:4f:
11:27:c7:ce:eb:30:f9:7e:1a:b9:3d:86:27:f3:8d:b1:60:3a:
c0:0c:42:b5:63:0a:68:08:1a:f6:1a:2a:2f:53:49:54:72:00:
91:f4:00:e7:e0:52:1b:9a:22:9d:41:d9:24:bb:e3:d9:7c:b8:
ba:5e:b7:09:c0:ce:0d:5c:52:2a:53:c1:84:1f:43:28:fa:1d:
41:81:d0:4c:80:f2:ad:ca:f3:9f:d6:1d:4f:76:af:dd:91:85:
f4:b0:a2:55:86:b8:bf:15:12:98:a1:1d:23:a1:96:8a:35:06:
f3:0a:f2:ff:a4:63:2b:75:e8:e9:e8:ee:44:92:59:84:58:d2:
f4:2f:01:a0:8c:3c:5c:1e:af:4f:93:43:97:56:b8:43:d8:bb:
30:b1:50:28:96:5f:38:0f:31:92:80:45:d7:77:bf:7a:df:33:
00:72:5e:e9:0a:fb:14:9d:b8:1d:76:84:15:d3:a6:aa:b2:44:
37:e6:d3:4a:ca:a6:70:5a:80:05:59:84:2b:c9:6e:06:26:c6:
59:4b:ac:93:86:b8:73:38:da:23:6a:49:93:36:ed:c1:b0:7b:
cf:70:f9:f8:99:ac:3a:a2:d8:49:66:13:2f:69:d3:95:7b:b6:
11:79:34:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org