Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Eu4WpUqa68If8-0No1DpcZ7TFl8.roa
File: Eu4WpUqa68If8-0No1DpcZ7TFl8.roa (raw, json)
Hash identifier: eBs1jnrSk5ktloyvn4SR8IghkkA7kjsMcTMET2h9fPo=
Subject key identifier: 12:EE:16:A5:4A:9A:EB:C2:1F:F3:ED:0D:A3:50:E9:71:9E:D3:16:5F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01827E355A267FD9925357E72BF6B4E4A21A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Eu4WpUqa68If8-0No1DpcZ7TFl8.roa
Signing time: Mon 08 Aug 2022 16:06:41 +0000
ROA not before: Mon 08 Aug 2022 16:06:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7e:35:5a:26:7f:d9:92:53:57:e7:2b:f6:b4:e4:a2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 16:06:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12ee16a54a9aebc21ff3ed0da350e9719ed3165f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:98:59:7b:74:24:9e:0f:b2:d0:e4:6d:c5:
f0:1d:bf:c4:0f:05:7f:65:58:1d:66:e3:52:b5:6b:
06:38:40:62:0b:ad:5e:58:8b:e6:57:f9:7c:54:40:
5b:72:2f:a6:bb:1a:0b:16:79:ce:e4:0a:54:9e:dd:
ee:aa:42:67:0e:29:c8:12:02:d1:53:03:5d:99:93:
43:1e:2b:cf:a0:96:75:9c:4f:03:fe:35:ca:03:12:
11:4c:3a:d2:c7:82:d0:82:7f:fc:95:4d:fd:c2:aa:
2d:c2:94:a0:cb:8c:f5:2d:56:d8:65:59:52:fd:99:
19:10:b5:4c:9a:27:4b:83:ab:ea:c9:9a:10:56:e5:
3c:e1:24:00:b8:49:3d:47:e3:44:e5:58:a0:bf:e5:
1d:53:65:2c:bc:f1:fd:aa:8d:7c:b1:2d:0b:2d:fa:
18:eb:be:9b:f7:e1:10:a2:dc:4c:c3:f9:4d:33:67:
49:ef:52:fa:1a:43:0c:0e:b9:e7:e2:10:48:af:f9:
4f:18:34:39:bd:1a:2b:f2:3b:52:7d:bf:f0:43:2a:
c1:5c:60:bd:51:12:8a:89:63:31:04:25:c0:0e:2b:
41:36:d9:6f:ea:35:0f:0e:88:33:09:e0:34:cb:b9:
b5:58:72:96:85:42:c5:54:54:d5:81:89:9b:e2:7e:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EE:16:A5:4A:9A:EB:C2:1F:F3:ED:0D:A3:50:E9:71:9E:D3:16:5F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Eu4WpUqa68If8-0No1DpcZ7TFl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.127.0-163.5.219.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
83:58:6b:59:78:f9:3b:b5:d1:1d:50:14:0f:ef:d2:f8:78:88:
05:9f:53:04:14:2a:b0:c4:1e:5a:ae:af:26:41:9d:6f:a2:64:
10:a4:ed:a0:76:66:d1:10:8d:ac:7b:5a:7c:8c:e5:fe:b8:5c:
37:ce:aa:09:26:f3:f1:db:d3:d7:80:75:43:cf:8b:78:3b:2b:
de:c8:b6:4f:ef:7d:e9:59:66:42:7a:3b:0e:9a:82:8e:64:a4:
3b:42:ed:46:15:78:26:6a:af:b0:33:88:1b:c1:86:ab:d2:44:
7f:c6:8c:31:0f:63:19:ae:8c:9e:12:0f:f4:1c:bc:af:9d:e9:
7f:5f:af:06:b5:e8:b5:cd:a2:74:a0:8f:67:b3:bb:c6:5e:ba:
dc:28:2f:53:e9:2d:de:a4:68:c0:95:21:57:ab:88:72:f0:6d:
ce:a2:b9:d1:a7:0b:d9:65:6d:a8:49:b5:05:5e:15:b3:01:d8:
97:99:83:e2:b8:17:69:6d:3b:ab:be:6b:ad:c4:76:c8:4e:b6:
e6:16:e9:90:d9:7d:9d:15:90:20:eb:38:fd:f7:13:5a:a2:4b:
b6:21:0b:99:e6:52:24:1d:38:b9:cf:da:de:f4:3e:34:e2:fa:
78:b9:ec:16:80:e8:db:0f:b6:3a:d9:9a:d0:67:65:56:6e:8c:
1c:65:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org