Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F7l80aRcOfzFk3lQI1aeBXI3Csg.roa
File: F7l80aRcOfzFk3lQI1aeBXI3Csg.roa (raw, json)
Hash identifier: XoHC2EB6pfYP4x1qUMVD5MJ+8pKNYX+/2nIMeTmn39M=
Subject key identifier: 17:B9:7C:D1:A4:5C:39:FC:C5:93:79:50:23:56:9E:05:72:37:0A:C8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183BC1FC3527237DBDADB580528FB566F22
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F7l80aRcOfzFk3lQI1aeBXI3Csg.roa
Signing time: Sun 09 Oct 2022 09:42:21 +0000
ROA not before: Sun 09 Oct 2022 09:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.2.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.65.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
163.5.85.0/24 maxlen: 24
163.5.81.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.12.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.50.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.47.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.57.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:bc:1f:c3:52:72:37:db:da:db:58:05:28:fb:56:6f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 9 09:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17b97cd1a45c39fcc593795023569e0572370ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:b2:4d:67:a4:ff:cb:bc:26:f2:20:7d:c9:
5b:65:ec:80:07:cb:3c:52:68:a7:9c:32:7f:bc:c3:
dd:1e:7b:9c:52:d3:62:e8:06:54:e6:0d:b7:13:39:
ea:27:d2:c7:fa:26:45:07:1d:8d:85:41:d4:17:7b:
5c:3d:8b:0d:1d:9d:c1:95:ae:d1:3f:00:77:50:2e:
80:98:8d:80:41:e3:12:95:e1:64:3a:99:06:0f:56:
76:84:10:f7:a8:7a:4b:a8:27:5d:0e:74:b2:66:a4:
72:2f:e5:f2:bc:32:e5:4a:d6:a4:8e:fa:a3:82:50:
3a:23:69:b7:0f:37:20:1c:ef:5e:63:c3:cf:1b:98:
8a:09:aa:7d:12:ca:5a:f4:55:4e:d6:15:26:92:d8:
15:6b:05:cd:b7:dc:ec:21:25:f3:67:ab:51:03:77:
21:05:f9:90:89:63:cd:36:db:e2:41:43:08:70:71:
05:fe:58:32:d4:b4:81:0e:0b:ad:a4:49:ea:1e:c5:
0e:7c:0a:ec:3f:9c:42:96:0e:74:d5:aa:10:d3:33:
00:8d:06:28:af:f8:2e:88:b6:ea:22:45:b1:bc:03:
67:43:16:1d:96:2e:3d:b1:95:64:ff:cc:29:75:b4:
29:01:7b:38:b9:17:56:e6:92:9d:70:2d:fa:b3:b2:
7e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:7C:D1:A4:5C:39:FC:C5:93:79:50:23:56:9E:05:72:37:0A:C8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/F7l80aRcOfzFk3lQI1aeBXI3Csg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.2.0/24
163.5.5.0/24
163.5.10.0-163.5.14.255
163.5.20.0/24
163.5.23.0/24
163.5.40.0-163.5.57.255
163.5.65.0/24
163.5.68.0/23
163.5.73.0/24
163.5.80.0-163.5.82.255
163.5.85.0/24
163.5.100.0-163.5.107.255
163.5.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:bc:90:6d:b2:66:8f:09:af:46:94:b2:12:a2:3a:69:bb:7e:
f6:45:b0:f4:ff:95:f1:f3:5e:3a:50:dd:33:c8:b8:70:0d:1f:
e4:2c:c7:ff:60:9f:0d:b7:36:43:8a:f7:b8:ad:28:34:41:87:
6f:92:22:8c:d7:af:74:2f:50:88:8c:5e:0b:8b:fe:10:d5:57:
b9:d6:24:c9:dd:5e:be:79:88:0a:ee:31:40:13:07:0d:ab:b1:
7c:46:4b:ed:e2:28:79:0a:b0:15:7e:f0:2a:9e:a4:07:79:1e:
d2:90:a8:98:ee:d4:a5:73:89:8b:90:f2:74:1e:8e:93:41:2b:
fb:10:f9:07:d7:5f:57:41:63:e3:49:cf:c2:c1:ed:86:e1:b9:
a4:ee:0f:a5:8e:df:24:29:7d:2d:f0:29:b2:cd:4c:d6:2a:06:
2f:1d:18:bc:c8:f6:ee:93:e9:1c:16:8b:68:1b:ce:95:ef:18:
ee:89:7b:1f:8d:62:e2:1d:7f:ee:09:f4:c3:e0:74:ff:a9:d3:
ab:12:44:ed:f9:bb:1f:0a:11:59:90:c6:91:49:98:a3:f3:cf:
da:e2:eb:d9:17:35:05:f6:d4:d1:70:17:a8:e2:6e:27:ba:a6:
f8:28:14:d2:3d:78:48:c5:dc:93:ea:4d:5b:29:d8:96:fb:a2:
6a:60:f7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org