Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fuh1up51jpISNyE6FXsKK5FM1HY.roa
File: Fuh1up51jpISNyE6FXsKK5FM1HY.roa (raw, json)
Hash identifier: BmvGQRZVrPMmPGxgdFjzvsLqEo4xa6Cf+r8G+m/YMFw=
Subject key identifier: 16:E8:75:BA:9E:75:8E:92:12:37:21:3A:15:7B:0A:2B:91:4C:D4:76
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183561977D42EF7A22480C7A689C3393B73
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fuh1up51jpISNyE6FXsKK5FM1HY.roa
Signing time: Mon 19 Sep 2022 14:14:13 +0000
ROA not before: Mon 19 Sep 2022 14:14:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 163.5.122.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:19:77:d4:2e:f7:a2:24:80:c7:a6:89:c3:39:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 19 14:14:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=16e875ba9e758e921237213a157b0a2b914cd476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cb:eb:ec:d9:33:bd:57:7f:6b:b1:42:ab:1d:
3b:07:5d:7d:e3:e2:4a:25:54:1a:4c:65:5e:64:c4:
90:b6:03:fe:3f:f7:dc:30:52:74:32:22:87:a9:18:
c8:fa:79:19:42:dd:6d:71:1d:f1:35:2b:01:f5:f8:
8f:8f:d2:d5:9c:0d:95:71:15:db:e1:23:ae:7c:4d:
c7:6c:f6:5f:09:4b:60:f3:fc:19:6d:c5:2c:bc:dd:
55:19:15:d6:24:93:0a:ae:17:05:79:b0:80:d5:6a:
b2:54:3a:ec:a9:c4:7b:15:3b:48:e5:52:6f:5a:69:
50:5a:2f:ef:63:ae:0d:95:e4:c4:31:35:53:a7:24:
c4:95:63:aa:d5:44:ae:22:45:32:da:28:c4:1d:6d:
55:ae:e1:1e:a6:95:c2:67:10:be:a1:6c:3d:bf:65:
7f:5f:ed:58:70:d5:e8:5e:58:6b:65:60:9b:9b:07:
61:16:ab:f9:21:95:23:a7:08:b3:09:1e:26:88:d3:
04:f4:aa:c7:f0:61:0e:04:66:47:a3:40:ed:7e:2b:
39:44:61:a5:be:04:c1:9d:7b:8e:cc:cb:5c:a9:55:
7e:1b:1e:88:79:a6:f0:45:92:6b:04:22:8a:be:29:
9d:46:2c:e4:dc:5a:07:d5:c2:ad:79:e5:16:46:ad:
72:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E8:75:BA:9E:75:8E:92:12:37:21:3A:15:7B:0A:2B:91:4C:D4:76
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fuh1up51jpISNyE6FXsKK5FM1HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.122.0/24
163.5.139.0/24
163.5.238.0/24
163.5.240.0/24
163.5.244.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fd:37:7e:b2:c4:a9:91:ac:59:7e:0b:66:7b:b3:1c:de:e8:
f9:0e:01:b6:5c:19:27:c9:31:ea:f9:74:2b:dc:95:28:bd:0c:
b1:63:5e:41:c6:8f:c4:a6:47:f3:cf:80:d4:d1:dc:c4:69:72:
de:0d:8b:2d:42:a5:c4:61:2d:fb:3e:80:ad:32:cc:63:7c:f0:
22:c5:d9:d6:c0:cc:2f:0d:78:b9:12:a6:d2:27:ec:82:5a:2e:
7e:c5:98:5a:b2:3c:9c:de:a1:1a:b8:fa:82:f6:9d:e5:a1:0a:
f2:5e:f9:61:78:2b:a4:34:8f:6a:f3:e6:23:14:b2:04:df:b1:
3a:37:1e:55:70:41:e1:4e:d3:01:e6:c6:52:47:34:08:39:6b:
10:97:eb:58:73:ae:33:21:a9:a3:9a:63:77:af:b8:e4:2c:82:
56:93:db:64:17:fe:7c:45:b5:ae:66:f2:52:d3:04:ac:c7:e5:
d5:64:b4:b0:89:0c:a7:9b:cd:7c:2f:6b:00:a6:8e:cb:e4:df:
d2:99:16:a8:1d:ce:de:b7:32:41:e0:20:67:c9:d0:20:97:42:
e1:5e:11:aa:21:81:75:61:f8:80:73:54:48:b3:38:83:d6:13:
01:16:9d:c0:ed:41:bd:17:7a:35:39:01:03:b5:e6:be:6f:48:
a4:e7:a8:4f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYNWGXfULveiJIDHponDOTtzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwOTE5MTQxNDEzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmU4NzViYTllNzU4ZTkyMTIzNzIxM2ExNTdiMGEyYjkxNGNkNDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsvr7NkzvVd/a7FCqx07B1194+JK
JVQaTGVeZMSQtgP+P/fcMFJ0MiKHqRjI+nkZQt1tcR3xNSsB9fiPj9LVnA2VcRXb
4SOufE3HbPZfCUtg8/wZbcUsvN1VGRXWJJMKrhcFebCA1WqyVDrsqcR7FTtI5VJv
WmlQWi/vY64NleTEMTVTpyTElWOq1USuIkUy2ijEHW1VruEeppXCZxC+oWw9v2V/
X+1YcNXoXlhrZWCbmwdhFqv5IZUjpwizCR4miNME9KrH8GEOBGZHo0Dtfis5RGGl
vgTBnXuOzMtcqVV+Gx6IeabwRZJrBCKKvimdRizk3FoH1cKteeUWRq1ycwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFBbodbqedY6SEjchOhV7CiuRTNR2MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRnVoMXVwNTFqcElTTnlFNkZYc0tLNUZNMUhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAowV6AwQA
owWLAwQAowXuAwQAowXwAwQAowX0AwQAowX/MA0GCSqGSIb3DQEBCwUAA4IBAQBe
/Td+ssSpkaxZfgtme7Mc3uj5DgG2XBknyTHq+XQr3JUovQyxY15Bxo/Epkfzz4DU
0dzEaXLeDYstQqXEYS37PoCtMsxjfPAixdnWwMwvDXi5EqbSJ+yCWi5+xZhasjyc
3qEauPqC9p3loQryXvlheCukNI9q8+YjFLIE37E6Nx5VcEHhTtMB5sZSRzQIOWsQ
l+tYc64zIamjmmN3r7jkLIJWk9tkF/58RbWuZvJS0wSsx+XVZLSwiQynm818L2sA
po7L5N/SmRaoHc7etzJB4CBnydAgl0LhXhGqIYF1YfiAc1RIsziD1hMBFp3A7UG9
F3o1OQEDtea+b0ik56hP
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org