Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fy33JJBLcGn9rSF4qZoEYLso_8M.roa
File: Fy33JJBLcGn9rSF4qZoEYLso_8M.roa (raw, json)
Hash identifier: KM5bOzBsZc+dFTdaJrNCIlduPQ+fRCZt3ppLppiPsc8=
Subject key identifier: 17:2D:F7:24:90:4B:70:69:FD:AD:21:78:A9:9A:04:60:BB:28:FF:C3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183268F5083212726276D715E4429A025AC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fy33JJBLcGn9rSF4qZoEYLso_8M.roa
Signing time: Sat 10 Sep 2022 08:41:09 +0000
ROA not before: Sat 10 Sep 2022 08:41:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.190.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:26:8f:50:83:21:27:26:27:6d:71:5e:44:29:a0:25:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 10 08:41:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=172df724904b7069fdad2178a99a0460bb28ffc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:95:55:2d:fe:57:d9:be:9a:f3:21:d6:7a:
05:9d:6a:9e:0b:ba:f1:81:b0:ef:03:e9:70:d7:c4:
ee:cc:a1:44:9c:8f:51:14:99:ab:79:66:c1:10:0c:
65:0e:11:79:e7:30:ed:d1:08:ea:4e:c2:fd:a7:a0:
0b:bb:5a:63:13:43:4f:61:62:79:84:b1:c0:01:2d:
18:50:07:c9:d3:af:62:a6:e4:52:49:bb:0f:37:7b:
8c:88:a4:a9:5c:8e:28:14:91:8d:fe:69:ff:28:c0:
a7:60:a6:01:d0:85:fd:c8:d4:5d:a9:b9:87:06:f4:
8d:26:54:70:60:fc:b2:70:a1:29:4f:35:01:42:74:
d8:7f:df:cc:98:fd:bb:1e:f9:ab:7f:0f:1e:59:5d:
28:e6:5b:36:98:e5:fe:58:e5:6b:ed:b3:2f:6b:ca:
54:6a:6b:19:e6:ae:92:cc:a4:06:1b:4c:70:dd:b7:
ab:3c:5a:83:f9:ac:bf:32:70:76:83:ab:fc:8b:66:
41:79:66:fc:ca:3b:0f:7e:81:01:c8:19:94:f8:41:
61:d4:2f:47:29:33:c6:0d:c4:78:4e:59:f1:80:1b:
1e:c3:d5:7e:27:b5:f5:a7:04:fb:ec:c6:16:64:78:
58:fe:86:cd:4d:4b:e1:d1:24:75:28:97:41:70:cc:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:F7:24:90:4B:70:69:FD:AD:21:78:A9:9A:04:60:BB:28:FF:C3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Fy33JJBLcGn9rSF4qZoEYLso_8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.136.0/24
163.5.190.0/24
163.5.252.0/24
Signature Algorithm: sha256WithRSAEncryption
38:92:81:2c:19:74:ea:07:d7:8a:cc:5f:21:d9:75:d3:c5:d5:
23:e9:cc:1e:41:f6:f6:28:07:e7:0f:f0:f3:8a:a8:98:20:39:
5c:a5:c7:5f:c2:97:0a:b8:e2:9a:a1:81:ae:bc:36:60:47:64:
81:07:72:2d:2c:83:9c:a6:ed:e1:8c:f9:64:e2:6f:62:cc:3d:
11:f2:ae:8c:28:e7:76:13:28:98:af:27:b1:66:bd:91:18:b5:
c2:19:5a:0e:e7:cb:3f:6b:43:c1:67:96:71:ba:f6:49:98:98:
b4:06:52:73:f6:f7:20:bf:8e:2a:51:e4:ea:9d:8d:66:48:92:
ba:91:1e:1e:a8:fe:47:94:5b:0b:04:02:54:bb:90:9b:6f:ad:
3f:c4:99:cb:9b:26:57:53:be:6d:60:14:7b:8a:2d:fe:97:d8:
ea:25:36:97:a1:95:81:c9:63:c4:07:32:61:8b:42:fe:77:17:
15:74:1e:43:ca:e8:4c:9a:1d:ef:78:94:19:59:33:a1:bc:e0:
a3:e7:dc:89:83:e2:34:53:87:78:b3:4e:a9:7f:f6:1e:21:d2:
4c:63:fb:73:44:06:f0:8c:67:54:07:8e:ff:61:4f:0a:74:32:
ea:e3:dc:30:da:9e:4f:86:73:86:7a:67:fd:8d:be:56:60:d2:
8d:05:c2:c4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYMmj1CDIScmJ21xXkQpoCWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwOTEwMDg0MTA5WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzJkZjcyNDkwNGI3MDY5ZmRhZDIxNzhhOTlhMDQ2MGJiMjhmZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH2VVS3+V9m+mvMh1noFnWqeC7rx
gbDvA+lw18TuzKFEnI9RFJmreWbBEAxlDhF55zDt0QjqTsL9p6ALu1pjE0NPYWJ5
hLHAAS0YUAfJ069ipuRSSbsPN3uMiKSpXI4oFJGN/mn/KMCnYKYB0IX9yNRdqbmH
BvSNJlRwYPyycKEpTzUBQnTYf9/MmP27Hvmrfw8eWV0o5ls2mOX+WOVr7bMva8pU
amsZ5q6SzKQGG0xw3berPFqD+ay/MnB2g6v8i2ZBeWb8yjsPfoEByBmU+EFh1C9H
KTPGDcR4TlnxgBsew9V+J7X1pwT77MYWZHhY/obNTUvh0SR1KJdBcMx+mQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBct9ySQS3Bp/a0heKmaBGC7KP/DMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvRnkzM0pKQkxjR245clNGNHFab0VZTHNvXzhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAowWIAwQA
owW+AwQAowX8MA0GCSqGSIb3DQEBCwUAA4IBAQA4koEsGXTqB9eKzF8h2XXTxdUj
6cweQfb2KAfnD/DziqiYIDlcpcdfwpcKuOKaoYGuvDZgR2SBB3ItLIOcpu3hjPlk
4m9izD0R8q6MKOd2EyiYryexZr2RGLXCGVoO58s/a0PBZ5ZxuvZJmJi0BlJz9vcg
v44qUeTqnY1mSJK6kR4eqP5HlFsLBAJUu5Cbb60/xJnLmyZXU75tYBR7ii3+l9jq
JTaXoZWByWPEBzJhi0L+dxcVdB5DyuhMmh3veJQZWTOhvOCj59yJg+I0U4d4s06p
f/YeIdJMY/tzRAbwjGdUB47/YU8KdDLq49ww2p5PhnOGemf9jb5WYNKNBcLE
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org