Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GnxNeMAiGya6HWGF2K-7XdhzZPs.roa
File: GnxNeMAiGya6HWGF2K-7XdhzZPs.roa (raw, json)
Hash identifier: d+ym6wwe+Bi9AnnG2HiQ1AtQxBVb77YKHqaLmZCQSv8=
Subject key identifier: 1A:7C:4D:78:C0:22:1B:26:BA:1D:61:85:D8:AF:BB:5D:D8:73:64:FB
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184C39578E1C087062FA5BED1C105181880
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GnxNeMAiGya6HWGF2K-7XdhzZPs.roa
Signing time: Tue 29 Nov 2022 13:31:03 +0000
ROA not before: Tue 29 Nov 2022 13:31:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.107.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c3:95:78:e1:c0:87:06:2f:a5:be:d1:c1:05:18:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 29 13:31:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a7c4d78c0221b26ba1d6185d8afbb5dd87364fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:fe:2d:0b:f9:79:b6:fe:72:39:29:fc:b9:
bc:c4:e5:20:00:95:89:65:30:e5:2c:05:41:20:d9:
22:0a:3e:e1:32:1f:df:43:57:ed:07:0f:a8:57:8a:
43:93:b7:a5:4a:34:6b:12:b4:05:b1:2a:92:9f:03:
e9:c3:70:14:57:25:2c:fb:4f:96:a3:f0:32:fb:0d:
f2:37:0a:80:67:a2:d0:01:87:92:8b:4a:1a:93:3f:
8d:85:a8:4b:6a:39:59:86:a9:5b:1f:14:26:c7:d6:
75:67:cc:50:d5:8d:d1:7f:f5:ee:c1:b7:c2:b6:77:
54:a5:4f:2a:1f:e9:06:e8:39:3c:0c:11:ca:bb:05:
f1:59:13:46:ee:e2:f7:7a:4d:68:56:83:a2:2b:fe:
f4:be:53:a3:b1:93:0d:b9:35:f6:e4:33:28:38:35:
73:14:bb:86:61:a8:76:cf:af:0b:b5:f6:09:ae:26:
b9:0c:bc:12:6f:2f:24:22:61:e2:6c:33:c6:ab:07:
6f:24:91:4e:2d:2d:52:a6:06:0b:b6:13:6f:96:53:
04:f5:90:e9:60:ce:de:92:8b:b7:d8:df:77:21:04:
d1:8f:89:80:a6:0a:0a:29:a4:7b:78:53:0f:30:00:
40:53:6c:f2:f1:fa:08:91:05:15:77:43:2b:7e:97:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7C:4D:78:C0:22:1B:26:BA:1D:61:85:D8:AF:BB:5D:D8:73:64:FB
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/GnxNeMAiGya6HWGF2K-7XdhzZPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0-163.5.39.255
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.91.0-163.5.189.255
163.5.191.0-163.5.199.255
163.5.201.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
53:0a:e1:36:9d:88:fe:a2:87:a3:b1:67:f9:16:9c:97:0b:3c:
71:13:aa:e6:ad:fe:39:4f:3a:b9:41:86:ea:f8:b7:7d:87:a3:
9c:e7:b3:52:55:5f:5e:d5:ed:09:de:76:bf:e4:fa:7c:55:e3:
8a:56:98:62:76:80:f9:4b:57:3f:91:e3:cb:bc:3e:cb:73:c0:
bd:d9:3f:00:b7:63:64:ad:57:a7:34:9e:bd:8c:9d:34:b9:24:
c1:89:6f:26:b8:ff:24:d4:78:1f:25:00:f5:fb:58:03:28:8d:
db:72:cd:2d:1b:89:53:29:05:ac:6c:ab:f1:23:43:c6:e2:52:
f8:5a:b1:76:8d:72:19:4d:57:12:81:4a:43:fb:a8:40:77:6a:
41:b0:46:2c:e2:0a:fe:c2:3a:a7:5e:e5:eb:9e:51:9a:59:96:
b6:38:4c:8c:d6:a1:f7:65:4b:40:0d:70:25:c6:87:57:ed:01:
a0:19:09:72:a2:ac:fd:16:d7:4f:88:da:59:c1:9f:be:76:fa:
1e:fd:7d:7c:05:16:91:44:a2:fc:69:ba:99:25:81:36:d7:97:
72:cc:4a:fc:de:a7:06:14:41:55:53:7f:f2:86:f0:5f:7c:6c:
af:bf:bb:60:e1:2b:88:a2:7d:4d:33:fd:8b:b3:0c:e2:e0:08:
58:06:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org