Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HDgTeSiwwpm_nUi8H-3Im6TWd_8.roa
File: HDgTeSiwwpm_nUi8H-3Im6TWd_8.roa (raw, json)
Hash identifier: lBJpQ0Bq6SMoyMPSQ7T+Y/I2L/U9mssWY0L1E39yfzQ=
Subject key identifier: 1C:38:13:79:28:B0:C2:99:BF:9D:48:BC:1F:ED:C8:9B:A4:D6:77:FF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183C7FCCF9382386701784A465E76A2A362
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HDgTeSiwwpm_nUi8H-3Im6TWd_8.roa
Signing time: Tue 11 Oct 2022 16:59:37 +0000
ROA not before: Tue 11 Oct 2022 16:59:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c7:fc:cf:93:82:38:67:01:78:4a:46:5e:76:a2:a3:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 11 16:59:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1c38137928b0c299bf9d48bc1fedc89ba4d677ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:dd:ff:8a:5a:cd:20:20:ba:ed:e5:b9:be:
44:07:2d:0c:57:58:12:15:86:c7:a6:5f:6c:90:39:
b5:dd:1b:bb:6d:bf:ff:24:64:a9:25:14:0d:7a:a4:
6d:4e:23:6c:c7:67:bf:bb:0e:62:53:0f:82:f6:fd:
b8:73:49:84:3a:72:f2:5b:d3:eb:b9:bb:82:78:95:
98:ec:c0:74:38:c3:89:05:68:59:92:90:4b:55:a6:
1b:aa:c1:e1:a6:22:8a:cd:a1:80:bd:b6:c1:0b:a0:
e3:c9:3e:9e:d9:85:27:de:ae:39:f3:27:5e:2b:04:
a2:c8:66:49:52:3c:8e:9d:f0:34:75:15:cb:c7:1f:
e2:2a:41:c7:47:fa:62:0b:1c:ec:87:23:db:99:2f:
21:67:23:fa:50:09:55:e7:d0:7b:6b:bb:cf:58:e4:
f7:63:d3:d5:4a:5e:78:dc:ba:36:42:ee:cc:13:a2:
87:f5:ee:d8:4a:75:dc:9d:51:03:ee:f0:dd:3c:e8:
ab:86:b3:26:ef:96:6e:b7:fb:3b:72:d6:a4:29:b8:
e2:c0:e5:ed:c7:33:4b:20:d1:9a:b6:99:2c:68:c6:
dd:79:5f:68:28:6a:40:de:b8:6d:68:c0:9d:8a:5e:
e3:f2:d7:c6:6a:0d:c9:30:3f:43:d5:d8:99:e1:44:
23:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:38:13:79:28:B0:C2:99:BF:9D:48:BC:1F:ED:C8:9B:A4:D6:77:FF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/HDgTeSiwwpm_nUi8H-3Im6TWd_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.33.0/24
163.5.37.0/24
163.5.39.0/24
163.5.91.0/24
163.5.97.0/24
163.5.99.0/24
163.5.118.0/23
163.5.124.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
06:72:94:b0:a5:15:66:7e:ec:a0:21:37:15:3e:1d:68:c4:7a:
d4:28:48:14:38:71:0e:56:a0:8a:ce:fd:a8:3b:f4:d8:68:d2:
19:6e:70:68:c9:63:5f:b1:77:9c:83:53:db:a6:8e:58:5f:66:
16:a8:f0:1b:ae:7f:23:cf:23:82:98:51:b3:aa:bb:7b:42:32:
1d:0a:00:86:e3:ff:41:18:c6:0d:e5:4b:5b:00:c1:97:62:e7:
04:d6:3b:fe:21:dc:f8:75:b8:32:88:ac:bf:b6:cc:2b:9a:09:
08:64:7e:04:0f:a7:e2:1e:f5:14:a5:3d:7c:35:43:8a:ba:a7:
13:4c:1a:91:5e:de:2b:40:61:74:e5:aa:21:ac:59:25:14:20:
47:45:96:e2:0d:b6:f4:9c:23:be:3c:e8:a3:0c:2a:ba:d4:6b:
0a:5f:a9:74:b8:a2:b6:d5:b0:fc:17:a5:b0:47:de:bf:52:86:
26:26:07:cc:61:38:ce:0c:ee:0c:e5:0b:f1:9d:1e:80:f7:78:
bd:cc:65:ba:fc:de:61:b3:0d:e2:6b:8c:57:63:64:b7:31:9a:
83:0c:66:c1:fd:7c:ca:ae:8a:f9:44:78:0f:65:2f:c7:48:78:
23:0d:ab:ef:49:3c:ef:aa:15:02:c9:7f:6e:9a:4e:1e:3d:0a:
c7:03:3f:7a
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAYPH/M+TgjhnAXhKRl52oqNiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMDExMTY1OTM3WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzM4MTM3OTI4YjBjMjk5YmY5ZDQ4YmMxZmVkYzg5YmE0ZDY3N2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM/d/4pazSAguu3lub5EBy0MV1gS
FYbHpl9skDm13Ru7bb//JGSpJRQNeqRtTiNsx2e/uw5iUw+C9v24c0mEOnLyW9Pr
ubuCeJWY7MB0OMOJBWhZkpBLVaYbqsHhpiKKzaGAvbbBC6DjyT6e2YUn3q458yde
KwSiyGZJUjyOnfA0dRXLxx/iKkHHR/piCxzshyPbmS8hZyP6UAlV59B7a7vPWOT3
Y9PVSl543Lo2Qu7ME6KH9e7YSnXcnVED7vDdPOirhrMm75Zut/s7ctakKbjiwOXt
xzNLINGatpksaMbdeV9oKGpA3rhtaMCdil7j8tfGag3JMD9D1diZ4UQj8QIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFBw4E3kosMKZv51IvB/tyJuk1nf/MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvSERnVGVTaXd3cG1fblVpOEgtM0ltNlRXZF84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAaMFHgME
AKMFIQMEAKMFJQMEAKMFJwMEAKMFWwMEAKMFYQMEAKMFYwMEAaMFdgMEAKMFfAME
AKMFmAMEAKMFngMEAKMFqQMEAKMFswMEAKMF1AMEAKMF1gMEAKMF3wMEAKMF+QME
AKMF/jANBgkqhkiG9w0BAQsFAAOCAQEABnKUsKUVZn7soCE3FT4daMR61ChIFDhx
Dlagis79qDv02GjSGW5waMljX7F3nINT26aOWF9mFqjwG65/I88jgphRs6q7e0Iy
HQoAhuP/QRjGDeVLWwDBl2LnBNY7/iHc+HW4Moisv7bMK5oJCGR+BA+n4h71FKU9
fDVDirqnE0wakV7eK0BhdOWqIaxZJRQgR0WW4g229JwjvjzoowwqutRrCl+pdLii
ttWw/BelsEfev1KGJiYHzGE4zgzuDOUL8Z0egPd4vcxluvzeYbMN4muMV2NktzGa
gwxmwf18yq6K+UR4D2Uvx0h4Iw2r70k876oVAsl/bppOHj0KxwM/eg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org