Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JX3BZOAjID3QejoWdN6TT0g6cuc.roa
File: JX3BZOAjID3QejoWdN6TT0g6cuc.roa (raw, json)
Hash identifier: YK0k0FGih4DZR5pqnArAjUt+wsoTWn6Ym4EkJdzjqAM=
Subject key identifier: 25:7D:C1:64:E0:23:20:3D:D0:7A:3A:16:74:DE:93:4F:48:3A:72:E7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01832C0B55853D4BE8487C70E6FC935B9421
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JX3BZOAjID3QejoWdN6TT0g6cuc.roa
Signing time: Sun 11 Sep 2022 10:14:43 +0000
ROA not before: Sun 11 Sep 2022 10:14:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:2c:0b:55:85:3d:4b:e8:48:7c:70:e6:fc:93:5b:94:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 11 10:14:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=257dc164e023203dd07a3a1674de934f483a72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:f7:23:50:04:68:8e:5a:84:e6:17:cd:5d:
bc:e8:7c:67:2a:93:ad:04:b3:4f:74:96:10:64:32:
52:5f:ef:03:ea:86:2d:d4:d4:35:e7:0a:ef:ba:fb:
96:e2:43:46:a4:16:cb:34:5f:3f:32:85:86:9f:db:
eb:f4:c2:54:90:3d:9d:55:3a:4e:07:c1:e1:36:bd:
b4:c4:a5:1c:27:f8:a5:27:d9:cd:0c:68:bb:ac:17:
c6:9e:8a:7d:a6:52:49:8a:c8:17:fb:b6:fa:36:e9:
7f:69:d2:c6:e1:a8:74:e9:d1:d8:c8:81:fe:1b:7f:
17:72:69:3c:83:0f:59:90:08:b3:e4:49:9a:79:aa:
13:85:dc:81:43:9f:6a:8c:c7:58:7e:8d:40:dd:28:
69:c1:5b:ff:32:f3:33:44:f0:7e:79:84:a8:ec:42:
9c:7a:b5:f1:6c:12:9b:63:f4:1a:98:da:93:15:73:
a4:34:64:c9:57:f0:f9:54:50:7d:23:24:10:29:7f:
67:c9:9f:ba:80:37:b2:61:68:c2:50:4d:f8:e4:96:
7c:0e:24:bf:8c:27:3f:7d:03:b9:6c:dc:c7:03:3c:
67:e3:fc:ee:15:b1:db:c7:85:54:7a:c9:7a:c5:f2:
fc:68:05:e8:2e:99:59:b4:2c:56:6e:f9:b3:ed:7d:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7D:C1:64:E0:23:20:3D:D0:7A:3A:16:74:DE:93:4F:48:3A:72:E7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/JX3BZOAjID3QejoWdN6TT0g6cuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.152.0/24
163.5.158.0/24
163.5.166.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.226.0/23
163.5.246.0/24
163.5.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9c:a7:7f:44:19:6b:ae:a3:83:db:97:1c:58:86:40:38:be:
23:b2:cd:8d:10:9b:bd:d7:01:06:11:3d:12:68:7e:a7:f5:bf:
2f:96:0a:2b:16:fe:b4:af:f6:bb:fe:15:46:dd:be:9d:55:10:
7f:71:dd:86:34:21:d0:86:81:40:5a:e0:61:12:54:97:93:db:
65:ea:8a:80:7c:7a:97:38:3b:a1:fa:32:fd:69:09:80:a5:0e:
44:9d:37:e8:ed:0e:2a:87:14:7e:38:be:84:94:62:68:93:d0:
34:33:18:1d:de:a6:d1:c0:91:ef:5b:69:43:9a:06:6b:36:5c:
76:1d:02:e1:97:77:b4:82:e2:19:46:a2:4b:29:42:34:92:8f:
78:76:7b:fe:78:f6:15:a2:8a:31:8f:97:4a:c1:42:44:00:b0:
e1:08:e0:df:83:45:d7:ed:46:85:64:57:c7:eb:48:b3:8d:0e:
46:c6:ee:67:91:53:e6:d3:69:2f:dd:a4:f5:bd:b1:50:ca:79:
b4:b7:6d:ba:af:b3:4f:1a:c5:ae:f6:e4:f0:15:99:b9:41:ff:
2c:b1:8d:67:1d:13:13:65:6b:aa:af:41:0a:5f:32:4d:e3:50:
a4:60:72:67:69:ef:76:d3:b4:6b:25:5c:78:fd:da:7f:bb:96:
3f:cf:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org