Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LZtlogtGppZ5_fFCDAlPrhK_DTU.roa
File: LZtlogtGppZ5_fFCDAlPrhK_DTU.roa (raw, json)
Hash identifier: HtygkItUYLchqHemDPwMeQ95YqeKK5g5ada/IWEOXic=
Subject key identifier: 2D:9B:65:A2:0B:46:A6:96:79:FD:F1:42:0C:09:4F:AE:12:BF:0D:35
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184CD49DE0B9895D117E046175075E13115
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LZtlogtGppZ5_fFCDAlPrhK_DTU.roa
Signing time: Thu 01 Dec 2022 10:44:40 +0000
ROA not before: Thu 01 Dec 2022 10:44:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:49:de:0b:98:95:d1:17:e0:46:17:50:75:e1:31:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 1 10:44:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d9b65a20b46a69679fdf1420c094fae12bf0d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:42:a0:d2:ad:09:0f:b5:29:f7:39:73:2c:2e:
43:1b:c1:9b:fa:bf:5c:31:18:f6:27:92:83:0b:18:
26:75:39:66:e3:c0:bc:6f:10:bc:65:03:81:05:48:
80:5c:87:ae:4c:9f:1a:4c:06:65:2e:2d:e9:62:d2:
a3:ab:08:46:76:69:95:75:9c:dc:42:49:59:9b:9b:
aa:a3:f2:5b:9c:8c:43:b6:e5:b0:e1:31:ff:67:df:
fe:60:e6:3e:a8:a0:a5:b3:b1:d5:97:ca:34:1d:8d:
c1:07:c1:b4:db:e2:6c:72:66:8d:3b:27:51:93:42:
21:85:86:ec:a6:80:15:29:36:62:eb:5a:b5:c3:87:
3d:26:23:d6:10:6d:c2:29:a7:bf:e6:a1:1f:8d:93:
35:8b:06:fe:d6:65:a3:b8:3f:a1:5c:33:eb:78:04:
54:b2:7e:00:17:93:a1:a4:71:03:96:2d:d5:c9:69:
14:da:de:e3:25:ec:45:2e:71:8b:0a:a8:43:57:bf:
8f:4a:1d:af:aa:e2:a5:f0:3d:e1:1e:95:5f:84:d4:
7f:69:ad:77:6c:e3:30:7a:50:df:42:cb:fd:40:2f:
47:98:f6:13:49:0a:28:f5:a0:e3:2d:05:30:7b:bb:
04:84:c3:a2:9e:e1:7c:c6:5a:ee:92:4a:a0:55:27:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:9B:65:A2:0B:46:A6:96:79:FD:F1:42:0C:09:4F:AE:12:BF:0D:35
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/LZtlogtGppZ5_fFCDAlPrhK_DTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.94.0/23
163.5.113.0/24
163.5.116.0/24
163.5.132.0/23
163.5.135.0-163.5.136.255
163.5.173.0/24
163.5.186.0/24
163.5.195.0-163.5.197.255
163.5.235.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
19:90:17:68:88:f4:d0:52:e8:8f:13:9c:0b:46:55:5e:bd:16:
8d:8b:0a:cf:b0:0e:9f:2d:ea:24:79:2a:5e:b4:21:55:1a:89:
b0:77:52:09:4e:5d:00:78:7f:cd:a7:cb:1a:6e:a7:89:bd:3f:
64:57:92:f1:1f:96:be:d6:2e:13:a5:aa:4d:39:66:f7:e2:9d:
ca:b3:3b:16:e7:c0:16:12:ae:09:d1:62:44:51:48:6e:b6:bd:
8d:26:93:b7:b5:9e:01:e5:c5:3c:ea:bf:50:89:0a:28:4b:ef:
eb:db:0b:58:c2:58:0e:c3:45:57:3b:4e:59:f1:ce:3c:bc:1d:
46:52:57:e0:17:63:54:44:2d:f8:d4:3d:f4:5a:3b:2f:f9:51:
11:73:68:c6:31:13:c4:5f:4c:1a:57:c7:86:37:20:fb:fa:e8:
ff:50:27:a6:85:f3:4e:1d:61:17:91:0d:7d:47:ff:09:91:ca:
15:a6:a0:f0:4f:d7:b1:ab:49:8c:1b:ec:14:e9:7b:f5:5b:de:
17:74:20:90:97:f1:15:6d:bb:e9:ba:bc:b3:56:46:bb:af:46:
51:13:8d:60:9a:49:0c:ac:29:58:ad:26:e5:05:8e:6c:f8:7d:
aa:2a:19:66:ec:95:e7:f9:cd:c0:be:17:0d:b2:55:df:9e:ef:
1d:f4:55:34
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAYTNSd4LmJXRF+BGF1B14TEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjAxMTA0NDQwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDliNjVhMjBiNDZhNjk2NzlmZGYxNDIwYzA5NGZhZTEyYmYwZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEKg0q0JD7Up9zlzLC5DG8Gb+r9c
MRj2J5KDCxgmdTlm48C8bxC8ZQOBBUiAXIeuTJ8aTAZlLi3pYtKjqwhGdmmVdZzc
QklZm5uqo/JbnIxDtuWw4TH/Z9/+YOY+qKCls7HVl8o0HY3BB8G02+JscmaNOydR
k0IhhYbspoAVKTZi61q1w4c9JiPWEG3CKae/5qEfjZM1iwb+1mWjuD+hXDPreARU
sn4AF5OhpHEDli3VyWkU2t7jJexFLnGLCqhDV7+PSh2vquKl8D3hHpVfhNR/aa13
bOMwelDfQsv9QC9HmPYTSQoo9aDjLQUwe7sEhMOinuF8xlrukkqgVSeiSQIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFC2bZaILRqaWef3xQgwJT64Svw01MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTFp0bG9ndEdwcFo1X2ZGQ0RBbFByaEtfRFRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSAwQAowUgAwQB
owVeAwQAowVxAwQAowV0AwQBowWEMAwDBACjBYcDBACjBYgDBACjBa0DBACjBbow
DAMEAKMFwwMEAaMFxAMEAKMF6wMEAKMF8TANBgkqhkiG9w0BAQsFAAOCAQEAGZAX
aIj00FLojxOcC0ZVXr0WjYsKz7AOny3qJHkqXrQhVRqJsHdSCU5dAHh/zafLGm6n
ib0/ZFeS8R+WvtYuE6WqTTlm9+KdyrM7FufAFhKuCdFiRFFIbra9jSaTt7WeAeXF
POq/UIkKKEvv69sLWMJYDsNFVztOWfHOPLwdRlJX4BdjVEQt+NQ99Fo7L/lREXNo
xjETxF9MGlfHhjcg+/ro/1AnpoXzTh1hF5ENfUf/CZHKFaag8E/XsatJjBvsFOl7
9VveF3QgkJfxFW276bq8s1ZGu69GURONYJpJDKwpWK0m5QWObPh9qioZZuyV5/nN
wL4XDbJV357vHfRVNA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org