Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MBVzucHpPJVbR04NPkRWVKrtBPA.roa
File: MBVzucHpPJVbR04NPkRWVKrtBPA.roa (raw, json)
Hash identifier: ADDnV3zDQcBxM24UuYs5Am/hGQ89kjK/BTlQWEfDDqI=
Subject key identifier: 30:15:73:B9:C1:E9:3C:95:5B:47:4E:0D:3E:44:56:54:AA:ED:04:F0
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018463032406707F5002AA0609FF392284AF
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MBVzucHpPJVbR04NPkRWVKrtBPA.roa
Signing time: Thu 10 Nov 2022 19:27:40 +0000
ROA not before: Thu 10 Nov 2022 19:27:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:63:03:24:06:70:7f:50:02:aa:06:09:ff:39:22:84:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 10 19:27:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=301573b9c1e93c955b474e0d3e445654aaed04f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:41:45:3c:72:4b:a3:96:ad:38:86:56:91:
31:52:22:77:1e:8b:b0:61:52:72:9f:6c:4a:a0:39:
6a:33:22:63:c9:83:8e:c7:6a:c6:d7:47:1d:4f:4f:
2a:8d:80:36:d4:f4:06:9c:1e:78:d0:be:4e:d1:2f:
9f:96:5d:6b:d5:e6:47:c3:05:f0:25:41:1c:a2:a8:
29:d6:f3:af:c3:60:56:45:32:1b:ff:41:00:3c:30:
cf:a5:0f:b3:da:5b:44:f5:df:f2:77:71:dc:ea:20:
e3:56:b8:5d:72:9a:4e:d8:cd:bc:63:43:93:78:44:
2c:c2:53:36:18:32:46:92:39:5a:0c:c6:b0:7c:f5:
fe:ce:e1:7a:b4:e7:b9:75:c6:d7:f5:9c:ff:58:0c:
01:dc:88:6e:67:73:5a:c4:4b:91:f1:85:c1:fc:45:
e1:53:ff:dd:b7:88:fc:9b:cf:1b:9e:cd:2a:ca:00:
e1:5b:77:39:16:f2:f0:60:18:06:f8:38:0c:62:fc:
7f:6e:1b:b2:13:7c:57:41:67:d0:ab:b2:60:65:5c:
74:4e:d7:20:b1:1d:9d:d7:d8:b4:bc:c4:65:e7:c4:
92:71:f0:0e:0b:61:71:b8:e0:cc:58:40:6e:07:ff:
1f:4d:ce:7a:03:c8:c8:e5:6b:27:30:8e:72:d9:a8:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:15:73:B9:C1:E9:3C:95:5B:47:4E:0D:3E:44:56:54:AA:ED:04:F0
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MBVzucHpPJVbR04NPkRWVKrtBPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.33.0-163.5.34.255
163.5.37.0-163.5.39.255
163.5.91.0/24
163.5.97.0/24
163.5.99.0/24
163.5.114.0/24
163.5.118.0/24
163.5.124.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.179.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:42:a2:6e:08:e7:de:e2:7e:b9:bf:05:92:f4:b8:d3:05:c5:
3a:1c:83:6e:cd:6e:5f:76:05:e1:06:c0:48:e4:0c:3d:09:c7:
50:0a:fa:fd:30:b5:22:59:9b:1c:e2:db:f7:05:59:cf:13:b3:
55:fd:fe:ee:52:4c:4b:91:de:3a:a0:88:d9:ac:19:2c:d0:71:
1b:bb:1c:66:af:76:ba:5e:ed:98:60:e6:0e:0b:b5:f1:ea:6c:
64:ba:46:99:28:01:f6:d0:0e:f6:48:4c:34:c3:cf:c6:d7:f1:
82:8e:e7:99:9f:49:91:90:a6:5f:64:79:9c:47:45:da:92:dd:
be:f4:16:22:c4:fc:14:5a:8b:85:b9:d1:11:be:9f:09:bb:fd:
77:98:b5:3f:9b:68:72:38:e0:c3:3a:8e:4f:00:ca:b1:1d:7c:
e6:a4:aa:e7:25:a8:d9:a6:55:76:b2:0d:1d:ba:4d:06:67:1f:
61:23:84:84:a1:e3:d9:fe:64:4c:2e:21:a1:14:c1:c9:1a:a3:
72:91:be:0f:05:eb:dd:f7:4a:78:08:2f:d7:4d:6b:a1:f1:17:
fb:88:d3:99:ab:51:28:cd:39:59:2b:07:c4:04:f5:f8:6c:c5:
29:5f:61:31:b6:3d:e2:38:8d:7a:df:41:f9:2d:65:2a:2a:d1:
bd:52:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org