Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MlRv-pUrFPvTc_tXccVfNbaytZE.roa
File: MlRv-pUrFPvTc_tXccVfNbaytZE.roa (raw, json)
Hash identifier: a04fmKBaUFFJDXhJwtq6UkfvSTybyE2bY+Ppcy3HseY=
Subject key identifier: 32:54:6F:FA:95:2B:14:FB:D3:73:FB:57:71:C5:5F:35:B6:B2:B5:91
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01854E28E93B01DA127516DAD2CBF199023B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MlRv-pUrFPvTc_tXccVfNbaytZE.roa
Signing time: Mon 26 Dec 2022 11:19:41 +0000
ROA not before: Mon 26 Dec 2022 11:19:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.90.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4e:28:e9:3b:01:da:12:75:16:da:d2:cb:f1:99:02:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 26 11:19:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=32546ffa952b14fbd373fb5771c55f35b6b2b591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e7:28:8f:41:e0:fc:98:20:50:74:96:dd:ce:
43:0d:de:f5:eb:96:33:9d:69:89:9e:03:5c:3c:7e:
dd:95:53:4d:e5:94:70:b8:0c:4d:f6:00:d0:8c:a7:
af:b8:70:91:da:8a:29:f3:3f:5f:25:e1:91:74:61:
99:4d:f7:a2:52:de:d7:f0:ae:07:b2:2a:24:6f:b1:
7c:ab:b1:7c:03:91:81:9f:85:cb:7f:11:8a:41:43:
b2:55:38:29:cd:f6:08:2e:02:a8:58:02:53:3e:66:
57:df:32:f3:60:1c:3e:4e:7e:ca:ae:e0:f9:9f:f9:
92:82:db:76:14:22:fa:2f:89:23:ab:0f:1a:d6:8e:
30:4f:c7:7d:e1:4f:85:8b:e2:6c:7b:78:12:55:db:
93:01:a7:84:40:76:45:55:24:41:7e:9d:57:4d:d7:
28:0d:b4:ae:ac:b1:aa:5d:44:38:74:e0:4d:fb:a4:
7b:66:6a:95:83:18:66:98:a2:21:e9:21:6e:0f:d2:
e0:38:46:b2:e9:a5:11:79:65:8a:90:a4:35:a3:ba:
53:ac:96:0d:59:c0:2e:a7:f9:67:ab:a5:63:38:d6:
7c:eb:a9:59:b0:b2:ba:ee:c3:28:87:b6:ec:4e:66:
27:a5:2b:62:9c:28:8a:c7:fd:d8:4a:29:2f:59:b5:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:54:6F:FA:95:2B:14:FB:D3:73:FB:57:71:C5:5F:35:B6:B2:B5:91
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/MlRv-pUrFPvTc_tXccVfNbaytZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.90.0/24
163.5.140.0/24
163.5.236.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:d8:b9:b9:b8:6d:ec:32:c5:0b:cc:5c:ab:47:b5:93:68:d5:
c1:53:34:8d:d8:f7:35:32:f1:57:76:7b:4a:3a:74:99:9d:c4:
66:df:5f:40:5d:fd:be:17:dd:43:10:7e:eb:f2:4b:ed:64:41:
4e:58:d0:3d:85:61:86:7e:6d:f3:07:51:cb:45:81:80:d5:bc:
67:2e:2e:d1:64:c2:64:5a:b6:e9:d3:2d:12:79:4f:2c:b2:0f:
55:68:38:83:9d:4e:53:52:c1:96:f2:37:b0:29:86:97:b6:53:
b7:4c:84:82:7b:e3:c1:95:ef:e6:7b:cb:05:e1:4b:9e:d0:28:
1a:d3:80:85:5c:d4:22:44:21:da:c1:3d:14:f4:b2:b6:e7:5e:
93:22:1b:7e:d8:aa:d0:e8:24:74:c1:b6:c3:1a:77:b3:c3:ec:
83:fc:ea:4c:e3:8b:6a:9a:66:b3:09:22:1b:92:f3:1e:3a:af:
1a:e3:9d:fd:c8:17:cd:52:94:a4:6c:13:32:73:26:9a:b8:cf:
13:22:d7:6e:09:e1:7c:ad:3f:61:dc:92:7b:02:7a:aa:9f:2e:
2b:89:a8:dc:7a:cd:ec:68:68:a9:dd:09:3e:63:03:db:12:dd:
9c:7a:e9:9c:3e:19:98:15:a1:80:21:39:5d:36:6a:9c:c1:75:
63:93:d4:4c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVOKOk7AdoSdRba0svxmQI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjI2MTExOTQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMjU0NmZmYTk1MmIxNGZiZDM3M2ZiNTc3MWM1NWYzNWI2YjJiNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+coj0Hg/JggUHSW3c5DDd7165Yz
nWmJngNcPH7dlVNN5ZRwuAxN9gDQjKevuHCR2oop8z9fJeGRdGGZTfeiUt7X8K4H
siokb7F8q7F8A5GBn4XLfxGKQUOyVTgpzfYILgKoWAJTPmZX3zLzYBw+Tn7KruD5
n/mSgtt2FCL6L4kjqw8a1o4wT8d94U+Fi+Jse3gSVduTAaeEQHZFVSRBfp1XTdco
DbSurLGqXUQ4dOBN+6R7ZmqVgxhmmKIh6SFuD9LgOEay6aUReWWKkKQ1o7pTrJYN
WcAup/lnq6VjONZ866lZsLK67sMoh7bsTmYnpStinCiKx/3YSikvWbXmXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDJUb/qVKxT703P7V3HFXzW2srWRMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvTWxSdi1wVXJGUHZUY190WGNjVmZOYmF5dFpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAowVaAwQA
owWMAwQAowXsAwQAowX3MA0GCSqGSIb3DQEBCwUAA4IBAQAO2Lm5uG3sMsULzFyr
R7WTaNXBUzSN2Pc1MvFXdntKOnSZncRm319AXf2+F91DEH7r8kvtZEFOWNA9hWGG
fm3zB1HLRYGA1bxnLi7RZMJkWrbp0y0SeU8ssg9VaDiDnU5TUsGW8jewKYaXtlO3
TISCe+PBle/me8sF4Uue0Cga04CFXNQiRCHawT0U9LK2516TIht+2KrQ6CR0wbbD
Gnezw+yD/OpM44tqmmazCSIbkvMeOq8a4539yBfNUpSkbBMycyaauM8TItduCeF8
rT9h3JJ7Anqqny4riajces3saGip3Qk+YwPbEt2ceumcPhmYFaGAITldNmqcwXVj
k9RM
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org