Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PWkHJ2ImIUBy6RpH3ISToimCaFI.roa
File: PWkHJ2ImIUBy6RpH3ISToimCaFI.roa (raw, json)
Hash identifier: jEYUtJ/prSesS7ybtbWN0rS2Y1orFLwkJao9R6I+tAY=
Subject key identifier: 3D:69:07:27:62:26:21:40:72:E9:1A:47:DC:84:93:A2:29:82:68:52
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018382EE262F1223A6B982108B041826CD99
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PWkHJ2ImIUBy6RpH3ISToimCaFI.roa
Signing time: Wed 28 Sep 2022 07:09:48 +0000
ROA not before: Wed 28 Sep 2022 07:09:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:82:ee:26:2f:12:23:a6:b9:82:10:8b:04:18:26:cd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 28 07:09:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d6907276226214072e91a47dc8493a229826852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:e2:14:cc:e7:31:08:4b:c5:ce:5f:5c:19:
2e:ba:12:28:65:13:7e:81:40:08:da:53:00:87:f3:
7f:14:2d:3d:3a:2a:73:44:f8:bd:9d:41:41:ca:e9:
40:ec:8e:6d:8a:81:e4:59:68:a5:94:cc:74:88:08:
e5:73:43:9f:52:b7:fe:51:f5:f7:53:cd:37:a2:20:
87:b1:1f:35:a0:54:b5:da:80:52:e1:0f:76:7c:f7:
ae:31:79:ad:46:26:e8:80:2a:cd:ed:71:7f:d5:8b:
0b:28:1b:05:b2:c2:99:0c:87:e5:47:ae:8b:15:1f:
fa:b4:8d:7f:4d:b9:9a:1e:a9:c8:f6:db:61:64:64:
53:39:18:66:f7:2a:08:16:2c:f0:12:7c:ec:0b:63:
90:20:19:e6:48:e5:87:bb:e4:65:e1:0c:d3:c7:44:
ea:76:6a:78:37:ba:68:1b:3e:f7:38:8a:4d:42:4f:
0d:59:d6:74:ed:17:3e:55:8c:57:eb:35:04:61:9b:
d0:a1:cf:8b:3a:7c:c1:2f:a9:93:fc:cb:53:93:9b:
69:59:66:a5:5e:5d:b1:09:a7:2b:1a:0c:df:ea:88:
1b:47:2e:17:6a:26:a8:84:91:8b:14:4c:a6:3c:29:
67:45:f4:58:a5:6c:88:9f:f5:2f:bc:c7:10:12:7d:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:07:27:62:26:21:40:72:E9:1A:47:DC:84:93:A2:29:82:68:52
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/PWkHJ2ImIUBy6RpH3ISToimCaFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.91.0/24
163.5.97.0/24
163.5.99.0/24
163.5.118.0/24
163.5.124.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.226.0/23
163.5.246.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:33:f5:6c:46:9c:4c:5a:63:dc:ca:11:aa:f5:b0:40:78:fe:
79:c1:91:63:99:95:6c:3c:6d:95:8b:8c:d1:86:da:13:77:5b:
d2:b5:af:f3:2d:d6:c7:c4:7b:00:a3:35:fe:3e:06:a4:dd:0d:
fa:f6:7a:b3:b0:37:97:73:7f:e6:67:33:7a:0e:67:50:67:c8:
d1:23:1a:84:8e:e4:f4:3c:f8:97:77:5a:a1:8f:8c:a3:51:02:
03:55:1f:3a:e1:fd:00:b8:31:fa:81:ae:4d:ef:17:5c:7d:26:
54:ee:c3:e8:2a:5a:ab:00:b1:48:c5:eb:e0:00:b9:7e:f6:f2:
19:ee:50:ff:2d:52:66:60:2a:27:42:62:34:61:a2:48:1f:0b:
47:12:50:47:74:a8:fb:14:09:19:9f:be:8b:66:2c:79:7c:fa:
00:f1:13:8d:89:01:5c:08:9f:e2:0c:76:a4:ca:ad:a0:76:a1:
f8:9f:27:ae:36:97:03:75:60:98:c2:b5:1f:fa:07:a4:4e:70:
f5:45:dc:39:3d:3e:b3:8b:55:fa:be:98:ce:73:4a:9a:7a:e4:
14:16:11:38:63:5c:19:00:18:96:05:8e:f4:da:c3:9e:46:6d:
6e:c0:e9:13:10:62:12:b3:00:73:d7:a1:b0:06:03:c2:b5:21:
a9:6b:bc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:20 2023 by rpki-client on console-fra.rpki-client.org