Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SGlqmnrZt_-fmSpdkDqH0vpuNfM.roa
File: SGlqmnrZt_-fmSpdkDqH0vpuNfM.roa (raw, json)
Hash identifier: YuxOg/l6j/EDl2SK0jn1ifsBUF9k9h35O1OUTNmogdg=
Subject key identifier: 48:69:6A:9A:7A:D9:B7:FF:9F:99:2A:5D:90:3A:87:D2:FA:6E:35:F3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184335DB7EA258142C288890F48CFD40B3C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SGlqmnrZt_-fmSpdkDqH0vpuNfM.roa
Signing time: Tue 01 Nov 2022 13:24:50 +0000
ROA not before: Tue 01 Nov 2022 13:24:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56339
IP address blocks: 163.5.2.0/24 maxlen: 24
163.5.10.0/24 maxlen: 24
163.5.11.0/24 maxlen: 24
163.5.5.0/24 maxlen: 24
163.5.68.0/24 maxlen: 24
163.5.69.0/24 maxlen: 24
163.5.65.0/24 maxlen: 24
163.5.73.0/24 maxlen: 24
163.5.82.0/24 maxlen: 24
163.5.80.0/24 maxlen: 24
163.5.85.0/24 maxlen: 24
163.5.81.0/24 maxlen: 24
163.5.14.0/24 maxlen: 24
163.5.12.0/24 maxlen: 24
163.5.13.0/24 maxlen: 24
163.5.20.0/24 maxlen: 24
163.5.23.0/24 maxlen: 24
163.5.40.0/24 maxlen: 24
163.5.42.0/24 maxlen: 24
163.5.44.0/24 maxlen: 24
163.5.41.0/24 maxlen: 24
163.5.43.0/24 maxlen: 24
163.5.48.0/24 maxlen: 24
163.5.50.0/24 maxlen: 24
163.5.46.0/24 maxlen: 24
163.5.49.0/24 maxlen: 24
163.5.51.0/24 maxlen: 24
163.5.45.0/24 maxlen: 24
163.5.47.0/24 maxlen: 24
163.5.54.0/24 maxlen: 24
163.5.56.0/24 maxlen: 24
163.5.52.0/24 maxlen: 24
163.5.55.0/24 maxlen: 24
163.5.57.0/24 maxlen: 24
163.5.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:33:5d:b7:ea:25:81:42:c2:88:89:0f:48:cf:d4:0b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 1 13:24:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48696a9a7ad9b7ff9f992a5d903a87d2fa6e35f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:20:7f:63:eb:b0:86:11:fd:2d:63:56:5e:
ef:ac:93:55:ef:06:e4:39:02:55:c0:3e:0e:9f:f2:
06:c8:c5:c1:03:86:55:82:bd:e1:45:f0:96:27:69:
42:a7:06:e5:0a:5f:0c:85:2c:4f:37:46:98:53:e1:
01:8d:1a:45:9b:97:cb:1b:3f:f6:76:9e:55:d5:d3:
58:a4:e2:e8:bb:41:a2:1e:34:22:57:fc:bd:f1:d9:
b2:48:50:0a:9b:fe:68:bf:39:ec:84:78:3d:66:8a:
46:64:41:aa:44:51:36:39:a6:28:10:2e:49:b4:bf:
5a:15:09:2f:29:ae:ff:60:b9:20:06:58:e3:3e:05:
7f:2d:c9:a1:a3:67:be:97:5d:ea:e9:78:93:d3:6f:
01:cb:17:b7:ea:1f:38:2f:82:12:25:57:a2:a3:68:
9a:f2:d1:25:9a:43:ef:90:b6:1b:ba:23:22:fd:54:
d3:37:fb:7e:91:5a:10:50:16:7b:7b:56:4c:25:df:
48:c4:9c:09:60:ae:c7:99:59:df:3a:04:6e:09:b9:
f0:24:f1:bd:fa:37:7e:00:8f:4e:ce:c1:d2:ef:20:
e6:1e:ae:c6:63:51:25:84:2b:7d:46:db:5f:4e:b8:
92:df:6e:f3:f6:2b:5f:7f:5a:55:c6:99:25:93:24:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:69:6A:9A:7A:D9:B7:FF:9F:99:2A:5D:90:3A:87:D2:FA:6E:35:F3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SGlqmnrZt_-fmSpdkDqH0vpuNfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.2.0/24
163.5.5.0/24
163.5.10.0-163.5.14.255
163.5.20.0/24
163.5.23.0/24
163.5.40.0-163.5.57.255
163.5.65.0/24
163.5.68.0/23
163.5.73.0/24
163.5.80.0-163.5.82.255
163.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:27:9d:e7:00:14:43:5d:c6:da:55:d2:98:3a:7e:26:47:4f:
3a:09:1c:6e:5a:61:96:91:f9:8b:74:75:db:55:18:b2:92:e0:
e6:98:91:34:c7:f8:c1:b5:f5:a4:73:53:e4:99:b0:b4:89:aa:
3d:4c:02:60:ec:8c:61:ca:b8:bd:67:6e:bf:02:76:aa:1c:fd:
c6:7f:75:d6:49:65:a8:ae:d8:49:32:8f:6c:e9:fc:04:4a:ff:
28:9e:59:fe:48:4c:10:6f:6d:a1:37:d9:93:89:f5:c3:9d:af:
0d:92:09:02:ef:02:66:12:a4:07:a9:69:0a:80:99:4e:4e:07:
ad:29:0c:98:2d:ac:36:9d:e0:56:03:bc:26:bd:12:61:b9:07:
65:75:af:92:b5:a7:9d:85:c2:98:b5:ea:79:1a:62:4a:22:6b:
a9:81:49:cf:c0:39:c4:9d:16:90:ef:79:19:60:2f:01:d4:25:
dc:52:eb:35:6e:c1:57:07:f5:c3:68:b2:d8:0e:de:58:0e:1a:
54:69:a2:f8:61:57:93:3a:43:a4:0c:80:65:e9:74:a0:5c:ae:
6a:bb:96:01:46:c8:90:d8:f6:3c:5b:b2:91:8f:fe:fc:4a:a8:
71:95:2d:23:78:93:8c:80:c8:10:f9:cc:8b:90:21:c6:3b:97:
1e:33:4f:9a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAYQzXbfqJYFCwoiJD0jP1As8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMTAxMTMyNDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODY5NmE5YTdhZDliN2ZmOWY5OTJhNWQ5MDNhODdkMmZhNmUzNWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4Ugf2PrsIYR/S1jVl7vrJNV7wbk
OQJVwD4On/IGyMXBA4ZVgr3hRfCWJ2lCpwblCl8MhSxPN0aYU+EBjRpFm5fLGz/2
dp5V1dNYpOLou0GiHjQiV/y98dmySFAKm/5ovznshHg9ZopGZEGqRFE2OaYoEC5J
tL9aFQkvKa7/YLkgBljjPgV/Lcmho2e+l13q6XiT028Byxe36h84L4ISJVeio2ia
8tElmkPvkLYbuiMi/VTTN/t+kVoQUBZ7e1ZMJd9IxJwJYK7HmVnfOgRuCbnwJPG9
+jd+AI9OzsHS7yDmHq7GY1ElhCt9RttfTriS327z9itff1pVxpklkySzIQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFEhpapp62bf/n5kqXZA6h9L6bjXzMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvU0dscW1uclp0Xy1mbVNwZGtEcUgwdnB1TmZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAowUCAwQA
owUFMAwDBAGjBQoDBACjBQ4DBACjBRQDBACjBRcwDAMEA6MFKAMEAaMFOAMEAKMF
QQMEAaMFRAMEAKMFSTAMAwQEowVQAwQAowVSAwQAowVVMA0GCSqGSIb3DQEBCwUA
A4IBAQBvJ53nABRDXcbaVdKYOn4mR086CRxuWmGWkfmLdHXbVRiykuDmmJE0x/jB
tfWkc1PkmbC0iao9TAJg7Ixhyri9Z26/AnaqHP3Gf3XWSWWorthJMo9s6fwESv8o
nln+SEwQb22hN9mTifXDna8NkgkC7wJmEqQHqWkKgJlOTgetKQyYLaw2neBWA7wm
vRJhuQdlda+StaedhcKYtep5GmJKImupgUnPwDnEnRaQ73kZYC8B1CXcUus1bsFX
B/XDaLLYDt5YDhpUaaL4YVeTOkOkDIBl6XSgXK5qu5YBRsiQ2PY8W7KRj/78Sqhx
lS0jeJOMgMgQ+cyLkCHGO5ceM0+a
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org