Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SwH-U3xoO_xcxqR14yncg4G4O-g.roa
File: SwH-U3xoO_xcxqR14yncg4G4O-g.roa (raw, json)
Hash identifier: q3VP2ST7DkiXe3PAcx0Y5MUk7cLNd5rspKaFAm0jjRw=
Subject key identifier: 4B:01:FE:53:7C:68:3B:FC:5C:C6:A4:75:E3:29:DC:83:81:B8:3B:E8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184F78CF43224D400093F3CED2E38C4CD4F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SwH-U3xoO_xcxqR14yncg4G4O-g.roa
Signing time: Fri 09 Dec 2022 15:42:00 +0000
ROA not before: Fri 09 Dec 2022 15:42:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f7:8c:f4:32:24:d4:00:09:3f:3c:ed:2e:38:c4:cd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 9 15:42:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b01fe537c683bfc5cc6a475e329dc8381b83be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3d:df:00:4c:15:9c:58:6f:b6:d9:15:c4:16:
0a:37:c9:f0:65:6b:2f:0f:c4:0b:9b:c2:c2:d1:ab:
80:17:98:03:eb:06:e6:7f:cc:77:9d:00:5a:e2:6d:
c9:df:07:f1:0c:bf:27:47:4d:13:2e:3d:c3:63:63:
76:f3:3e:fd:df:b0:68:f4:e2:e7:ca:5f:7c:a2:25:
93:26:b4:c3:59:b0:20:ee:14:7a:28:74:2c:b3:9a:
14:c7:8f:60:b1:7c:68:61:bc:91:08:64:49:70:53:
c7:33:8c:2e:04:bd:ad:96:f3:1d:fc:dc:f6:4a:18:
de:c9:4a:7b:35:8e:89:9c:4e:a8:bb:fd:f5:35:57:
ef:16:2e:64:b0:d9:ea:a8:1b:0a:42:05:2b:61:3e:
2e:88:9e:3c:5f:32:de:f4:68:6c:61:93:24:df:78:
03:31:c6:fd:b0:a1:d1:c5:bb:63:b5:5e:06:f4:2b:
0a:dc:d3:62:56:ee:97:fc:bf:8f:10:a1:41:47:b3:
fa:2e:7e:f6:b4:f7:37:73:1a:85:61:8e:34:10:df:
85:35:5c:ff:dc:b2:1e:e6:2f:f4:d2:82:0d:8c:6d:
9b:81:c4:59:c7:66:fe:78:9b:49:39:39:4e:ed:de:
f3:62:19:8d:f3:28:87:63:ec:93:03:7b:e0:be:d4:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:01:FE:53:7C:68:3B:FC:5C:C6:A4:75:E3:29:DC:83:81:B8:3B:E8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SwH-U3xoO_xcxqR14yncg4G4O-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.127.0/24
163.5.138.0/24
163.5.161.0/24
163.5.166.0/24
163.5.202.0/24
163.5.210.0/24
163.5.222.0/24
163.5.226.0/23
163.5.230.0/24
163.5.239.0-163.5.241.255
163.5.244.0/24
163.5.246.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d3:56:b5:7d:94:4d:89:da:cc:b8:11:22:3e:e6:73:bf:c9:
1f:47:f4:1c:b4:90:3a:03:d9:68:2f:af:9a:5b:41:3e:5f:a5:
5d:86:8f:98:2e:d6:a6:2a:bb:b8:63:5a:9d:33:e2:75:4e:0f:
51:16:60:88:02:70:0b:fb:82:7b:7e:c9:01:0e:47:1f:16:8e:
e7:81:d7:0e:a0:6d:b8:fe:70:4c:ea:b8:cc:20:76:82:f6:70:
c5:7b:0d:80:48:c2:19:fd:88:dc:5f:ba:ca:0a:d4:9d:e8:1f:
5a:7c:ca:cd:df:c1:70:9b:db:81:46:24:3e:57:f9:8e:8d:2e:
00:c8:ed:b1:fc:57:e5:df:d6:de:8e:c0:20:2c:a8:8a:3c:22:
30:45:18:7c:3a:b1:53:b7:a2:e2:df:24:c3:a6:1e:7d:6b:47:
d8:14:ca:6c:a6:63:fb:d3:40:11:15:f8:b2:66:22:12:6d:4a:
48:34:66:e8:5c:29:8e:16:c8:62:b5:ed:80:a3:44:6b:07:a8:
20:5d:8f:42:f1:e3:ae:80:64:f3:9e:9d:60:5b:30:14:5f:a4:
26:90:c8:6b:34:af:fa:53:54:6e:dd:ea:33:9a:9a:ac:4c:ae:
c3:74:41:1b:7a:9e:92:a1:ad:d0:02:e5:e1:10:f0:9c:45:97:
e3:20:cc:44
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgISAYT3jPQyJNQACT887S44xM1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjA5MTU0MjAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjAxZmU1MzdjNjgzYmZjNWNjNmE0NzVlMzI5ZGM4MzgxYjgzYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz3fAEwVnFhvttkVxBYKN8nwZWsv
D8QLm8LC0auAF5gD6wbmf8x3nQBa4m3J3wfxDL8nR00TLj3DY2N28z7937Bo9OLn
yl98oiWTJrTDWbAg7hR6KHQss5oUx49gsXxoYbyRCGRJcFPHM4wuBL2tlvMd/Nz2
ShjeyUp7NY6JnE6ou/31NVfvFi5ksNnqqBsKQgUrYT4uiJ48XzLe9GhsYZMk33gD
Mcb9sKHRxbtjtV4G9CsK3NNiVu6X/L+PEKFBR7P6Ln72tPc3cxqFYY40EN+FNVz/
3LIe5i/00oINjG2bgcRZx2b+eJtJOTlO7d7zYhmN8yiHY+yTA3vgvtShaQIDAQAB
o4ICXzCCAlswHQYDVR0OBBYEFEsB/lN8aDv8XMakdeMp3IOBuDvoMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvU3dILVUzeG9PX3hjeHFSMTR5bmNnNEc0Ty1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAowUjAwQA
owV/AwQAowWKAwQAowWhAwQAowWmAwQAowXKAwQAowXSAwQAowXeAwQBowXiAwQA
owXmMAwDBACjBe8DBAGjBfADBACjBfQDBACjBfYDBACjBfgwDQYJKoZIhvcNAQEL
BQADggEBAInTVrV9lE2J2sy4ESI+5nO/yR9H9By0kDoD2Wgvr5pbQT5fpV2Gj5gu
1qYqu7hjWp0z4nVOD1EWYIgCcAv7gnt+yQEORx8WjueB1w6gbbj+cEzquMwgdoL2
cMV7DYBIwhn9iNxfusoK1J3oH1p8ys3fwXCb24FGJD5X+Y6NLgDI7bH8V+Xf1t6O
wCAsqIo8IjBFGHw6sVO3ouLfJMOmHn1rR9gUymymY/vTQBEV+LJmIhJtSkg0Zuhc
KY4WyGK17YCjRGsHqCBdj0Lx466AZPOenWBbMBRfpCaQyGs0r/pTVG7d6jOamqxM
rsN0QRt6npKhrdAC5eEQ8JxFl+MgzEQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org