Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SxsX7IlvlD_vZINK6GRqt7QTgXo.roa
File: SxsX7IlvlD_vZINK6GRqt7QTgXo.roa (raw, json)
Hash identifier: qK+AHsZCfUdF0bDD3MnRLozJtfwrFnfZ75mtzIGXuq0=
Subject key identifier: 4B:1B:17:EC:89:6F:94:3F:EF:64:83:4A:E8:64:6A:B7:B4:13:81:7A
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01839DF3DF4D7B0D17877475B269E27FF8C6
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SxsX7IlvlD_vZINK6GRqt7QTgXo.roa
Signing time: Mon 03 Oct 2022 13:05:48 +0000
ROA not before: Mon 03 Oct 2022 13:05:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:f3:df:4d:7b:0d:17:87:74:75:b2:69:e2:7f:f8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 3 13:05:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b1b17ec896f943fef64834ae8646ab7b413817a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d5:82:5e:6b:2e:23:f2:c1:c6:11:75:d4:a8:
fd:59:81:e0:db:37:00:63:54:2e:24:d3:30:c9:f9:
b1:c1:39:24:e3:bb:a8:14:69:71:4e:a3:62:66:70:
88:81:a0:86:9d:63:90:50:58:ed:7b:0b:98:1f:e6:
82:e0:5c:24:0a:fd:78:fa:f4:5d:45:54:4f:ed:24:
b8:6f:d1:cf:38:8c:fe:ce:ff:a6:08:b1:cd:0a:84:
4b:36:e8:d9:51:ce:8c:2b:df:34:01:40:74:73:bf:
99:80:3c:e4:d6:64:80:58:64:3c:4d:c3:ac:e4:a0:
fa:cf:8f:dd:b4:3d:b2:cc:d4:2d:91:43:ce:10:cc:
ef:c1:0a:55:11:f6:68:75:f9:a0:55:1a:d4:41:57:
7a:78:6e:58:61:6c:e1:e6:cd:b0:9d:00:aa:55:08:
64:67:8b:59:71:53:f8:ed:f9:cc:68:21:3c:86:cf:
34:1f:2d:62:e1:03:3d:9c:e6:42:0c:7e:8f:5e:5c:
86:2a:ca:f9:d8:24:4d:48:9d:98:29:c9:90:95:51:
d8:8d:02:a6:56:df:06:48:4a:22:20:6a:1b:54:fe:
84:05:eb:8a:43:dd:ad:d6:71:1e:33:2e:be:9f:68:
bd:b6:45:09:41:5d:78:c4:89:ea:9d:40:93:12:7b:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1B:17:EC:89:6F:94:3F:EF:64:83:4A:E8:64:6A:B7:B4:13:81:7A
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/SxsX7IlvlD_vZINK6GRqt7QTgXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0-163.5.39.255
163.5.91.0-163.5.99.255
163.5.110.0-163.5.189.255
163.5.191.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
70:e7:81:f7:8f:bc:88:bf:88:2b:63:64:ce:33:88:ae:f7:47:
a6:f4:df:b4:5a:0b:05:18:84:a0:bb:ff:e6:60:a6:12:cf:c2:
18:bb:8c:e8:7a:1b:8c:2c:8e:f8:23:8e:c0:25:2f:29:74:9e:
ae:5e:80:92:2c:1b:71:ac:16:48:ac:78:64:8f:0e:dc:39:fa:
20:d3:fe:4a:6f:a4:2f:d2:8c:af:d6:56:b8:56:c9:0e:de:13:
02:db:18:b5:e0:d8:98:26:15:8e:44:d7:82:69:29:f5:67:cc:
db:6b:6b:25:1d:4c:54:d0:93:aa:0d:c2:75:3a:01:9c:52:37:
a3:14:97:b2:3e:0e:c9:1f:5d:4b:97:e5:e3:1f:d5:07:7a:88:
27:73:2f:fc:b7:6f:79:10:56:55:1c:80:19:17:a8:fc:2f:55:
36:5e:0d:ca:ff:1e:c7:1f:1b:3a:6e:b9:7c:06:99:d3:74:a8:
7b:8f:7e:ab:7a:68:64:5c:dc:4c:ee:59:2c:49:78:07:9e:a3:
39:c7:92:f6:7f:20:ff:e4:fc:35:dc:b1:41:f1:44:a1:e7:ab:
aa:91:65:52:9e:cc:47:06:a4:8b:13:af:af:9a:21:fe:1b:4b:
3f:c7:34:e1:a4:70:c9:e0:ec:10:c1:96:75:2f:25:56:32:11:
c6:29:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org