Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sztnoa7C0GH1vzbr4w-SB37NXWc.roa
File: Sztnoa7C0GH1vzbr4w-SB37NXWc.roa (raw, json)
Hash identifier: NDyf4Yk4wO7tOROW/VZC5HtoZ/p0x+tFa3niVeafnCY=
Subject key identifier: 4B:3B:67:A1:AE:C2:D0:61:F5:BF:36:EB:E3:0F:92:07:7E:CD:5D:67
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184D29A91AFD5DBE7A0C325CE36D03F948C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sztnoa7C0GH1vzbr4w-SB37NXWc.roa
Signing time: Fri 02 Dec 2022 11:30:55 +0000
ROA not before: Fri 02 Dec 2022 11:30:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 163.5.187.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:9a:91:af:d5:db:e7:a0:c3:25:ce:36:d0:3f:94:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 2 11:30:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b3b67a1aec2d061f5bf36ebe30f92077ecd5d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:d3:29:c2:12:a6:fe:48:93:c8:3a:da:8a:
97:e6:04:16:b4:f0:cd:12:44:88:dc:de:c0:86:75:
4d:f3:2c:36:34:57:7d:df:a2:45:0f:6f:2d:3d:ca:
20:d0:2a:52:22:34:35:5f:96:34:36:be:f3:18:b8:
2a:92:76:95:e3:71:54:65:c3:18:f6:8a:b5:eb:54:
80:8a:63:ab:00:35:da:91:38:cf:c3:86:2d:a0:62:
8a:ca:eb:bc:97:a0:5a:39:af:59:be:18:9c:99:14:
04:b8:68:ea:bf:49:be:c8:45:ee:16:97:9c:c4:f3:
cb:a3:36:d1:20:fa:f6:22:0c:2f:2c:a1:06:6e:fe:
1a:27:c4:e8:b1:a2:e5:82:0d:ed:6a:b2:16:71:d3:
31:05:c2:79:a9:c5:d8:d0:9b:e9:de:5c:5e:ee:5f:
54:2d:87:fd:1c:fd:b9:93:8b:c3:22:ee:7f:97:89:
c0:4c:18:dd:0e:6b:e5:e7:be:96:97:b0:e5:1c:33:
31:48:8d:fc:b7:65:ef:2f:29:0a:1e:44:a1:d1:5b:
f7:9f:4d:9d:9b:45:f9:f6:fc:1c:70:c9:b1:5e:36:
16:74:c4:c6:a0:64:90:36:62:14:3f:f5:a0:59:0b:
ce:55:71:e2:3d:17:a1:80:c6:3f:df:8b:9c:de:a5:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3B:67:A1:AE:C2:D0:61:F5:BF:36:EB:E3:0F:92:07:7E:CD:5D:67
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Sztnoa7C0GH1vzbr4w-SB37NXWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.112.0/24
163.5.130.0/24
163.5.134.0/24
163.5.153.0/24
163.5.187.0/24
163.5.192.0/24
163.5.220.0/24
163.5.237.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:d7:ac:34:77:b0:33:8b:c4:dc:0e:10:6b:6f:cb:68:3c:0e:
bc:d4:71:fc:9d:be:ec:fc:2d:b2:80:71:f3:37:3c:e2:82:4d:
e8:bc:87:79:59:73:66:0c:e3:51:e0:c3:4f:4d:6c:ab:2b:43:
ea:1f:63:6d:cb:4a:20:f7:f9:e4:af:1c:fc:28:a1:b8:40:a4:
4f:b1:35:79:00:fb:4a:d2:d4:a9:e4:d2:57:aa:78:cc:2d:88:
9a:39:cd:39:fd:72:88:82:d1:f5:d5:80:3f:9e:34:53:65:69:
62:bd:3a:fd:07:ca:b0:58:25:db:87:8c:ff:82:c0:22:f0:a8:
39:9f:30:90:a0:54:f0:9f:87:36:aa:a4:d6:7d:91:e5:d7:c7:
5f:45:9d:3e:65:91:48:62:fd:80:26:e6:6e:f9:f1:08:65:34:
b0:7f:3d:82:19:25:22:58:2e:2f:59:db:e2:e5:93:3c:b6:79:
f7:80:9c:8d:c8:7c:a5:34:b1:85:6d:89:6b:74:a5:23:9e:e6:
e9:0f:22:c9:e8:94:d6:74:04:20:b8:fa:f3:f3:16:5c:3c:7f:
1e:2e:3c:43:ae:cf:43:94:3e:40:f2:6c:37:eb:24:b3:75:89:
cf:ef:68:b8:89:d4:0a:ed:ba:5b:59:60:3e:f6:d9:c9:84:78:
fb:23:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org