Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T1chyGs0poCVoA4Bn_wiKhOBzRg.roa
File: T1chyGs0poCVoA4Bn_wiKhOBzRg.roa (raw, json)
Hash identifier: iFgJMQt0K2Q+teK0D3qXQqI5ATDUxLG4oAWYTbbJd4I=
Subject key identifier: 4F:57:21:C8:6B:34:A6:80:95:A0:0E:01:9F:FC:22:2A:13:81:CD:18
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01829D561A5C6FC3F9FE0CF6F87279F60B00
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T1chyGs0poCVoA4Bn_wiKhOBzRg.roa
Signing time: Sun 14 Aug 2022 17:10:41 +0000
ROA not before: Sun 14 Aug 2022 17:10:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:56:1a:5c:6f:c3:f9:fe:0c:f6:f8:72:79:f6:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 14 17:10:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f5721c86b34a68095a00e019ffc222a1381cd18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:88:58:4c:1a:14:1e:89:d0:1d:4a:59:ba:
fc:68:96:04:fd:d4:58:5e:cc:df:c7:99:be:6e:ca:
ad:e2:fc:9a:b8:5f:a4:81:d5:ae:0e:85:67:cd:11:
8b:9c:24:9e:52:a7:34:28:30:07:94:ce:ed:7e:f2:
08:5a:e9:83:25:81:c8:34:56:15:04:ec:04:97:6e:
7f:af:19:a5:d5:f7:24:d2:5d:a9:80:53:d8:a7:08:
1c:9a:26:6e:47:31:81:2a:e6:d4:45:bc:3e:52:4f:
be:33:26:86:9f:a5:9d:33:c4:ef:1c:52:db:be:d1:
bd:f6:48:6c:0b:b7:b3:40:81:67:7e:c3:59:58:3b:
f6:b3:35:1e:b7:38:d8:f1:7d:5c:53:01:49:c3:60:
21:21:d7:56:dc:f8:49:ac:d0:ec:0e:46:0d:c7:00:
f5:0f:c1:ef:0a:af:c1:6f:c7:ca:87:10:71:16:87:
63:4a:b9:38:0f:1b:70:05:ad:ae:6b:ff:19:5e:78:
91:44:cf:e7:61:49:f0:a2:47:0c:78:e2:50:0c:fa:
66:11:d1:91:53:a3:c4:6e:f5:3a:6a:3c:e6:3b:d8:
54:a0:b5:40:1f:10:68:d7:c2:10:3c:e7:5c:b7:ec:
e7:31:cf:67:61:3e:cd:35:07:1c:11:86:3a:06:a6:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:57:21:C8:6B:34:A6:80:95:A0:0E:01:9F:FC:22:2A:13:81:CD:18
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/T1chyGs0poCVoA4Bn_wiKhOBzRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.127.0-163.5.189.255
163.5.191.0-163.5.239.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4a:bb:72:cd:ef:91:b0:c1:93:21:2f:e1:a7:06:e1:94:b5:
1b:6d:03:9a:e8:d9:3a:03:bf:55:f5:e7:74:80:cc:b5:9a:4e:
40:a4:9b:c8:64:55:f5:64:cd:8c:58:d6:45:15:c9:c1:68:92:
8e:ec:26:26:ee:e6:2d:49:93:46:5d:e2:44:5c:ba:d2:75:52:
ef:15:c7:a5:79:29:b9:87:20:3b:0b:99:39:3c:8e:07:3b:88:
e4:2c:ff:d1:17:60:2b:f2:c6:6a:44:a1:00:74:87:b3:cc:c0:
10:a2:6a:fd:59:43:8f:36:b3:36:51:d4:61:30:ee:5a:38:cb:
4a:c3:8b:f5:af:4c:fb:be:a2:d4:d8:9a:99:ab:e8:2a:10:1c:
d2:62:fa:31:9d:39:27:04:09:c6:44:14:0f:32:a9:98:94:15:
c3:8c:25:c1:c0:7d:9f:7b:47:9b:85:da:c4:6e:45:3a:f0:11:
75:0f:33:61:f6:cc:05:7e:c8:60:51:2b:05:29:d6:44:cb:72:
a8:9c:c0:40:13:9b:50:a6:b2:b4:bd:5f:98:84:f5:b4:c0:f1:
2e:70:4c:0a:36:3b:32:77:e6:f2:bc:f8:b6:84:60:bd:fe:2b:
c1:7c:c4:f8:26:6c:65:83:a3:c4:32:fb:d6:73:f2:68:03:c1:
37:f5:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org