Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TwOV7BgokoydUQV0lLpDgGRBx88.roa
File: TwOV7BgokoydUQV0lLpDgGRBx88.roa (raw, json)
Hash identifier: Ns+3b0wkdM790BD1UmN+ufzORoox+/SBP+SBWDpqbng=
Subject key identifier: 4F:03:95:EC:18:28:92:8C:9D:51:05:74:94:BA:43:80:64:41:C7:CF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018418C704C978A999731D9EBEAC0A5F0192
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TwOV7BgokoydUQV0lLpDgGRBx88.roa
Signing time: Thu 27 Oct 2022 09:30:06 +0000
ROA not before: Thu 27 Oct 2022 09:30:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 163.5.177.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:c7:04:c9:78:a9:99:73:1d:9e:be:ac:0a:5f:01:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 27 09:30:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f0395ec1828928c9d51057494ba43806441c7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4c:24:ae:68:e4:73:b2:40:43:e9:b0:92:fd:
ad:84:08:9c:be:32:7b:96:47:f3:79:36:be:a7:b5:
eb:fa:a7:a2:1f:0b:c5:0e:ec:d8:3f:6a:c7:a5:18:
c3:d6:de:03:c8:5f:ed:93:18:0d:8c:38:aa:62:9c:
81:54:5b:93:2b:54:51:3a:d6:e4:39:2e:e6:01:29:
10:3e:d2:c8:b4:e4:8d:62:48:f6:10:d0:58:01:07:
22:7b:51:1d:3b:4d:1c:ac:42:d7:ce:56:f7:27:2a:
b9:f2:33:0c:47:29:9b:57:67:d5:aa:99:e1:f2:b1:
1f:c6:63:15:8c:e7:a0:95:33:b6:72:ba:86:fd:5a:
7d:dc:03:82:5b:c2:e8:54:55:67:3b:d1:9d:33:41:
48:c5:3f:dc:ca:ed:8b:6d:9c:c7:cb:53:27:3a:4c:
77:54:d4:d5:b5:51:9b:1c:60:c2:f3:9a:03:da:c2:
a8:91:59:53:a9:bc:61:e8:90:b8:e5:10:72:dd:a9:
5d:df:52:20:df:b7:71:a1:bd:ad:30:6c:a4:0c:72:
2e:8b:f5:5a:34:dd:2d:1e:24:98:c5:6a:f8:10:6b:
ee:19:01:8b:31:43:b4:97:e6:8b:75:a2:bb:7f:ad:
04:1f:76:cb:98:93:cb:50:2f:cf:51:4a:4a:51:bc:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:03:95:EC:18:28:92:8C:9D:51:05:74:94:BA:43:80:64:41:C7:CF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/TwOV7BgokoydUQV0lLpDgGRBx88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.177.0/24
163.5.251.0/24
Signature Algorithm: sha256WithRSAEncryption
51:80:d3:0f:f9:81:fa:2f:53:d8:dc:8e:21:19:aa:dc:f4:18:
84:86:5c:85:d9:00:30:dc:00:8d:00:cd:a1:c0:a3:94:af:db:
11:e5:24:c8:b7:d0:1f:89:63:a1:52:79:aa:d0:5f:6e:05:62:
5a:ca:d5:91:ad:07:e3:20:e1:e3:0e:83:a3:72:8b:de:f3:21:
1b:0d:20:41:4d:4c:30:db:9b:5b:91:ee:1f:5d:c2:78:54:7c:
bc:46:47:8b:5d:d7:2b:32:97:a5:ea:a6:aa:04:94:b8:97:b8:
d8:c4:c2:01:d7:c9:dd:25:c1:a9:d8:73:34:38:07:37:64:9f:
53:a9:e6:4e:d1:6b:46:2b:5f:00:b0:33:b7:3b:c1:d8:e6:56:
2c:f2:ef:2f:bf:9a:67:18:a0:9e:83:83:9a:fd:42:f0:be:29:
13:a7:1d:54:f2:a6:f8:64:63:49:7c:68:28:70:c4:9b:f3:4e:
a4:d1:fd:e7:e9:56:2c:91:f3:ea:6d:8d:e8:26:2b:64:17:bd:
60:f5:e9:0d:ce:fa:c5:b8:61:c9:2c:77:1d:81:95:8f:b4:19:
25:da:bf:b8:29:f1:40:92:e6:db:26:28:be:41:e1:61:3e:94:
20:c2:26:36:26:e7:05:8f:ba:d6:bf:73:80:ac:a8:0b:21:3c:
57:58:cf:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYQYxwTJeKmZcx2evqwKXwGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMDI3MDkzMDA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjAzOTVlYzE4Mjg5MjhjOWQ1MTA1NzQ5NGJhNDM4MDY0NDFjN2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUwkrmjkc7JAQ+mwkv2thAicvjJ7
lkfzeTa+p7Xr+qeiHwvFDuzYP2rHpRjD1t4DyF/tkxgNjDiqYpyBVFuTK1RROtbk
OS7mASkQPtLItOSNYkj2ENBYAQcie1EdO00crELXzlb3Jyq58jMMRymbV2fVqpnh
8rEfxmMVjOeglTO2crqG/Vp93AOCW8LoVFVnO9GdM0FIxT/cyu2LbZzHy1MnOkx3
VNTVtVGbHGDC85oD2sKokVlTqbxh6JC45RBy3ald31Ig37dxob2tMGykDHIui/Va
NN0tHiSYxWr4EGvuGQGLMUO0l+aLdaK7f60EH3bLmJPLUC/PUUpKUbx1UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE8DlewYKJKMnVEFdJS6Q4BkQcfPMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvVHdPVjdCZ29rb3lkVVFWMGxMcERnR1JCeDg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWxAwQA
owX7MA0GCSqGSIb3DQEBCwUAA4IBAQBRgNMP+YH6L1PY3I4hGarc9BiEhlyF2QAw
3ACNAM2hwKOUr9sR5STIt9AfiWOhUnmq0F9uBWJaytWRrQfjIOHjDoOjcove8yEb
DSBBTUww25tbke4fXcJ4VHy8RkeLXdcrMpel6qaqBJS4l7jYxMIB18ndJcGp2HM0
OAc3ZJ9TqeZO0WtGK18AsDO3O8HY5lYs8u8vv5pnGKCeg4Oa/ULwvikTpx1U8qb4
ZGNJfGgocMSb806k0f3n6VYskfPqbY3oJitkF71g9ekNzvrFuGHJLHcdgZWPtBkl
2r+4KfFAkubbJii+QeFhPpQgwiY2JucFj7rWv3OArKgLITxXWM+H
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org