Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X9Fn0RceeoV3BTpLcAci2a05L6I.roa
File: X9Fn0RceeoV3BTpLcAci2a05L6I.roa (raw, json)
Hash identifier: lPd8uhKf3S8kuVB6a9fL6sO6kwliJOG0VyMW3MTuNkc=
Subject key identifier: 5F:D1:67:D1:17:1E:7A:85:77:05:3A:4B:70:07:22:D9:AD:39:2F:A2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01833B3585C4883D803E6BB8777A628A25F1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X9Fn0RceeoV3BTpLcAci2a05L6I.roa
Signing time: Wed 14 Sep 2022 08:55:06 +0000
ROA not before: Wed 14 Sep 2022 08:55:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.227.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:35:85:c4:88:3d:80:3e:6b:b8:77:7a:62:8a:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 14 08:55:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5fd167d1171e7a8577053a4b700722d9ad392fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bd:38:bc:0c:f3:79:6f:da:5d:93:9e:74:04:
0d:e6:01:ea:19:ce:bd:c3:6f:1e:47:2d:05:a2:ac:
d5:a3:04:6e:b8:e5:9d:d6:1b:74:8d:5c:0c:88:9f:
c8:b9:25:3b:03:3a:1d:ce:f9:f6:4e:00:09:2e:eb:
ae:fa:03:66:86:26:63:07:bf:a5:ed:ab:78:77:5b:
87:78:44:41:df:83:b6:c8:a1:65:e3:88:56:c2:46:
72:36:5c:2f:d6:12:e8:a0:a7:ea:56:b4:b8:44:1e:
fb:a1:a2:b6:ac:f8:dc:6d:ca:96:c8:17:93:45:f5:
20:6c:eb:47:95:f7:94:38:26:8d:c5:2f:7a:ce:dc:
07:31:9c:7d:0d:d3:ea:f5:89:ca:87:94:54:6c:8d:
a7:d1:ac:47:38:eb:aa:42:4d:4f:bc:b5:48:73:55:
97:93:28:bd:41:fa:d2:f9:e5:6b:60:b8:ae:74:bb:
d9:9d:74:21:c5:49:a0:2b:49:8f:5c:fd:85:7d:bb:
bf:8c:28:33:14:ad:46:97:c7:f4:e3:ea:1c:a3:59:
c9:e5:cc:53:a7:b9:a0:d2:19:fa:a9:2e:d9:d3:03:
57:9a:58:27:6a:bf:2a:aa:12:98:a3:14:9c:2c:6b:
85:07:10:1d:29:8f:d4:d2:0b:73:02:ca:e8:5d:e9:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D1:67:D1:17:1E:7A:85:77:05:3A:4B:70:07:22:D9:AD:39:2F:A2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/X9Fn0RceeoV3BTpLcAci2a05L6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.124.0/24
163.5.152.0/24
163.5.158.0/24
163.5.166.0/24
163.5.169.0/24
163.5.179.0/24
163.5.212.0/24
163.5.214.0/24
163.5.223.0/24
163.5.226.0/23
163.5.246.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
23:32:8c:7a:b3:a4:d5:a4:52:7e:2e:0e:66:38:76:84:ce:96:
0b:8c:98:26:b3:36:31:2a:64:c6:7f:04:cd:01:07:e4:f9:64:
d4:26:8e:55:34:88:dd:2f:af:17:b2:56:63:f4:4c:4e:04:80:
28:f1:bd:76:e3:8b:c1:b3:f0:e1:91:f2:6c:51:be:62:77:43:
b6:94:f4:e5:f8:5d:ed:88:99:90:ae:27:69:73:d2:7e:17:ff:
d8:37:f6:c9:de:8d:b5:69:64:06:12:44:99:14:d6:76:8f:aa:
2b:13:3a:1d:49:49:cc:a0:9b:c0:22:7a:49:ba:59:cd:43:a5:
05:bb:e0:8f:0a:cc:7c:ba:3c:5e:d8:2c:27:aa:f1:e1:58:ad:
2c:57:c8:e9:33:e8:a9:bf:f1:cc:4e:d0:38:eb:31:1d:7d:f3:
8a:19:86:91:28:1c:66:69:a6:48:36:18:b4:ac:07:6d:01:57:
5f:74:16:76:d5:de:8d:2d:d0:ae:d7:90:e5:4d:a7:a9:ad:e6:
fd:e7:74:40:e0:3f:ce:43:00:a8:ab:89:8b:80:d9:32:01:e4:
68:25:90:1f:06:b3:4e:8e:d2:42:a8:d6:43:d1:d8:eb:68:ac:
25:78:3d:e5:86:d3:27:6d:57:33:dd:54:28:7e:a5:88:74:a6:
06:0c:a6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org