Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XmFkVnCNfpx2BsOwRwr3LASY4vg.roa
File: XmFkVnCNfpx2BsOwRwr3LASY4vg.roa (raw, json)
Hash identifier: FAovVhYmRxDN4B82m/7riGvUR31/01eZTkr1nau5+iU=
Subject key identifier: 5E:61:64:56:70:8D:7E:9C:76:06:C3:B0:47:0A:F7:2C:04:98:E2:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183A9284A30B1947ACB227BDD1B8B1EC7E2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XmFkVnCNfpx2BsOwRwr3LASY4vg.roa
Signing time: Wed 05 Oct 2022 17:18:53 +0000
ROA not before: Wed 05 Oct 2022 17:18:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.232.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:28:4a:30:b1:94:7a:cb:22:7b:dd:1b:8b:1e:c7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 5 17:18:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5e616456708d7e9c7606c3b0470af72c0498e2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:d6:36:85:f9:ae:f6:70:1f:8a:7d:a3:f1:
e9:2a:66:39:7b:99:f4:7a:1e:92:88:29:80:8b:e7:
f5:60:62:cc:24:20:77:2d:75:36:89:ed:37:d0:57:
8e:5b:05:1e:17:fc:59:f8:dd:05:96:00:10:b4:87:
4d:87:aa:65:76:06:97:ab:14:08:01:89:ca:53:8d:
5a:65:07:41:a2:b4:26:5f:dc:8e:3a:e0:26:61:ce:
b7:cf:1c:65:db:c2:b3:0c:7b:e6:ce:d2:b5:73:40:
85:7f:8f:5c:5a:86:53:89:1c:0b:82:68:df:fd:37:
5d:b8:36:b5:fc:1c:7f:05:40:f9:1e:78:6b:72:35:
2b:43:22:33:7d:52:c2:5a:b7:a0:10:67:c7:7b:3f:
f5:4a:ed:0b:2e:38:f0:11:02:65:80:2b:40:1e:6b:
93:fc:16:37:68:6b:0b:a1:ed:a4:7b:51:7a:4d:2b:
50:ab:c3:ea:b2:a1:d7:4b:dd:15:82:e6:f0:b4:cf:
ea:78:19:f2:fc:95:c2:59:73:98:4c:ed:f9:f3:6f:
67:ba:83:e1:e9:69:ca:a4:bb:c3:e5:e6:85:ae:da:
56:da:b3:da:4f:96:58:ec:f1:f8:1d:ce:d6:7d:07:
f6:c9:4c:d5:6d:50:fd:7d:12:62:8b:0d:2c:37:b7:
c7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:61:64:56:70:8D:7E:9C:76:06:C3:B0:47:0A:F7:2C:04:98:E2:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/XmFkVnCNfpx2BsOwRwr3LASY4vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.110.0/23
163.5.126.0/24
163.5.128.0/24
163.5.165.0/24
163.5.231.0-163.5.232.255
163.5.234.0/24
163.5.250.0/24
163.5.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4b:ce:f3:88:92:a5:19:95:6d:87:ac:48:f9:0e:02:5b:88:
ab:6f:f7:d5:5f:d5:47:fb:b4:9e:d5:31:23:3f:e1:ce:54:8b:
96:29:2a:d9:67:18:37:16:c0:f7:75:53:b3:f0:c5:81:5d:7c:
0c:32:3d:54:35:38:0b:0c:d4:17:84:db:80:64:bf:60:f7:95:
eb:1f:01:89:8e:ba:f5:b5:1c:31:07:46:ff:e9:f6:06:22:dd:
a0:da:85:08:14:48:16:b4:ff:31:f8:09:28:e0:f3:9c:d5:36:
4f:d1:c7:c0:ac:9b:9b:49:71:34:ab:ed:4d:a2:4f:c1:95:aa:
cb:bc:f1:7f:f0:ac:a5:8f:dc:10:54:62:d4:94:5e:be:04:30:
1f:63:db:6b:ba:91:b5:3c:f3:23:d4:a3:9a:91:9b:f4:94:50:
0b:19:55:41:e0:7b:02:2b:f1:a2:f0:05:42:03:52:05:e0:e1:
85:0a:c7:85:6a:68:97:7b:8b:73:cf:9a:0b:37:f7:71:66:d2:
6e:d4:42:08:4a:f1:ec:a9:b9:23:8c:44:c8:69:5a:f0:4f:29:
43:a3:0e:52:f9:75:9c:23:b5:be:4c:f1:fc:a2:b9:36:cf:b6:
87:28:62:08:b7:80:d4:b1:8c:85:a1:9f:31:cd:fa:2a:78:01:
8a:54:ad:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org