Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Xt_rE_zMbASTqaKQOwTMMqysfY4.roa
File: Xt_rE_zMbASTqaKQOwTMMqysfY4.roa (raw, json)
Hash identifier: uNmTxdFhBAlQw+DmVkEdNzondLHo+t1hn6DgSYGMAtg=
Subject key identifier: 5E:DF:EB:13:FC:CC:6C:04:93:A9:A2:90:3B:04:CC:32:AC:AC:7D:8E
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01852A001330CABFCAF4FB8DF5AE0452B66C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Xt_rE_zMbASTqaKQOwTMMqysfY4.roa
Signing time: Mon 19 Dec 2022 10:48:45 +0000
ROA not before: Mon 19 Dec 2022 10:48:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.107.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:2a:00:13:30:ca:bf:ca:f4:fb:8d:f5:ae:04:52:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 19 10:48:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5edfeb13fccc6c0493a9a2903b04cc32acac7d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:92:bd:3e:e8:f2:b1:20:46:7a:20:cb:7b:1d:
91:cf:ed:95:43:54:0c:70:cd:11:41:c7:35:f2:8d:
bc:fe:39:5f:4d:8a:eb:35:7a:35:70:7f:44:1d:51:
67:90:b6:67:af:8d:b7:2e:f9:dc:02:0f:41:b5:0b:
90:c4:75:bc:7c:73:2e:f6:af:ab:46:a2:d3:3a:05:
5b:bc:f7:41:76:43:f4:76:b8:f2:e3:78:f3:99:4a:
29:5a:3a:f0:d0:a2:5d:da:6b:ef:1e:0b:bf:b0:9f:
fd:43:0a:43:d4:fa:66:46:0c:76:85:76:ef:51:cb:
74:1d:33:d7:5e:54:88:66:70:cc:2a:5d:74:40:21:
19:6f:96:0a:c7:5d:96:7b:0f:73:73:3d:08:3d:80:
60:c8:cf:a5:5b:eb:ac:73:a7:b6:3a:49:fb:47:d3:
c3:71:99:75:0b:fa:50:21:e8:2b:d2:c1:82:15:eb:
68:bc:8f:1a:d1:02:87:e2:1b:75:ee:c9:2e:9f:22:
3f:4e:1f:9f:ad:7e:93:35:e2:8f:40:fa:7e:05:62:
26:ba:e3:e8:3b:a4:97:d8:d7:93:8e:19:bc:4e:55:
df:1b:78:ed:06:39:bf:31:37:c5:ca:51:e0:0e:2a:
fc:ce:31:9c:44:44:a6:05:38:a9:87:25:1d:cc:86:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DF:EB:13:FC:CC:6C:04:93:A9:A2:90:3B:04:CC:32:AC:AC:7D:8E
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/Xt_rE_zMbASTqaKQOwTMMqysfY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.107.0/24
163.5.127.0/24
163.5.138.0/24
163.5.158.0/24
163.5.161.0/24
163.5.166.0/24
163.5.202.0/24
163.5.210.0/23
163.5.222.0/24
163.5.226.0/23
163.5.230.0/24
163.5.239.0-163.5.241.255
163.5.244.0/24
163.5.246.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:1b:4d:e4:1f:a7:82:2a:19:57:63:f0:e4:b4:29:d0:dd:ff:
3e:76:ef:7b:50:43:31:71:5c:eb:f8:2e:d8:c2:00:f9:89:46:
f6:84:a3:d8:b2:dd:b1:97:89:fa:43:54:f6:fb:a0:34:90:6b:
66:02:58:97:4a:c8:fa:12:20:71:76:34:41:c0:68:37:6a:37:
f1:90:78:ec:1c:cd:86:a2:83:01:9c:77:f2:4c:f7:e4:75:bc:
04:0f:ce:4e:0a:ee:ec:b3:b5:b2:0b:4e:d0:ad:6f:ab:73:9d:
70:9b:b3:09:07:79:e0:a4:bc:25:0c:b5:db:d6:1a:dc:81:c6:
84:0f:5b:b5:35:cb:cf:67:d9:8b:bf:6f:4e:64:6e:99:28:1a:
21:69:10:91:3e:e5:bd:bf:fe:e4:2d:c1:97:12:74:6a:49:e9:
d4:99:04:40:4b:de:69:27:4b:c2:c3:24:f3:a2:c7:98:2e:66:
96:50:81:38:ca:d9:62:f3:a4:0a:3d:64:88:93:2b:55:c9:b2:
39:5e:f6:d0:a9:62:b6:b9:7e:66:0f:d5:3c:12:9e:97:da:89:
6d:f2:91:2b:72:b9:34:5e:ac:42:c0:d6:8c:8e:7e:e3:fa:c2:
e3:e8:88:59:8d:0d:0d:1a:af:94:25:11:5a:c4:41:47:23:99:
58:8d:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org