Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YZ9wTMYm-lg0Gro30h2FeMlUwvM.roa
File: YZ9wTMYm-lg0Gro30h2FeMlUwvM.roa (raw, json)
Hash identifier: I5jMqIAu4bskWGwyZ9C7NAxV++/KthYin4W0LK2qgNo=
Subject key identifier: 61:9F:70:4C:C6:26:FA:58:34:1A:BA:37:D2:1D:85:78:C9:54:C2:F3
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183A93B84E80C231FDB8AB9C26D79E6224C
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YZ9wTMYm-lg0Gro30h2FeMlUwvM.roa
Signing time: Wed 05 Oct 2022 17:39:53 +0000
ROA not before: Wed 05 Oct 2022 17:39:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:3b:84:e8:0c:23:1f:db:8a:b9:c2:6d:79:e6:22:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 5 17:39:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=619f704cc626fa58341aba37d21d8578c954c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:9a:31:02:64:58:46:82:28:14:a3:63:fd:
2b:07:48:9a:41:83:a8:a2:5c:40:4c:b4:a1:a8:de:
bd:f5:c3:cb:19:61:80:04:a2:3a:44:46:fa:49:2a:
de:8f:c7:08:21:19:05:71:91:0f:14:7f:17:5e:f1:
53:5a:a3:e4:af:05:a2:00:ec:0b:92:ad:bd:be:63:
7e:99:8f:49:df:16:a4:ab:93:d8:31:45:c0:30:7d:
2b:ec:66:d7:62:f5:c2:ff:75:87:ff:7c:8a:28:ab:
b9:03:5a:a2:69:fb:3c:65:bd:ef:96:f0:ef:b0:25:
81:12:6d:60:87:e5:8d:cd:4f:ef:7f:98:d6:99:a0:
3f:ac:81:b0:59:16:bd:4b:35:9b:82:03:83:3d:8a:
5f:74:74:75:74:39:e5:12:5c:0e:9e:b3:f1:de:80:
cd:13:82:08:b8:67:91:31:84:11:1b:fe:78:86:96:
34:a9:b0:44:d4:3e:0d:41:4b:bf:be:b1:fa:8c:35:
a7:5a:2f:a9:39:76:4a:ef:1b:df:24:33:25:e1:ea:
f7:7d:01:13:5a:f3:24:c1:a1:0e:cb:fc:f9:33:34:
70:7b:80:5a:42:b0:b7:da:e2:30:0e:6b:0c:f3:5d:
69:b6:e0:94:d1:bc:8e:c3:ad:c9:9e:44:19:16:b2:
5c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:9F:70:4C:C6:26:FA:58:34:1A:BA:37:D2:1D:85:78:C9:54:C2:F3
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YZ9wTMYm-lg0Gro30h2FeMlUwvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/23
163.5.113.0/24
163.5.116.0/24
163.5.127.0/24
163.5.132.0/23
163.5.136.0/24
163.5.143.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:eb:36:fa:14:41:55:f8:41:ad:79:6a:05:13:2e:cd:39:55:
eb:93:44:2e:d6:e8:7a:1f:0b:b0:36:1e:42:16:29:d3:34:23:
ed:43:39:b2:76:c4:8c:94:7a:14:df:c1:84:71:8f:1d:e1:e3:
af:01:8f:b1:a9:08:c3:00:85:72:3d:4f:20:ff:25:90:d0:80:
de:ea:ce:12:81:3e:18:08:13:2c:e3:57:f7:02:60:65:67:ed:
48:8d:2c:5f:d1:ea:34:64:c5:70:83:cb:6c:cb:1e:f4:cd:63:
4b:bd:5c:90:8b:ba:08:48:33:20:6f:10:0e:55:52:5c:b0:d7:
5c:ff:f6:4a:88:f7:20:59:c1:ed:97:a8:2b:27:56:39:e5:da:
0c:e7:81:05:5a:5c:d8:e9:41:dc:9c:5e:31:25:61:55:a6:0a:
51:8b:0b:a7:1c:ce:dc:16:43:c3:70:98:ab:a8:51:0e:99:3a:
64:d6:8a:be:53:55:32:5b:a5:f0:d5:c2:d3:0c:fb:25:6f:f5:
5c:80:6b:8e:0c:da:59:35:d4:33:05:72:3f:30:08:e3:86:5c:
2c:71:73:ed:e1:50:7a:dd:62:36:c2:81:be:1e:31:41:8c:58:
9d:6e:09:e3:f5:dc:bf:3c:f9:63:0d:f7:30:2d:92:78:f3:56:
c5:bb:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org