Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YnrXj-2HxXLRhcR5AXJekfTNLm0.roa
File: YnrXj-2HxXLRhcR5AXJekfTNLm0.roa (raw, json)
Hash identifier: K5l9cuxFpuS0wEdA/wOx+1+tG8bLrkF4Q2ZnuDa+KPA=
Subject key identifier: 62:7A:D7:8F:ED:87:C5:72:D1:85:C4:79:01:72:5E:91:F4:CD:2E:6D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01825F73882B544370A5B1A3E7D8BE32B9D7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YnrXj-2HxXLRhcR5AXJekfTNLm0.roa
Signing time: Tue 02 Aug 2022 16:46:23 +0000
ROA not before: Tue 02 Aug 2022 16:46:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7118
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:5f:73:88:2b:54:43:70:a5:b1:a3:e7:d8:be:32:b9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 2 16:46:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=627ad78fed87c572d185c47901725e91f4cd2e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:0b:37:4b:9f:7a:d7:8a:1e:9a:b4:94:cb:
5a:f1:b8:2b:41:89:39:ba:89:66:30:5a:cf:1f:16:
f8:a7:0d:e2:5b:3b:50:6b:5c:a7:cd:e1:bb:c9:8a:
c7:7c:ba:d8:e3:1a:0f:26:e3:49:cf:35:f0:e2:5e:
e0:61:31:81:cf:f0:77:42:73:d4:67:1f:25:74:ea:
ed:1d:80:05:77:d8:72:b4:bb:8c:34:e2:51:d7:93:
5f:b3:b1:d2:96:10:f4:59:49:12:c4:6b:3a:12:07:
0f:3e:f2:01:07:ee:26:29:99:6f:d3:34:2a:51:22:
8c:78:4c:f2:1b:fa:f7:f3:c1:70:d3:c4:2f:96:58:
77:bf:e8:14:02:ec:fd:4f:1f:06:ae:b6:ad:d3:35:
1c:69:1f:ab:59:06:91:a3:ed:14:b6:d2:40:6d:0f:
1a:3e:ac:77:dd:d6:98:fb:ee:b0:ca:c2:e1:75:e2:
16:bf:af:f0:c0:91:e8:8d:71:dd:fb:f1:ce:1c:8d:
d2:90:87:cc:67:e1:45:e6:f3:1b:a7:02:11:36:35:
05:67:24:47:f7:2a:b8:d0:34:7c:63:ce:23:79:a9:
c1:db:17:53:36:b6:f2:a7:66:0a:b1:84:f2:85:42:
5c:cc:9f:d3:9d:ab:b8:7a:e0:f4:b5:a4:ea:49:a6:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7A:D7:8F:ED:87:C5:72:D1:85:C4:79:01:72:5E:91:F4:CD:2E:6D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/YnrXj-2HxXLRhcR5AXJekfTNLm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.170.0-163.5.178.255
163.5.180.0/24
163.5.182.0-163.5.189.255
Signature Algorithm: sha256WithRSAEncryption
64:38:81:f1:14:c6:f0:22:18:34:7d:a0:a9:ec:3d:43:c4:16:
b4:0d:eb:e3:ff:00:62:c2:dd:67:0a:ab:24:c3:79:a9:81:7c:
6a:da:2b:06:6a:4b:94:63:b2:1d:ca:34:b1:8d:1e:47:6d:e4:
ab:bb:1c:a7:1f:10:d9:15:85:3d:0b:3f:d1:a3:83:c6:cd:06:
8e:83:48:dc:cd:c7:45:dd:76:6c:cc:4c:f0:a2:14:dc:e1:58:
26:3f:7f:8b:a1:e6:32:74:85:92:26:c6:4f:32:53:06:3f:58:
13:1b:b2:37:86:46:15:6f:be:52:ad:1f:bb:17:d5:9f:09:d0:
e7:4d:1d:6d:3a:59:ad:7d:3d:f5:87:62:89:82:bb:c0:99:56:
4c:4d:24:2a:e1:9c:4d:8f:3c:87:2c:a6:99:e8:40:3c:bb:8d:
b3:ad:6f:6e:fd:e0:cd:c5:0f:f7:85:28:c6:2d:4f:3e:32:83:
d8:4e:50:e9:a7:00:33:b6:27:64:6d:f4:c2:ac:72:f2:61:da:
5b:5d:cf:aa:33:57:27:db:ba:9d:99:74:7b:bf:0a:d3:ac:44:
d6:44:6f:dd:0f:f7:74:9a:fd:8d:06:06:1f:b3:45:d1:6f:46:
40:ad:ee:77:bc:d7:36:cc:a5:fe:03:77:33:6e:89:7c:8c:ff:
4c:9e:bb:af
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYJfc4grVENwpbGj59i+MrnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwODAyMTY0NjIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjdhZDc4ZmVkODdjNTcyZDE4NWM0NzkwMTcyNWU5MWY0Y2QyZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs4LN0ufeteKHpq0lMta8bgrQYk5
uolmMFrPHxb4pw3iWztQa1ynzeG7yYrHfLrY4xoPJuNJzzXw4l7gYTGBz/B3QnPU
Zx8ldOrtHYAFd9hytLuMNOJR15Nfs7HSlhD0WUkSxGs6EgcPPvIBB+4mKZlv0zQq
USKMeEzyG/r388Fw08Qvllh3v+gUAuz9Tx8Grrat0zUcaR+rWQaRo+0UttJAbQ8a
Pqx33daY++6wysLhdeIWv6/wwJHojXHd+/HOHI3SkIfMZ+FF5vMbpwIRNjUFZyRH
9yq40DR8Y84jeanB2xdTNrbyp2YKsYTyhUJczJ/Tnau4euD0taTqSaZqzQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFGJ614/th8Vy0YXEeQFyXpH0zS5tMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvWW5yWGotMkh4WExSaGNSNUFYSmVrZlROTG0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAowWJMAwD
BAGjBaoDBACjBbIDBACjBbQwDAMEAaMFtgMEAaMFvDANBgkqhkiG9w0BAQsFAAOC
AQEAZDiB8RTG8CIYNH2gqew9Q8QWtA3r4/8AYsLdZwqrJMN5qYF8atorBmpLlGOy
Hco0sY0eR23kq7scpx8Q2RWFPQs/0aODxs0GjoNI3M3HRd12bMxM8KIU3OFYJj9/
i6HmMnSFkibGTzJTBj9YExuyN4ZGFW++Uq0fuxfVnwnQ500dbTpZrX099YdiiYK7
wJlWTE0kKuGcTY88hyymmehAPLuNs61vbv3gzcUP94Uoxi1PPjKD2E5Q6acAM7Yn
ZG30wqxy8mHaW13PqjNXJ9u6nZl0e78K06xE1kRv3Q/3dJr9jQYGH7NF0W9GQK3u
d7zXNsyl/gN3M26JfIz/TJ67rw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org