Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZLBVdYTy-Xuuxk0RPZ_joOLzWgc.roa
File: ZLBVdYTy-Xuuxk0RPZ_joOLzWgc.roa (raw, json)
Hash identifier: RGtyl85Ut8JHkEofxHjcexxv4/yWUZwPgJ2JftDrcw8=
Subject key identifier: 64:B0:55:75:84:F2:F9:7B:AE:C6:4D:11:3D:9F:E3:A0:E2:F3:5A:07
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0183A93C6EC7BC801FF64F1818496FB8501B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZLBVdYTy-Xuuxk0RPZ_joOLzWgc.roa
Signing time: Wed 05 Oct 2022 17:40:53 +0000
ROA not before: Wed 05 Oct 2022 17:40:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.230.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a9:3c:6e:c7:bc:80:1f:f6:4f:18:18:49:6f:b8:50:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 5 17:40:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=64b0557584f2f97baec64d113d9fe3a0e2f35a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:cf:1a:6f:76:aa:59:c8:4d:68:9f:3a:86:
88:c9:f2:a1:18:09:d8:33:09:4d:fd:67:90:75:89:
9c:3d:de:c7:a7:ec:e7:d8:d8:4c:5c:07:08:95:83:
38:4e:eb:b6:de:7d:5d:11:a2:da:a6:db:88:da:73:
7d:1d:8e:91:7a:df:49:9f:99:35:fc:a5:52:c3:b5:
4c:02:05:e8:ef:fe:78:5c:f7:f7:cc:d0:ea:36:cb:
b5:b9:72:68:d1:55:27:d3:c3:6d:fc:47:31:cf:42:
6e:05:9b:a0:e8:6e:d3:f8:90:a9:23:5f:48:53:cd:
37:ab:fd:05:1f:88:0c:80:ce:65:c1:b8:1d:a3:c1:
4c:b9:09:74:23:bf:7a:68:5f:d2:ba:df:b6:80:04:
bf:0b:25:24:a5:b3:ed:19:a7:9a:fa:93:fc:8e:e5:
e5:89:17:42:0d:34:15:dd:3c:a3:46:bc:d1:1d:2f:
78:65:02:64:ed:37:22:b1:16:36:92:95:91:e7:58:
fc:74:d3:e9:8f:ab:f4:74:5c:fe:df:71:cc:fb:e8:
b0:45:88:d9:c1:bc:c9:1a:3f:b5:50:6c:5f:a8:12:
30:32:19:50:13:3e:c0:25:54:76:50:00:ea:56:e6:
35:3d:62:d6:56:9f:85:71:fd:c6:30:67:ea:65:80:
42:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:55:75:84:F2:F9:7B:AE:C6:4D:11:3D:9F:E3:A0:E2:F3:5A:07
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZLBVdYTy-Xuuxk0RPZ_joOLzWgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.138.0/24
163.5.161.0/24
163.5.230.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fc:94:4f:c3:7d:30:a0:86:52:da:7f:b9:d9:9b:7c:ee:f7:
5c:d5:8c:9c:75:fc:98:f0:4c:35:67:f4:4a:40:eb:bb:5e:c6:
6c:6f:2c:37:d3:12:39:20:00:36:05:b0:28:3c:75:94:09:ac:
e6:13:b0:8f:56:96:61:71:c7:ca:2e:91:c8:00:0b:d2:9b:58:
28:f8:75:97:93:46:0e:c8:b1:64:2c:b3:12:fe:64:00:e9:7e:
30:2a:40:13:bf:bd:24:5a:a7:b8:08:b0:c4:77:ca:a8:84:7a:
4f:dc:91:f4:46:02:de:96:f5:61:17:88:9d:a1:21:34:ff:a2:
87:4d:71:a2:e5:f1:89:8b:08:a2:5d:85:60:30:d2:88:e9:de:
6c:60:82:0f:e9:5a:c2:9b:ba:a8:c2:05:20:89:d4:51:d1:56:
66:15:91:14:9c:32:d5:8c:ca:42:07:bb:c7:1e:78:33:24:9c:
74:6a:9f:52:5d:23:77:b1:0b:b7:07:55:c0:cf:9a:7f:9b:6c:
d9:4a:bf:e8:11:80:4b:50:87:f1:13:0b:45:30:c5:78:c7:68:
09:5e:8b:e7:07:bc:f9:de:6e:19:ad:f8:fd:39:c8:c6:ac:b3:
39:e3:af:10:63:d3:a8:75:7d:83:1a:ee:c8:80:e3:dc:61:63:
98:5e:cf:ff
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYOpPG7HvIAf9k8YGElvuFAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMDA1MTc0MDUzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGIwNTU3NTg0ZjJmOTdiYWVjNjRkMTEzZDlmZTNhMGUyZjM1YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqd/PGm92qlnITWifOoaIyfKhGAnY
MwlN/WeQdYmcPd7Hp+zn2NhMXAcIlYM4Tuu23n1dEaLaptuI2nN9HY6Ret9Jn5k1
/KVSw7VMAgXo7/54XPf3zNDqNsu1uXJo0VUn08Nt/Ecxz0JuBZug6G7T+JCpI19I
U803q/0FH4gMgM5lwbgdo8FMuQl0I796aF/Sut+2gAS/CyUkpbPtGaea+pP8juXl
iRdCDTQV3TyjRrzRHS94ZQJk7TcisRY2kpWR51j8dNPpj6v0dFz+33HM++iwRYjZ
wbzJGj+1UGxfqBIwMhlQEz7AJVR2UADqVuY1PWLWVp+Fcf3GMGfqZYBCnQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGSwVXWE8vl7rsZNET2f46Di81oHMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvWkxCVmRZVHktWHV1eGswUlBaX2pvT0x6V2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAowUjAwQA
owWKAwQAowWhAwQAowXmAwQAowX4MA0GCSqGSIb3DQEBCwUAA4IBAQCC/JRPw30w
oIZS2n+52Zt87vdc1YycdfyY8Ew1Z/RKQOu7XsZsbyw30xI5IAA2BbAoPHWUCazm
E7CPVpZhccfKLpHIAAvSm1go+HWXk0YOyLFkLLMS/mQA6X4wKkATv70kWqe4CLDE
d8qohHpP3JH0RgLelvVhF4idoSE0/6KHTXGi5fGJiwiiXYVgMNKI6d5sYIIP6VrC
m7qowgUgidRR0VZmFZEUnDLVjMpCB7vHHngzJJx0ap9SXSN3sQu3B1XAz5p/m2zZ
Sr/oEYBLUIfxEwtFMMV4x2gJXovnB7z53m4Zrfj9OcjGrLM5468QY9OodX2DGu7I
gOPcYWOYXs//
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org