Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZlH_6Qo_O9QE5b0x7IyWrrL5tiA.roa
File: ZlH_6Qo_O9QE5b0x7IyWrrL5tiA.roa (raw, json)
Hash identifier: Ylp17A1WU4zvF5UFhx9gz+wmA8GoIgudlFQK6tvz0W8=
Subject key identifier: 66:51:FF:E9:0A:3F:3B:D4:04:E5:BD:31:EC:8C:96:AE:B2:F9:B6:20
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184E26B89B0677FD431E9DE27D82EA73D79
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZlH_6Qo_O9QE5b0x7IyWrrL5tiA.roa
Signing time: Mon 05 Dec 2022 13:13:29 +0000
ROA not before: Mon 05 Dec 2022 13:13:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:6b:89:b0:67:7f:d4:31:e9:de:27:d8:2e:a7:3d:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 5 13:13:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6651ffe90a3f3bd404e5bd31ec8c96aeb2f9b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:79:0d:7a:ac:7e:85:60:69:b1:e2:e9:70:7f:
19:f5:cb:a4:27:c9:0e:61:c8:08:38:23:41:bd:21:
31:d0:70:03:b1:ec:18:b4:35:1c:25:ba:09:5b:7d:
ba:9c:ec:fc:57:60:f1:33:97:e6:9f:0f:f6:6f:3a:
a6:17:91:b0:d0:ce:29:43:d6:8e:dc:4a:9e:78:7d:
e5:11:11:7f:0f:72:3d:3b:50:2a:00:af:29:c8:2f:
2b:93:9b:f6:ad:25:a9:17:c1:bf:48:89:77:4f:29:
4d:f1:d5:cb:6b:08:9a:fe:27:48:b8:a0:78:4e:57:
89:40:31:f1:db:bc:17:76:5d:74:ac:3b:7d:15:a2:
7e:29:b4:0a:b2:93:13:37:df:e6:83:4c:05:64:1c:
a1:38:9d:a3:38:71:dd:69:aa:fe:3d:4c:60:9c:91:
79:5c:a5:2a:49:74:f3:a2:1d:3d:72:e1:c6:3e:a2:
e0:32:29:b2:b7:43:a0:32:e2:5f:a4:9a:dd:ed:e5:
39:a9:73:9f:94:dc:38:9a:88:9c:9c:b6:35:1d:db:
e3:e9:1f:b8:25:dc:63:ce:1f:4a:3f:50:3e:4d:5d:
96:ff:fb:84:e6:c6:24:a5:cf:82:73:ed:ec:0d:99:
3a:9e:e4:9f:c0:63:dd:8e:54:e5:d1:53:0b:3c:e2:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:51:FF:E9:0A:3F:3B:D4:04:E5:BD:31:EC:8C:96:AE:B2:F9:B6:20
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ZlH_6Qo_O9QE5b0x7IyWrrL5tiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.127.0/24
163.5.138.0/24
163.5.161.0/24
163.5.202.0/24
163.5.210.0/24
163.5.222.0/24
163.5.226.0/23
163.5.230.0/24
163.5.240.0/24
163.5.244.0/24
163.5.246.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a1:3a:d8:73:8f:af:d1:52:51:cc:4d:62:0d:13:bf:62:e4:
97:4b:40:3b:65:18:54:09:16:e9:9d:4f:6e:ea:75:3a:0f:e4:
c7:1b:03:2e:90:b1:cd:51:1f:aa:6f:26:63:24:eb:85:ec:96:
8e:89:28:b9:31:1a:b0:d1:10:8e:99:cc:9f:10:e4:d7:4c:76:
47:64:01:a0:a6:56:25:9a:87:ed:25:24:dd:6d:c2:78:37:28:
4e:ba:93:4d:52:b6:e1:fd:d0:cb:ab:61:ce:92:b7:83:b6:61:
e2:a5:35:0f:c0:b6:12:fd:c4:4a:1d:79:83:67:7c:53:82:68:
a4:eb:aa:8b:b3:98:76:88:f4:18:aa:df:11:24:e8:9f:cd:98:
fb:48:29:3a:92:bd:27:32:a3:de:d8:8c:1d:f4:17:05:c6:cf:
f5:91:48:5f:da:a8:eb:63:f3:b8:77:52:47:97:75:ec:e6:c1:
27:7c:c4:82:00:54:32:58:2c:76:65:a3:c4:0c:02:86:2b:65:
81:68:20:7a:23:b4:15:20:37:54:58:84:cd:ee:5b:5e:5b:61:
55:81:2d:92:6e:4b:43:dd:40:94:cd:2f:f0:fa:37:d9:94:5e:
1d:76:82:85:da:d0:85:59:12:f3:8b:f7:40:c9:d4:e4:6a:13:
61:06:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org