Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/amxxSwgTtemY6wFns70spEEN4TA.roa
File: amxxSwgTtemY6wFns70spEEN4TA.roa (raw, json)
Hash identifier: BC5NLbkmflolgZbcVnDVeS8WP2OV2vw03J4m9+XBCTo=
Subject key identifier: 6A:6C:71:4B:08:13:B5:E9:98:EB:01:67:B3:BD:2C:A4:41:0D:E1:30
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018C91533415E1BE433CA76417C5F9126E03
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/amxxSwgTtemY6wFns70spEEN4TA.roa
Signing time: Fri 22 Dec 2023 11:39:58 +0000
ROA not before: Fri 22 Dec 2023 11:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:53:34:15:e1:be:43:3c:a7:64:17:c5:f9:12:6e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 22 11:39:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a6c714b0813b5e998eb0167b3bd2ca4410de130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:c9:7e:e3:18:f3:e4:29:43:86:70:69:77:
5e:50:70:01:2b:3f:97:0d:d7:b5:c5:b1:3b:ef:67:
ab:7f:f0:24:0a:67:50:72:68:d2:90:a5:24:51:3b:
f9:33:9c:29:75:79:42:c3:ed:a9:da:64:d3:72:81:
30:94:a0:28:75:20:5c:42:5b:fe:4a:e1:4a:72:b0:
57:a5:20:30:e1:55:8c:d8:08:51:88:53:54:e9:69:
e0:ba:5d:d1:b9:4c:2c:2b:83:1d:e0:33:b2:47:25:
14:55:4a:da:34:7b:8f:80:de:9a:31:53:e9:47:e5:
9f:f7:20:64:db:b6:c0:a8:e8:0e:34:8b:aa:73:d3:
32:44:7a:11:b1:9b:e2:6c:d3:ec:35:01:2d:ba:46:
82:9f:a4:8d:48:d3:99:49:24:a3:37:4d:d6:62:9b:
77:cf:59:05:7f:60:ba:10:cc:6b:4a:db:0b:9d:c3:
97:59:db:c7:dc:53:ec:1e:c5:fc:e5:b4:02:69:5f:
93:a9:5d:13:d6:f1:31:db:92:df:da:52:1f:86:6b:
59:d4:df:b5:4e:0e:1f:ec:58:20:91:d9:5b:35:3d:
97:b2:63:36:6b:20:2e:3e:db:6b:fb:33:b3:eb:fb:
30:77:39:97:39:ca:0b:5c:0d:cb:30:31:c0:37:57:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6C:71:4B:08:13:B5:E9:98:EB:01:67:B3:BD:2C:A4:41:0D:E1:30
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/amxxSwgTtemY6wFns70spEEN4TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.36.0/24
163.5.79.0/24
163.5.83.0/24
163.5.89.0/24
163.5.94.0/23
163.5.106.0/24
163.5.110.0-163.5.113.255
163.5.121.0/24
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.139.0/24
163.5.142.0/23
163.5.146.0/24
163.5.148.0/24
163.5.150.0/23
163.5.156.0/24
163.5.160.0/24
163.5.167.0/24
163.5.170.0/24
163.5.178.0/23
163.5.181.0-163.5.182.255
163.5.188.0/23
163.5.191.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.218.0/24
163.5.224.0/24
163.5.228.0/24
163.5.241.0/24
163.5.244.0/24
163.5.250.0/24
163.5.253.0/24
163.5.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:b5:3f:55:83:51:6e:14:cb:ae:69:ad:62:2c:c2:24:b0:01:
dc:9e:45:a4:18:95:b6:d0:98:cd:dd:ae:43:da:40:95:c8:be:
f0:70:06:c9:da:76:e9:13:67:90:d2:43:21:26:ea:4e:a9:74:
85:90:be:60:30:fd:c6:18:dd:60:25:68:86:11:68:8c:11:f4:
8d:50:4a:2c:b2:80:da:46:2f:54:2b:27:94:e8:20:fa:ab:b0:
29:89:ed:72:b7:67:6d:cb:0b:e9:2e:98:ec:f5:4c:fc:e1:55:
92:13:b2:c9:11:7f:aa:7c:5c:0e:f2:c2:f3:68:8f:2c:15:15:
c2:f7:65:1b:27:2a:1e:83:87:82:5d:d7:85:96:af:98:6a:9d:
8b:1c:d7:00:d4:78:a5:70:c2:9a:4f:e9:9f:8f:bc:95:93:96:
c3:7d:d2:97:46:40:f0:a8:13:9b:64:6c:d9:17:93:79:9e:ef:
f7:c4:35:e2:a9:59:3c:03:8c:70:70:ee:2d:16:f8:15:a7:05:
91:f2:df:df:65:7d:ca:75:82:30:57:37:02:9a:64:57:4d:b4:
5a:2b:9d:2c:43:f6:31:1e:aa:98:2f:ca:92:a0:d2:64:4c:b1:
71:32:81:a8:9f:d5:52:32:6f:c3:31:84:a3:f4:ad:9d:b1:fe:
30:d5:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:26:13 2025 by rpki-client