Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ccTwtrQ1ducEPJb6cT0-c9igxTE.roa
File: ccTwtrQ1ducEPJb6cT0-c9igxTE.roa (raw, json)
Hash identifier: pTg2+uFO/J+fi+TlVE1DGOTaZHd8P22ZRd0PNIvllV4=
Subject key identifier: 71:C4:F0:B6:B4:35:76:E7:04:3C:96:FA:71:3D:3E:73:D8:A0:C5:31
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182F949F19F57EF9589BCE544714B71A483
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ccTwtrQ1ducEPJb6cT0-c9igxTE.roa
Signing time: Thu 01 Sep 2022 13:42:28 +0000
ROA not before: Thu 01 Sep 2022 13:42:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:f9:49:f1:9f:57:ef:95:89:bc:e5:44:71:4b:71:a4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 1 13:42:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71c4f0b6b43576e7043c96fa713d3e73d8a0c531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:00:5c:1e:cb:0f:4a:e2:2b:c9:bc:6b:e7:
65:f5:dc:59:a5:72:d3:4f:d2:46:d9:85:fb:75:ed:
c7:2d:4a:2a:5a:16:ad:6c:23:18:37:3e:bc:52:eb:
ab:b2:ce:28:c9:83:7b:eb:20:84:47:32:c6:31:6f:
e6:8e:58:5d:0a:27:44:26:9d:b8:d8:38:fb:b0:c0:
f9:04:4a:82:e3:ab:69:68:7d:f1:3d:ba:bd:a4:e3:
9a:85:61:c5:10:60:32:b5:c4:8f:1e:09:e2:09:8c:
c9:f0:63:bf:b0:54:09:22:74:48:12:33:e2:df:70:
1a:52:ee:5d:f7:8c:28:05:a6:dc:b9:0f:80:15:98:
33:ee:91:0d:d3:aa:d4:56:4d:6a:2d:f0:06:a8:cc:
66:9d:fb:ec:ae:67:5e:2e:35:2a:19:7b:fd:17:3f:
1b:6d:bd:d7:86:da:d2:db:80:37:1d:b0:4c:94:9d:
0e:6c:a6:b2:4d:ca:92:fa:de:10:ca:04:a1:1b:94:
c1:24:ae:fa:96:7c:d1:89:b3:5c:59:9c:df:ac:50:
90:0a:ff:8f:16:21:5a:96:35:5e:93:ba:88:fd:33:
3e:ae:1c:b9:54:08:4d:11:f3:d2:5b:98:95:f9:7a:
8f:22:ab:b4:47:dc:39:c4:ae:4f:55:e9:3b:d1:26:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C4:F0:B6:B4:35:76:E7:04:3C:96:FA:71:3D:3E:73:D8:A0:C5:31
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ccTwtrQ1ducEPJb6cT0-c9igxTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.155.0-163.5.157.255
163.5.170.0-163.5.178.255
163.5.180.0/24
163.5.182.0-163.5.189.255
163.5.194.0-163.5.200.255
163.5.206.0-163.5.209.255
Signature Algorithm: sha256WithRSAEncryption
b3:5e:3f:dc:b8:68:0e:21:c3:d0:87:33:da:7b:ef:8b:5e:cc:
19:22:94:88:0f:2b:f9:32:21:f9:ea:ed:d3:68:d5:8d:e0:fd:
6c:97:c3:97:64:a0:0c:e8:c8:b3:6a:c9:63:ba:2b:e8:c0:db:
a8:2f:65:ad:9c:0e:a4:a7:f5:48:2c:0e:97:2d:05:ad:da:e2:
f6:54:71:e3:0e:0a:a9:10:ab:bd:31:af:d8:b1:3f:c0:9a:b2:
1a:a8:10:0b:75:be:68:d8:e2:72:ec:32:8c:93:40:56:7f:16:
a2:dd:c7:9b:9d:d6:de:33:a6:13:ce:3c:b5:4e:d8:84:35:e7:
9c:f8:ee:3d:86:8b:d8:bb:d3:89:a5:f2:18:c0:52:ef:f4:fd:
5f:95:40:41:ab:a0:d1:e9:99:e5:42:89:72:8b:a9:e5:4f:89:
e4:19:8f:dc:86:9d:cf:de:a1:31:16:c7:16:ba:72:48:48:ba:
3d:4b:1d:0d:33:74:50:5f:7c:f8:d6:97:70:da:f5:83:a0:b2:
bf:d1:70:5e:26:ca:b2:54:34:f8:c0:3f:cc:e4:dd:14:12:03:
81:60:fb:65:0f:f9:8e:2a:32:35:52:20:63:93:33:bd:21:26:
0f:01:72:de:eb:d4:93:84:7d:dd:f3:24:85:b4:ce:9b:df:ea:
ee:6b:ba:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org