Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cgd6n4hzA_45b9OR8JEOKa9IKm8.roa
File: cgd6n4hzA_45b9OR8JEOKa9IKm8.roa (raw, json)
Hash identifier: 9E27KfckHomZXPbiDDTJo3Rqub+xioiNjCPTZuzQ0uM=
Subject key identifier: 72:07:7A:9F:88:73:03:FE:39:6F:D3:91:F0:91:0E:29:AF:48:2A:6F
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184ECA49858DFD54FFE3CA8B7B896888661
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cgd6n4hzA_45b9OR8JEOKa9IKm8.roa
Signing time: Wed 07 Dec 2022 12:52:00 +0000
ROA not before: Wed 07 Dec 2022 12:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:a4:98:58:df:d5:4f:fe:3c:a8:b7:b8:96:88:86:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 7 12:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72077a9f887303fe396fd391f0910e29af482a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:82:2e:05:40:57:67:83:1b:37:70:99:f1:8e:
5d:6d:b1:3e:c2:05:6d:69:80:1e:4d:80:8e:58:7b:
30:b4:f4:33:89:71:a6:73:2b:bf:54:38:03:42:bc:
24:f6:3e:de:95:00:f7:e0:b7:2f:8d:60:2d:1c:de:
b8:84:b3:7a:42:c1:b3:29:49:e2:2c:84:8b:23:ec:
f6:34:77:2f:7a:a9:6d:d4:26:c6:4a:c1:b1:56:c3:
0f:6f:7d:19:ad:d9:ab:7b:52:90:ec:96:e0:2e:ed:
4a:80:b8:8e:a2:dd:04:e0:12:93:13:e3:30:ea:f3:
1e:6a:0f:91:60:d7:e8:d6:58:f9:cb:7c:ee:a4:ad:
d4:41:04:b8:02:56:a8:8c:54:1f:b8:51:1d:fa:55:
1a:c5:11:d9:7b:e7:a6:1a:27:5f:c7:7a:21:8c:72:
b6:9f:d3:14:be:1e:2f:12:11:11:e1:66:56:04:25:
f6:a0:20:cb:b3:d2:3b:d5:5c:fe:05:02:6b:57:ab:
b9:f3:38:85:ce:2d:a0:74:af:7c:e9:aa:40:08:cb:
11:8f:ab:83:50:c4:fd:89:a8:98:a9:ff:9d:06:aa:
5d:72:90:1f:19:96:bf:51:1e:05:6d:d5:9b:dd:5c:
7e:75:14:96:60:51:11:0e:8e:50:3e:61:df:a7:a0:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:07:7A:9F:88:73:03:FE:39:6F:D3:91:F0:91:0E:29:AF:48:2A:6F
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cgd6n4hzA_45b9OR8JEOKa9IKm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.31.0/24
163.5.33.0-163.5.34.255
163.5.37.0-163.5.39.255
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.124.0/24
163.5.131.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e0:81:f6:3d:34:46:91:a5:43:4a:43:04:c5:7e:68:b2:d3:
b6:59:be:15:1d:90:42:13:82:74:be:47:0c:6c:6b:73:ae:0e:
cf:78:b9:72:3e:b0:de:61:f8:91:eb:7b:0f:43:ea:d0:6e:c3:
8a:17:26:39:05:7d:66:fd:70:ec:6e:e9:cf:f2:bd:cd:aa:3d:
11:5f:1f:1f:be:47:78:7b:86:68:65:79:c0:ce:61:26:08:43:
f2:70:29:c5:7f:9b:3b:8e:76:0a:ee:92:6a:5c:dc:31:a4:c3:
ab:78:51:fe:90:b0:69:29:01:4e:1f:86:b6:12:e5:59:34:d1:
8d:e9:51:99:04:df:aa:79:38:04:2e:9d:fd:d2:de:22:72:03:
15:c5:3a:2f:a8:0a:90:3a:a4:e2:c2:b5:51:6a:d6:f9:a3:b0:
9f:9c:6f:d7:e0:e0:34:f9:1f:6e:87:f8:44:fc:b8:04:d1:6e:
ac:11:0f:92:fa:94:0f:3e:e2:af:09:37:11:65:5e:dc:69:6f:
8c:ba:9d:4f:e8:43:62:46:8e:51:ec:2b:5d:e3:b5:59:16:eb:
b4:f8:76:f8:ff:4f:82:c4:b4:a2:fa:4a:c5:1f:1f:56:d6:1b:
8f:6f:a7:94:b0:0c:ce:4e:09:46:d0:2b:ff:d2:c8:92:cb:d5:
3b:cb:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org