Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cojaFYWVoD2U_o7Cvhgbi49ETu4.roa
File: cojaFYWVoD2U_o7Cvhgbi49ETu4.roa (raw, json)
Hash identifier: gauORoX0KxRBMg2tll/7nJcA3i15cx3fwwOTwTho3pM=
Subject key identifier: 72:88:DA:15:85:95:A0:3D:94:FE:8E:C2:BE:18:1B:8B:8F:44:4E:EE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01836BB94F6A1EC791E2895849AF1DCB9577
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cojaFYWVoD2U_o7Cvhgbi49ETu4.roa
Signing time: Fri 23 Sep 2022 19:00:50 +0000
ROA not before: Fri 23 Sep 2022 19:00:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 163.5.112.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6b:b9:4f:6a:1e:c7:91:e2:89:58:49:af:1d:cb:95:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 23 19:00:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7288da158595a03d94fe8ec2be181b8b8f444eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:c2:6e:b5:5d:73:5a:2d:ab:1f:d3:6b:e5:
7a:fb:f6:59:95:b6:fb:3d:de:1c:a5:49:e4:78:7d:
06:22:b9:1f:fc:0a:a5:d2:f2:3e:9f:1c:6d:2d:5b:
6e:27:16:a4:b6:44:46:be:65:87:8b:6f:ab:18:11:
20:d3:80:ea:c6:81:40:be:dc:10:73:b0:fd:a4:ac:
d7:d4:6b:69:ab:c4:34:cd:15:57:31:46:31:af:a7:
1f:70:31:a8:fa:51:39:53:01:6c:77:8c:76:6d:b6:
01:fc:6d:a7:d4:0a:ef:fc:15:df:01:30:26:2e:8c:
6e:49:a8:33:f1:87:fd:86:b5:4f:44:31:44:cd:52:
5e:cc:5b:15:ab:11:a0:d2:dc:74:1d:6d:f0:96:3f:
c2:db:09:d6:d2:ee:5b:ef:0d:a7:75:81:dd:51:9f:
9e:f4:e5:bf:56:3b:f5:d0:dd:96:d8:14:47:9d:ed:
65:76:8e:76:dd:dc:ff:00:3c:13:ae:3e:99:44:90:
9c:c4:a4:b7:0e:51:04:01:23:fb:a0:a7:5a:b9:24:
85:d8:07:bd:02:dd:c4:46:be:84:89:be:d5:2a:12:
4c:ed:78:f5:3e:3e:45:2d:43:b0:9f:59:78:69:65:
e4:16:eb:bd:24:96:87:19:ea:aa:90:f2:e6:65:d0:
53:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:88:DA:15:85:95:A0:3D:94:FE:8E:C2:BE:18:1B:8B:8F:44:4E:EE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/cojaFYWVoD2U_o7Cvhgbi49ETu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.112.0/24
163.5.114.0/24
163.5.130.0/24
163.5.140.0-163.5.142.255
163.5.236.0/24
163.5.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b6:b8:52:70:58:a6:1b:79:36:e2:dc:0e:e3:c2:27:d8:d8:
e3:4b:23:3f:d7:d9:98:d8:3d:50:c8:74:28:2c:32:11:3d:04:
29:07:5d:54:e3:4e:ac:f8:c0:2a:97:b5:39:cc:ba:13:0f:35:
e4:30:84:22:33:fe:65:63:b2:3f:e3:54:34:88:89:37:f1:72:
d9:59:00:e5:c5:e7:b4:53:e7:a5:a2:c9:25:d1:9a:98:32:02:
32:3e:89:28:68:d5:e6:32:be:c5:7f:60:73:90:13:af:6c:32:
96:1b:75:97:45:ff:7a:cb:01:3e:5c:26:f4:39:58:49:b4:7e:
d9:f9:01:12:67:14:34:e8:8a:83:87:59:74:bd:63:8d:99:4e:
ef:7f:b0:9e:6c:cf:15:3a:04:ee:86:1c:a4:f9:93:01:88:27:
79:e8:ba:b0:2f:47:4a:1c:56:aa:51:5c:ef:09:6b:70:b5:0f:
1a:61:91:11:64:20:e9:d1:57:ba:14:d2:87:08:16:fa:45:4d:
ed:23:27:57:48:c3:5f:b0:0b:6b:a7:d0:44:fe:e9:ac:d6:2d:
5a:d6:e2:97:9c:36:c5:46:30:43:7f:26:51:c2:d1:61:4c:a1:
64:21:4a:dd:12:44:e7:1b:26:d6:bc:66:8b:f8:4f:c7:66:81:
41:40:60:4a
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYNruU9qHseR4olYSa8dy5V3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwOTIzMTkwMDUwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjg4ZGExNTg1OTVhMDNkOTRmZThlYzJiZTE4MWI4YjhmNDQ0ZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Q7CbrVdc1otqx/Ta+V6+/ZZlbb7
Pd4cpUnkeH0GIrkf/Aql0vI+nxxtLVtuJxaktkRGvmWHi2+rGBEg04DqxoFAvtwQ
c7D9pKzX1Gtpq8Q0zRVXMUYxr6cfcDGo+lE5UwFsd4x2bbYB/G2n1Arv/BXfATAm
LoxuSagz8Yf9hrVPRDFEzVJezFsVqxGg0tx0HW3wlj/C2wnW0u5b7w2ndYHdUZ+e
9OW/Vjv10N2W2BRHne1ldo523dz/ADwTrj6ZRJCcxKS3DlEEASP7oKdauSSF2Ae9
At3ERr6Eib7VKhJM7Xj1Pj5FLUOwn1l4aWXkFuu9JJaHGeqqkPLmZdBTvQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFHKI2hWFlaA9lP6Owr4YG4uPRE7uMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvY29qYUZZV1ZvRDJVX283Q3ZoZ2JpNDlFVHU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAowVwAwQA
owVyAwQAowWCMAwDBAKjBYwDBACjBY4DBACjBewDBACjBfcwDQYJKoZIhvcNAQEL
BQADggEBAE+2uFJwWKYbeTbi3A7jwifY2ONLIz/X2ZjYPVDIdCgsMhE9BCkHXVTj
Tqz4wCqXtTnMuhMPNeQwhCIz/mVjsj/jVDSIiTfxctlZAOXF57RT56WiySXRmpgy
AjI+iSho1eYyvsV/YHOQE69sMpYbdZdF/3rLAT5cJvQ5WEm0ftn5ARJnFDToioOH
WXS9Y42ZTu9/sJ5szxU6BO6GHKT5kwGIJ3nourAvR0ocVqpRXO8Ja3C1DxphkRFk
IOnRV7oU0ocIFvpFTe0jJ1dIw1+wC2un0ET+6azWLVrW4pecNsVGMEN/JlHC0WFM
oWQhSt0SROcbJta8Zov4T8dmgUFAYEo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:21 2023 by rpki-client on console-fra.rpki-client.org