Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eNBInO6vQ_m_fIT0jrEh4lMYfFM.roa
File: eNBInO6vQ_m_fIT0jrEh4lMYfFM.roa (raw, json)
Hash identifier: WtOk7URBVj+hif+XvKWmhpYT7PMWxQJo7NMyOa9kAds=
Subject key identifier: 78:D0:48:9C:EE:AF:43:F9:BF:7C:84:F4:8E:B1:21:E2:53:18:7C:53
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0182A6D2A3FB82252CDE4FF6302CF9C4F6CC
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eNBInO6vQ_m_fIT0jrEh4lMYfFM.roa
Signing time: Tue 16 Aug 2022 13:23:18 +0000
ROA not before: Tue 16 Aug 2022 13:23:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a6:d2:a3:fb:82:25:2c:de:4f:f6:30:2c:f9:c4:f6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 16 13:23:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78d0489ceeaf43f9bf7c84f48eb121e253187c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:76:47:50:c8:86:3a:06:9d:1f:ca:38:7a:11:
58:a8:ab:18:fc:0e:50:87:53:f5:da:81:35:03:d9:
cd:26:09:20:0b:14:e1:2e:d3:11:b7:4f:58:d8:ae:
ff:b0:97:dc:33:a4:b4:c4:b3:6c:c2:23:8c:d9:c1:
9c:62:db:9f:1b:bc:18:27:b9:32:0c:77:e5:dc:a7:
c1:81:46:fa:a7:43:0e:95:f8:1e:84:c3:0e:7d:9e:
67:d7:d7:b2:af:0c:4a:05:e5:ce:3d:64:22:a1:c7:
f9:7d:76:bb:6e:b2:99:f2:ac:c9:f3:fc:0f:b8:1b:
f3:e9:6b:f4:38:d3:a6:d0:73:3d:51:05:10:4e:6f:
6e:ce:ce:14:d8:48:8a:f9:75:dd:fc:09:9f:3e:78:
2c:b5:c6:dc:e4:fe:88:5f:86:f5:9a:3d:04:11:86:
cf:4a:e9:2e:48:be:ba:5a:5c:95:13:2b:e8:14:eb:
a3:49:3d:73:6e:58:ce:04:d4:a8:ff:d1:37:14:ad:
88:52:c6:48:3a:a9:4a:41:77:6d:a7:b9:c4:99:4d:
f0:d1:c4:ee:43:b4:57:38:a4:c0:d1:c9:21:76:9c:
76:0b:eb:a8:74:e1:9e:1b:aa:e4:0f:7a:bb:ff:88:
57:95:df:9b:9b:22:3f:c0:e2:f9:79:ce:b5:b6:c3:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D0:48:9C:EE:AF:43:F9:BF:7C:84:F4:8E:B1:21:E2:53:18:7C:53
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/eNBInO6vQ_m_fIT0jrEh4lMYfFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.155.0-163.5.157.255
163.5.170.0-163.5.178.255
163.5.180.0/24
163.5.182.0-163.5.189.255
163.5.194.0-163.5.201.255
163.5.203.0-163.5.209.255
Signature Algorithm: sha256WithRSAEncryption
02:8b:e8:2c:d0:1d:c7:3b:a9:83:32:af:75:90:5b:fb:30:78:
13:4e:1a:af:09:93:2c:fb:18:00:87:47:1b:38:0e:e7:f9:7d:
57:88:09:ea:5b:e8:96:59:c0:c5:53:ff:29:84:fc:74:9a:8a:
44:da:a4:80:3f:e8:09:1d:75:02:9a:08:d4:5b:e2:4e:a4:d2:
a7:8b:20:70:70:d5:4e:25:2d:6f:49:88:5b:36:6e:34:0b:80:
f1:08:5c:d3:b6:06:3e:df:09:46:a1:0e:75:9f:96:f0:0a:16:
5a:84:45:ce:a0:dc:b4:ed:5a:d0:ac:73:76:67:0b:23:11:88:
56:2b:23:0e:4b:a3:af:46:85:8d:03:8c:73:69:7d:05:6e:51:
8c:38:36:b6:ca:01:fc:37:5d:65:ac:3a:0b:ce:50:59:5a:37:
48:28:71:05:57:46:70:05:64:6b:7d:57:0e:48:ea:77:80:e6:
3c:b2:7b:7a:6a:73:2e:1c:74:6f:7c:68:73:af:d6:b7:0b:c6:
1f:5b:97:2b:24:66:92:59:79:73:7a:b6:3b:80:23:ef:88:01:
fd:aa:9f:2e:5f:86:f8:ba:13:18:7a:11:37:90:53:ff:ce:95:
23:2b:d7:42:d9:f9:4c:fe:15:19:ea:4f:c8:c1:4a:3e:22:39:
6a:7b:85:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:10 2023 by rpki-client on console-ams.rpki-client.org