Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fjRTkgRmzptpFnH3Tur8r6SZzEw.roa
File: fjRTkgRmzptpFnH3Tur8r6SZzEw.roa (raw, json)
Hash identifier: SKGOhMo6uqyjXAjyGRrdXjH04cUrdHJq5d+2LSdnQkc=
Subject key identifier: 7E:34:53:92:04:66:CE:9B:69:16:71:F7:4E:EA:FC:AF:A4:99:CC:4C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01827CE9D98F37FB85563B9AFB71BEB91328
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fjRTkgRmzptpFnH3Tur8r6SZzEw.roa
Signing time: Mon 08 Aug 2022 10:04:36 +0000
ROA not before: Mon 08 Aug 2022 10:04:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:e9:d9:8f:37:fb:85:56:3b:9a:fb:71:be:b9:13:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 10:04:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7e3453920466ce9b691671f74eeafcafa499cc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:68:5d:30:13:21:dc:87:35:77:e5:73:d9:
c6:78:45:7a:e3:36:8d:90:c6:77:0d:e9:14:f4:87:
ce:3e:9e:19:9e:f7:10:07:b1:ba:fc:77:b3:45:0b:
e0:fb:34:bd:60:85:db:28:55:18:ab:f2:ed:17:7f:
e9:ab:8f:03:1c:2c:b0:da:ba:ad:d1:eb:69:de:ca:
39:30:dd:f6:35:23:16:b1:11:59:4e:b0:8c:90:40:
f0:1e:bb:8d:21:d1:a7:d7:2b:fe:d6:29:15:ff:b1:
5f:ed:20:aa:76:d7:63:a0:b8:78:c3:83:99:f1:19:
56:8b:e9:b7:c9:35:ea:dc:d1:ce:7f:36:76:e5:0c:
69:d6:ef:8a:76:65:83:72:91:ed:12:c3:61:e6:65:
2f:97:17:60:39:59:40:0d:66:f1:d1:4e:00:a0:cd:
ac:7a:6a:a6:8b:af:b7:1e:81:c2:21:d1:9c:70:b3:
af:3a:38:e7:0d:e0:ef:4c:8f:e8:3b:1a:68:e5:2f:
fc:49:c7:71:ee:aa:c6:30:10:f5:81:78:8c:6a:51:
06:36:24:73:2a:18:95:03:4c:21:cb:1a:1e:fc:fa:
85:1a:aa:21:fb:5a:dd:d8:0a:f0:59:6d:6d:b8:a0:
66:04:00:73:87:19:08:25:5e:05:ad:9c:26:76:01:
72:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:34:53:92:04:66:CE:9B:69:16:71:F7:4E:EA:FC:AF:A4:99:CC:4C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/fjRTkgRmzptpFnH3Tur8r6SZzEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.127.0-163.5.209.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c9:48:a7:ea:31:b3:7d:28:f8:ec:ee:ff:78:94:2d:7b:ee:
b3:c6:cf:16:2a:bd:55:c9:35:92:b8:e8:2d:f4:2b:18:62:fa:
aa:8f:a1:b3:de:61:ed:5f:5b:b2:5f:28:28:55:8a:eb:95:15:
1e:da:84:76:c9:81:0a:f6:3a:89:08:d0:27:ab:b7:b4:a7:57:
ac:c1:59:60:80:4f:e9:d3:11:ef:17:6a:47:d9:9a:92:af:59:
78:4b:7a:f9:5f:26:31:c1:77:51:77:10:58:13:49:f3:e7:12:
9d:7c:41:fc:cc:0b:32:f4:cb:9a:3f:49:f8:a4:12:be:08:46:
62:78:e8:c3:e7:9e:dc:72:70:3d:e6:f6:95:dc:8f:d0:c8:e7:
81:da:ab:5a:b4:7b:e4:f1:42:51:f2:0b:3f:88:6d:22:db:23:
c4:f7:aa:c0:64:83:52:63:6c:95:14:e5:b9:35:37:26:26:53:
51:d3:52:04:fa:76:8b:3b:73:be:91:87:c4:ed:fb:59:23:af:
78:56:a2:37:5a:de:6c:ab:6a:38:f4:fd:61:4b:24:23:30:18:
17:27:ff:ac:8d:00:b5:36:e6:a6:35:9b:96:b2:d5:cf:1f:03:
83:7c:d9:2b:cb:05:48:b6:7c:b4:27:62:fb:b0:89:53:f5:69:
1f:a8:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org