Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gIWv_VctGwaA14nu4M4jnSnBu3k.roa
File: gIWv_VctGwaA14nu4M4jnSnBu3k.roa (raw, json)
Hash identifier: pDXSsi0JQYypv2C8FepL3QcSUeqtIXba7e/MbWAPkjs=
Subject key identifier: 80:85:AF:FD:57:2D:1B:06:80:D7:89:EE:E0:CE:23:9D:29:C1:BB:79
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01839DC8D657F35E006E705FE2E3EFC501A2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gIWv_VctGwaA14nu4M4jnSnBu3k.roa
Signing time: Mon 03 Oct 2022 12:18:48 +0000
ROA not before: Mon 03 Oct 2022 12:18:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:c8:d6:57:f3:5e:00:6e:70:5f:e2:e3:ef:c5:01:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 3 12:18:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8085affd572d1b0680d789eee0ce239d29c1bb79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:91:24:fc:a9:10:28:99:72:38:8a:3c:b1:
33:9f:24:1c:e1:d6:0e:70:c1:1e:f6:e0:14:d3:4e:
d3:76:50:2d:7b:a3:73:01:d0:ae:26:5f:5a:bc:be:
b1:94:9d:ca:e7:cb:ba:5a:8d:b6:ff:5d:a2:d5:04:
09:e4:d7:bc:b9:69:36:1a:71:41:67:e8:ab:93:e0:
76:66:c7:ca:0e:ac:d3:e5:d0:f9:59:b0:7d:be:de:
5e:c5:ba:42:e5:b1:c7:44:16:50:9b:e7:e0:9e:fc:
74:68:e1:7d:0c:0a:d9:97:8d:3d:13:e9:60:b4:b2:
f7:3f:73:b4:08:1e:38:df:6c:f9:b3:05:61:01:06:
a2:ef:21:5c:21:04:24:fb:8f:0f:20:1f:2b:67:dc:
68:40:8d:97:66:82:d3:9b:2b:c7:a4:c6:58:ea:7f:
91:96:1a:41:9c:f1:9a:af:27:b2:7f:13:3e:a4:0f:
67:2a:fe:a5:30:30:56:66:b1:da:ab:22:37:e6:12:
8f:7a:c1:1a:e6:08:20:39:47:52:9e:cd:57:73:0e:
3c:35:b1:99:fd:2e:59:fb:34:f5:94:fe:db:35:4c:
6d:e3:6c:54:6d:69:04:6c:a0:83:39:61:9d:e6:aa:
29:c2:ba:bb:75:1d:67:61:f5:75:2c:60:32:7f:7d:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:85:AF:FD:57:2D:1B:06:80:D7:89:EE:E0:CE:23:9D:29:C1:BB:79
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/gIWv_VctGwaA14nu4M4jnSnBu3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.94.0/23
163.5.113.0/24
163.5.116.0/24
163.5.127.0/24
163.5.132.0/23
163.5.136.0/24
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:7c:2b:21:2f:3b:92:39:40:13:b3:05:48:ec:e9:15:1b:87:
b6:f0:d2:69:0b:91:bd:0c:71:be:f8:59:06:f0:b7:fd:c6:dc:
f6:24:8d:2f:a7:74:58:b2:41:44:b4:40:fd:b8:e9:58:46:35:
de:0c:36:a5:7d:01:e4:6a:08:df:e2:b6:55:1a:f2:cb:b8:fd:
5d:be:e6:9d:3f:7d:ab:0e:fb:f3:8e:a7:cf:e6:6a:35:bf:9d:
ba:65:9c:6b:78:e7:33:8d:34:94:a4:fc:dc:11:8d:83:76:b3:
f0:fb:cd:e8:35:33:50:a9:28:22:f7:7f:59:9c:83:9a:1b:ea:
27:34:5a:24:07:ad:c4:99:7f:e7:c1:2e:66:41:19:1b:c4:4e:
f5:2a:ce:8a:d0:72:30:96:b9:aa:d9:63:31:cb:1b:be:72:72:
ee:e9:93:ab:0e:48:40:6b:15:bb:2c:20:91:9c:69:42:31:a0:
2d:62:1a:fc:fa:31:5e:f2:a9:40:8c:c4:18:bd:ad:f8:e0:79:
99:74:c2:8c:20:76:69:f3:34:61:a4:3f:5a:e5:a1:1f:c4:57:
88:5c:5f:28:4a:b2:7d:10:de:75:94:c0:b6:1a:19:c0:6d:d0:
38:f8:4a:94:e7:2c:03:16:a9:6b:c7:39:11:c1:25:b5:da:19:
14:22:75:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org