Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hpk_CgYKHfyCUsHFkWBNdNCuXa8.roa
File: hpk_CgYKHfyCUsHFkWBNdNCuXa8.roa (raw, json)
Hash identifier: gEXyfDds6apGcHOY5qkw41Q43qPinVxFcklKwJP6vaw=
Subject key identifier: 86:99:3F:0A:06:0A:1D:FC:82:52:C1:C5:91:60:4D:74:D0:AE:5D:AF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184C2F70F3FB05CAB16E2D7DC4743351B11
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hpk_CgYKHfyCUsHFkWBNdNCuXa8.roa
Signing time: Tue 29 Nov 2022 10:38:01 +0000
ROA not before: Tue 29 Nov 2022 10:38:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c2:f7:0f:3f:b0:5c:ab:16:e2:d7:dc:47:43:35:1b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 29 10:38:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=86993f0a060a1dfc8252c1c591604d74d0ae5daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ba:35:3f:19:46:00:c4:f9:41:b0:4b:97:83:
37:c6:16:69:c5:5c:df:1d:a5:c6:86:68:97:af:8f:
31:16:d6:6b:10:bb:7d:bd:11:c8:89:5e:dc:6c:01:
ed:9d:b2:50:1c:90:af:57:1a:4b:7e:09:2a:25:85:
8b:d4:35:f3:68:40:10:15:24:b1:53:b8:52:d5:95:
af:0f:c7:4e:7f:5f:24:e3:51:7d:3e:8d:f1:af:b3:
f8:94:70:f7:dc:ab:a1:7b:d0:87:11:ed:48:ae:6f:
be:58:b6:f5:bb:06:54:a5:07:3d:bb:30:f4:72:a9:
bb:60:c3:94:bc:bd:8d:96:e1:b9:85:11:51:4f:2c:
2c:0c:10:15:95:9a:83:18:7f:6c:98:97:af:73:0e:
f8:5b:72:c3:c2:1e:a5:7e:cd:f8:f5:51:f8:a5:d0:
62:5c:e6:d3:4d:dd:ea:ef:6d:76:81:36:3b:7b:b4:
76:69:8b:65:9e:2e:a0:dc:25:e8:53:01:53:84:ef:
88:75:0f:07:73:4d:2d:92:c3:6d:83:44:b1:ec:4a:
6e:31:c8:f6:42:6f:5f:35:af:2f:4e:a3:41:ca:2f:
05:49:6f:5b:af:26:59:90:64:b6:85:fb:01:26:65:
18:3f:f3:3b:6d:09:a4:61:de:4d:7d:2e:63:69:d2:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:3F:0A:06:0A:1D:FC:82:52:C1:C5:91:60:4D:74:D0:AE:5D:AF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/hpk_CgYKHfyCUsHFkWBNdNCuXa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.33.0-163.5.34.255
163.5.37.0-163.5.39.255
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.124.0/24
163.5.131.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f2:f2:be:a2:7b:52:0e:c3:b2:44:4a:51:c8:c6:8d:e1:4f:
b4:e1:9c:ad:06:a3:ff:5f:46:24:76:16:86:19:15:65:7a:5c:
b2:16:66:c0:29:99:e3:90:47:6f:11:77:24:c6:65:af:97:46:
94:fc:99:9e:d0:fd:0e:79:42:70:f6:1d:4b:05:53:fa:d9:10:
61:b9:ee:67:49:fa:a8:4d:5d:35:94:b2:6b:46:02:fd:d7:3c:
72:fe:39:ca:d2:d0:58:2f:42:4a:e5:ab:02:1f:f1:5e:68:6f:
a6:40:21:e1:4c:00:3d:2c:c7:42:75:05:be:5d:21:64:4a:7f:
ee:a7:12:26:86:78:7c:67:a8:03:e4:d5:68:0c:5c:75:ea:b5:
22:b8:5d:51:9f:d5:19:62:98:bc:18:42:26:28:6a:8f:62:13:
42:ae:19:ea:82:48:96:3d:e1:e2:46:f2:8a:46:41:97:db:70:
5d:c4:07:bd:64:69:d9:29:e5:76:e7:d6:13:b6:d9:8e:8b:d6:
cf:79:56:f5:73:01:2f:d7:69:bc:0b:f2:f0:df:b4:87:ec:98:
6f:52:38:e2:0b:84:65:88:be:12:8e:37:02:9e:9c:27:2f:28:
29:71:68:69:63:c6:97:8c:fa:07:78:c4:b9:45:5b:ca:ea:8b:
57:bc:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org