Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iSxT9yHort8FXVksEVviXFeR-Es.roa
File: iSxT9yHort8FXVksEVviXFeR-Es.roa (raw, json)
Hash identifier: 1smxsMB6/JhH68pQ0dX8dxZ4hHE/c8mJ9tInYJ69qLc=
Subject key identifier: 89:2C:53:F7:21:E8:AE:DF:05:5D:59:2C:11:5B:E2:5C:57:91:F8:4B
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018558F457B2B51647DBA55AEBDBE85FD7AB
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iSxT9yHort8FXVksEVviXFeR-Es.roa
Signing time: Wed 28 Dec 2022 13:38:06 +0000
ROA not before: Wed 28 Dec 2022 13:38:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:f4:57:b2:b5:16:47:db:a5:5a:eb:db:e8:5f:d7:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 28 13:38:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=892c53f721e8aedf055d592c115be25c5791f84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:52:ef:47:a7:80:6b:8e:f5:a2:c2:df:ab:
eb:31:cd:d4:6e:b8:d4:3a:08:42:c2:f4:19:1c:e8:
9a:c7:83:4f:c5:b3:18:00:72:62:92:61:e5:68:12:
a5:b4:f4:a2:2e:32:53:11:d0:9b:d9:71:de:43:74:
1b:a4:62:39:44:7a:18:ae:f7:11:d0:43:a1:a7:b4:
90:14:c8:a5:af:6c:fb:58:2a:e6:d1:70:cb:9d:9b:
46:37:95:18:a1:6f:f9:41:28:ce:be:b1:a8:8d:a8:
50:76:74:3f:ce:11:9c:c1:25:ae:a0:f7:dc:bb:6c:
8b:aa:6d:dd:e9:44:3d:4a:63:93:97:4e:ee:20:5b:
40:b9:48:d7:3d:3a:22:d6:1d:2f:66:d3:6a:29:7b:
10:a2:74:01:bb:e2:2e:e5:87:2d:b8:77:8d:4b:6a:
bb:a7:b2:c7:4b:7c:41:69:02:b5:88:f9:ab:e9:c3:
23:79:67:4c:fe:fd:e2:e7:52:6c:8d:cb:2a:dc:52:
07:6c:0b:48:23:2b:08:5c:dd:09:fa:ec:92:37:27:
f2:d0:60:a7:ce:bd:10:8f:d4:cd:16:82:ff:a9:b3:
88:1b:0b:ea:52:55:d8:34:57:05:6f:be:dd:b2:65:
9a:47:c6:fb:a3:ad:ec:54:2e:eb:94:e0:92:63:fa:
e4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:53:F7:21:E8:AE:DF:05:5D:59:2C:11:5B:E2:5C:57:91:F8:4B
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/iSxT9yHort8FXVksEVviXFeR-Es.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0-163.5.39.255
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.91.0-163.5.106.255
163.5.108.0/22
163.5.113.0-163.5.114.255
163.5.116.0-163.5.120.255
163.5.122.0/23
163.5.125.0-163.5.131.255
163.5.134.0/23
163.5.137.0-163.5.142.255
163.5.144.0/24
163.5.146.0-163.5.157.255
163.5.159.0-163.5.172.255
163.5.174.0-163.5.188.255
163.5.191.0-163.5.194.255
163.5.199.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.220.0-163.5.222.255
163.5.224.0-163.5.232.255
163.5.234.0/23
163.5.237.0-163.5.255.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5f:e7:97:2f:ee:fe:fa:72:8e:9e:33:24:bb:21:f1:0e:7b:
28:47:dc:47:eb:d5:93:dd:eb:90:df:e2:39:f9:5a:46:96:5c:
32:d7:d4:8c:90:01:ea:bd:14:52:5a:89:21:e1:0a:48:c4:64:
cb:70:6c:d7:8e:e3:f6:9d:0e:88:3c:db:02:96:93:f2:f9:ab:
67:94:87:f1:99:3a:6a:a1:07:ab:5f:a2:79:89:32:e7:ba:a4:
e4:48:86:88:d5:65:80:63:62:bb:9c:8e:8e:fe:1c:08:de:bf:
f3:a4:79:35:20:8d:05:6f:98:44:cb:ef:98:4b:42:63:2f:4c:
48:c7:6a:c9:4f:20:0c:2a:40:44:7b:4d:30:e6:7b:5b:dc:d5:
3c:42:87:e0:77:32:52:c5:ae:79:6c:01:21:12:1f:63:43:23:
37:1a:fc:49:44:00:a7:66:87:87:38:b1:6c:8b:9f:da:33:77:
61:13:0c:ad:9e:a4:b3:4f:f0:df:63:11:c4:28:9e:73:f4:f2:
8f:3e:e2:78:7e:cd:9d:db:2b:44:42:f9:56:42:31:c8:6e:35:
7b:21:71:8d:fd:2f:1d:4d:0f:91:79:73:fa:93:e6:2d:dc:e6:
43:9b:1f:04:1f:cc:a4:d9:03:67:fd:76:7b:e5:4e:5f:61:a1:
5a:c9:13:24
-----BEGIN CERTIFICATE-----
MIIGGDCCBQCgAwIBAgISAYVY9FeytRZH26Va69voX9erMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjI4MTMzODA2WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTJjNTNmNzIxZThhZWRmMDU1ZDU5MmMxMTViZTI1YzU3OTFmODRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvRS70engGuO9aLC36vrMc3UbrjU
OghCwvQZHOiax4NPxbMYAHJikmHlaBKltPSiLjJTEdCb2XHeQ3QbpGI5RHoYrvcR
0EOhp7SQFMilr2z7WCrm0XDLnZtGN5UYoW/5QSjOvrGojahQdnQ/zhGcwSWuoPfc
u2yLqm3d6UQ9SmOTl07uIFtAuUjXPToi1h0vZtNqKXsQonQBu+Iu5YctuHeNS2q7
p7LHS3xBaQK1iPmr6cMjeWdM/v3i51Jsjcsq3FIHbAtIIysIXN0J+uySNyfy0GCn
zr0Qj9TNFoL/qbOIGwvqUlXYNFcFb77dsmWaR8b7o63sVC7rlOCSY/rklwIDAQAB
o4IDJDCCAyAwHQYDVR0OBBYEFIksU/ch6K7fBV1ZLBFb4lxXkfhLMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvaVN4VDl5SG9ydDhGWFZrc0VWdmlYRmVSLUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOAYIKwYBBQUHAQcBAf8EggEnMIIBIzCCAR8EAgABMIIB
FzAMAwQBowUeAwQDowUgMAwDBAGjBUYDBACjBUgwDAMEAaMFSgMEBKMFQDAMAwQA
owVbAwQAowVqAwQCowVsMAwDBACjBXEDBACjBXIwDAMEAqMFdAMEAKMFeAMEAaMF
ejAMAwQAowV9AwQCowWAAwQBowWGMAwDBACjBYkDBACjBY4DBACjBZAwDAMEAaMF
kgMEAaMFnDAMAwQAowWfAwQAowWsMAwDBAGjBa4DBACjBbwwDAMEAKMFvwMEAKMF
wjAMAwQAowXHAwQAowXSAwQAowXVMAwDBAOjBdgDBACjBdowDAMEAqMF3AMEAKMF
3jAMAwQFowXgAwQAowXoAwQBowXqMAsDBACjBe0DAwGjBAMEALn9NjANBgkqhkiG
9w0BAQsFAAOCAQEAfV/nly/u/vpyjp4zJLsh8Q57KEfcR+vVk93rkN/iOflaRpZc
MtfUjJAB6r0UUlqJIeEKSMRky3Bs147j9p0OiDzbApaT8vmrZ5SH8Zk6aqEHq1+i
eYky57qk5EiGiNVlgGNiu5yOjv4cCN6/86R5NSCNBW+YRMvvmEtCYy9MSMdqyU8g
DCpARHtNMOZ7W9zVPEKH4HcyUsWueWwBIRIfY0MjNxr8SUQAp2aHhzixbIuf2jN3
YRMMrZ6ks0/w32MRxCiec/Tyjz7ieH7NndsrREL5VkIxyG41eyFxjf0vHU0PkXlz
+pPmLdzmQ5sfBB/MpNkDZ/12e+VOX2GhWskTJA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org