Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jlU8ON_rfN2bP3l-KaXpMfXRD88.roa
File: jlU8ON_rfN2bP3l-KaXpMfXRD88.roa (raw, json)
Hash identifier: hinWnwiN19DGHyOkRFAuDjctDlig02HOexIvUL1a8nY=
Subject key identifier: 8E:55:3C:38:DF:EB:7C:DD:9B:3F:79:7E:29:A5:E9:31:F5:D1:0F:CF
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184ECB0856BE0E538687A308956FD8DA906
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jlU8ON_rfN2bP3l-KaXpMfXRD88.roa
Signing time: Wed 07 Dec 2022 13:05:02 +0000
ROA not before: Wed 07 Dec 2022 13:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 163.5.227.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ec:b0:85:6b:e0:e5:38:68:7a:30:89:56:fd:8d:a9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 7 13:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e553c38dfeb7cdd9b3f797e29a5e931f5d10fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a4:5a:ec:60:b0:6c:87:89:8d:34:2a:a9:63:
52:86:b9:70:65:d5:38:f2:35:21:03:70:7d:6b:6a:
aa:2c:1e:c2:15:fd:5d:28:f4:ce:3c:6b:7b:a4:cc:
d9:8c:96:f7:99:6a:65:a7:90:b2:79:21:43:30:a1:
fc:fe:1b:72:db:af:07:6c:2b:aa:47:ac:7e:1d:d2:
4e:84:7a:37:b9:ed:20:19:b9:8a:ac:8e:2a:9b:de:
12:2c:5a:99:2a:1d:b4:43:56:f6:ae:6b:84:45:94:
60:7f:13:90:81:84:ab:8f:6b:a8:59:46:f2:68:21:
bb:e3:c5:9f:af:de:2d:54:e2:51:05:b7:6a:13:17:
e3:45:97:d9:c4:ad:03:8c:08:9c:89:52:d3:a1:4d:
51:b4:ae:25:04:78:9e:59:db:e7:5d:5f:6b:be:f2:
fd:df:13:26:09:c0:da:03:e0:c9:f7:da:db:11:63:
65:d0:8b:e6:df:c5:b9:4c:e2:e6:54:ec:6f:b6:b7:
7e:67:0c:03:ba:9e:4e:66:4f:fe:9b:39:24:e5:d1:
84:09:1a:e5:be:7d:4f:a3:4e:f1:f9:a4:20:49:46:
2c:29:64:4f:e7:e7:8d:c9:ba:24:fa:12:cb:ed:10:
60:24:a7:94:bd:81:78:95:37:0f:9a:24:e9:6f:88:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:3C:38:DF:EB:7C:DD:9B:3F:79:7E:29:A5:E9:31:F5:D1:0F:CF
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/jlU8ON_rfN2bP3l-KaXpMfXRD88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.35.0/24
163.5.127.0/24
163.5.138.0/24
163.5.161.0/24
163.5.166.0/24
163.5.202.0/24
163.5.210.0/24
163.5.222.0/24
163.5.226.0/23
163.5.230.0/24
163.5.240.0/23
163.5.244.0/24
163.5.246.0/24
163.5.248.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f0:7c:fb:e4:e5:e3:d6:b4:f0:74:03:63:43:c4:61:85:81:
62:32:00:e0:28:e7:5b:e0:f8:bb:25:95:13:89:f7:33:29:87:
8a:dd:4f:4e:f3:6e:5e:5e:30:e0:29:8b:06:f8:b2:53:21:ee:
78:cd:48:11:80:75:e9:90:fc:62:72:18:64:74:25:1d:7f:a9:
88:82:7d:ca:ba:4d:85:5a:df:ca:aa:a9:00:bf:18:fc:50:33:
53:bb:c3:de:80:93:7b:ee:cd:9e:70:ab:a2:84:6a:fb:3d:14:
66:1c:e3:94:3e:48:7d:7b:b2:4a:a2:c4:15:02:ec:f0:81:e0:
7c:31:fd:51:c7:32:f2:df:a1:ad:e9:83:f6:de:40:50:fe:76:
c5:74:af:fa:01:ae:12:e2:a8:a0:23:59:09:76:e6:a0:6a:d1:
9c:b9:c0:96:8e:12:e8:49:d8:ce:5b:24:10:90:e2:20:dc:bb:
34:e9:87:fb:f1:7e:67:18:3b:ef:08:7d:5d:ec:5b:59:dd:d0:
71:41:d0:93:cd:e6:f0:d1:f1:50:eb:fb:98:07:eb:74:4d:86:
61:33:df:2b:35:26:f1:9c:2a:3f:bc:8e:14:80:a3:50:29:4b:
b5:ba:2a:aa:ab:ab:3c:7a:39:8e:e0:b0:be:4b:cb:47:d4:e8:
6e:e7:51:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org