Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n8LBj8nRmx5OzkFiFCuJt6vrXcc.roa
File: n8LBj8nRmx5OzkFiFCuJt6vrXcc.roa (raw, json)
Hash identifier: +jOZlCcJUrHFkoahCaclCwzvBN21/E2Kr/V2ptr3fqs=
Subject key identifier: 9F:C2:C1:8F:C9:D1:9B:1E:4E:CE:41:62:14:2B:89:B7:AB:EB:5D:C7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01852511665A31A059617B1224E2061E85D1
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n8LBj8nRmx5OzkFiFCuJt6vrXcc.roa
Signing time: Sun 18 Dec 2022 11:49:35 +0000
ROA not before: Sun 18 Dec 2022 11:49:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212815
IP address blocks: 163.5.192.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:11:66:5a:31:a0:59:61:7b:12:24:e2:06:1e:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 18 11:49:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fc2c18fc9d19b1e4ece4162142b89b7abeb5dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:48:99:d8:8f:29:79:37:5a:32:2f:01:16:6e:
0e:cc:c9:20:98:b2:8c:b3:c4:d3:89:11:d5:e0:32:
57:9a:24:56:09:8e:0c:f7:1f:55:8a:c3:14:40:79:
59:df:49:51:aa:42:26:96:39:a5:e3:2a:91:c1:4d:
d4:33:9a:aa:83:aa:84:7e:4c:71:a4:b2:cf:0a:b4:
44:7e:8e:ee:8c:07:5c:46:8d:b8:b7:f9:ba:c6:2e:
10:cc:07:92:4f:79:67:49:b6:85:e5:54:1c:e1:2d:
7a:9c:99:6a:54:7f:c4:79:99:c6:da:87:c2:9d:00:
30:07:b8:33:79:18:fe:25:aa:4d:9c:77:99:74:af:
c8:64:da:e5:ac:b7:29:0d:7b:2a:0d:a2:2d:f1:1c:
ff:a5:fa:09:56:b2:dd:6a:69:08:66:6d:fc:8a:70:
56:91:18:26:e5:52:6e:18:ec:8c:ce:70:24:cf:40:
9b:f0:bf:b0:63:2d:d2:72:e7:5d:61:dd:c4:f5:fe:
7a:a9:ab:1e:6b:26:f9:75:5a:14:6a:df:cd:ea:7f:
81:d9:4d:f8:a5:5e:34:20:4c:c7:55:62:10:fd:ae:
7a:f1:04:33:d7:02:3a:e2:16:ad:95:b6:e8:bc:b8:
91:36:ff:97:d3:04:ab:8f:69:4b:17:85:33:6f:ff:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:C1:8F:C9:D1:9B:1E:4E:CE:41:62:14:2B:89:B7:AB:EB:5D:C7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/n8LBj8nRmx5OzkFiFCuJt6vrXcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.120.0/24
163.5.143.0/24
163.5.154.0/24
163.5.192.0/24
163.5.214.0/24
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:86:d7:21:06:2d:93:58:c1:1f:aa:02:df:7d:9a:de:c6:7d:
02:d3:7d:ee:bf:98:1c:5c:24:6e:d7:55:77:89:9f:6a:13:3b:
44:b9:ce:b2:31:90:25:f1:77:dd:b7:49:2e:23:89:ef:aa:a5:
80:30:9f:04:91:53:39:03:e6:01:0c:21:fe:53:f4:36:2d:82:
08:b4:e8:9e:b6:75:cd:8f:a2:1f:10:95:a9:1d:ca:26:96:17:
05:51:27:3f:a3:28:de:b6:f0:a6:f4:f3:6a:6f:ce:46:d7:ba:
6b:13:56:c6:ed:b2:bc:10:62:c3:d1:20:5f:8e:b3:1d:e0:92:
b3:c3:e0:52:43:d9:10:af:cd:59:83:f7:e0:d8:28:62:8b:04:
4a:ac:fe:d1:06:3d:23:d7:bd:f3:33:50:6f:e1:00:0a:de:53:
c7:8a:72:3f:86:66:4e:bc:6a:14:ae:2c:88:e5:f6:f4:57:4c:
7a:0a:c1:a1:17:6d:ac:e9:c0:c1:26:35:be:11:35:7d:c7:e9:
d6:34:88:6f:87:a7:4b:25:f3:2e:9c:03:a8:21:9b:50:7c:4d:
5c:12:fb:68:0a:c8:80:0c:3f:2b:23:37:7e:61:f9:d2:65:01:
10:9f:bb:5b:1e:74:61:62:46:00:4a:02:e9:3b:04:6f:92:37:
59:0f:d7:1f
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYUlEWZaMaBZYXsSJOIGHoXRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjE4MTE0OTM1WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmMyYzE4ZmM5ZDE5YjFlNGVjZTQxNjIxNDJiODliN2FiZWI1ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkiZ2I8peTdaMi8BFm4OzMkgmLKM
s8TTiRHV4DJXmiRWCY4M9x9VisMUQHlZ30lRqkImljml4yqRwU3UM5qqg6qEfkxx
pLLPCrREfo7ujAdcRo24t/m6xi4QzAeST3lnSbaF5VQc4S16nJlqVH/EeZnG2ofC
nQAwB7gzeRj+JapNnHeZdK/IZNrlrLcpDXsqDaIt8Rz/pfoJVrLdamkIZm38inBW
kRgm5VJuGOyMznAkz0Cb8L+wYy3ScuddYd3E9f56qaseayb5dVoUat/N6n+B2U34
pV40IEzHVWIQ/a568QQz1wI64hatlbbovLiRNv+X0wSrj2lLF4Uzb//vxwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFJ/CwY/J0ZseTs5BYhQriber613HMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvbjhMQmo4blJteDVPemtGaUZDdUp0NnZyWGNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAowV4AwQA
owWPAwQAowWaAwQAowXAAwQAowXWAwQAuf02MA0GCSqGSIb3DQEBCwUAA4IBAQBc
htchBi2TWMEfqgLffZrexn0C033uv5gcXCRu11V3iZ9qEztEuc6yMZAl8Xfdt0ku
I4nvqqWAMJ8EkVM5A+YBDCH+U/Q2LYIItOietnXNj6IfEJWpHcomlhcFUSc/oyje
tvCm9PNqb85G17prE1bG7bK8EGLD0SBfjrMd4JKzw+BSQ9kQr81Zg/fg2ChiiwRK
rP7RBj0j173zM1Bv4QAK3lPHinI/hmZOvGoUriyI5fb0V0x6CsGhF22s6cDBJjW+
ETV9x+nWNIhvh6dLJfMunAOoIZtQfE1cEvtoCsiADD8rIzd+YfnSZQEQn7tbHnRh
YkYASgLpOwRvkjdZD9cf
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org