Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ostMYwT4K6tjGaOtmQwvxIkn8rI.roa
File: ostMYwT4K6tjGaOtmQwvxIkn8rI.roa (raw, json)
Hash identifier: q4QNMCuO0ISmBX1BvlZkRb7NtfWhc3iIDlW4zDaLq10=
Subject key identifier: A2:CB:4C:63:04:F8:2B:AB:63:19:A3:AD:99:0C:2F:C4:89:27:F2:B2
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01827C8D2D4E36466DC708F2088EA76FA3B4
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ostMYwT4K6tjGaOtmQwvxIkn8rI.roa
Signing time: Mon 08 Aug 2022 08:23:23 +0000
ROA not before: Mon 08 Aug 2022 08:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:8d:2d:4e:36:46:6d:c7:08:f2:08:8e:a7:6f:a3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 8 08:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a2cb4c6304f82bab6319a3ad990c2fc48927f2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:45:22:4e:30:b9:5a:43:97:a4:ef:95:5f:
a1:7c:d2:11:a9:bc:27:c6:18:df:cf:49:03:c5:00:
e1:fa:bc:bb:fd:ea:54:e7:5f:fe:54:8c:a1:97:41:
17:df:4a:c8:93:94:8f:27:70:44:fa:ea:a7:89:92:
77:9a:5b:c4:02:35:39:a4:19:3b:f5:29:e7:7c:a1:
02:27:f1:a8:98:19:0e:42:12:83:9b:11:b2:76:f7:
0f:9d:d8:ee:ce:a7:ca:49:77:1a:1f:dc:2b:88:3a:
23:38:84:82:57:a3:4c:48:3e:7c:63:a7:a3:bf:aa:
1d:37:d4:7a:38:bb:7a:ee:03:05:2d:19:01:24:f5:
6e:73:14:64:f2:0e:06:1d:15:e3:9d:36:20:f0:71:
ea:04:93:66:a7:54:7a:7b:f0:c1:33:60:cb:ac:20:
54:dd:2c:f8:2c:d0:fd:81:26:4d:4d:c0:ae:96:ad:
c7:52:4a:a4:9b:ca:df:28:d3:5c:56:05:85:88:f3:
c9:d6:84:44:91:85:3a:66:31:ac:c2:20:b9:f3:33:
e3:4f:af:f8:31:16:21:b6:4b:39:94:39:61:0d:be:
f8:c4:bf:60:33:75:f0:8a:54:9c:8a:28:0d:ef:ae:
9e:61:7f:a8:12:a7:ea:01:83:a7:ec:6c:0b:06:17:
89:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CB:4C:63:04:F8:2B:AB:63:19:A3:AD:99:0C:2F:C4:89:27:F2:B2
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/ostMYwT4K6tjGaOtmQwvxIkn8rI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.170.0-163.5.178.255
163.5.180.0/24
163.5.182.0-163.5.189.255
163.5.194.0-163.5.198.255
Signature Algorithm: sha256WithRSAEncryption
74:5b:ca:69:a3:9e:0e:2b:ba:7c:6a:0f:15:4a:81:1a:58:d2:
90:17:df:4a:a9:83:2a:3d:37:99:a6:6c:2a:e5:4d:36:8f:79:
8b:ba:95:fb:6a:d0:11:eb:31:22:d6:59:cb:fe:c1:d0:a4:91:
46:25:56:b7:ca:4c:bc:6b:16:cf:02:ec:95:c5:5e:d3:ac:f6:
44:81:40:08:80:16:aa:a9:21:8b:e4:8a:e7:55:c5:71:69:7f:
e9:2f:40:d6:92:b9:31:63:5e:f7:57:2f:05:fb:00:50:25:63:
57:41:77:7c:03:a5:36:45:59:e0:76:95:24:49:9d:ba:0c:83:
85:17:8f:fc:be:ee:b1:d0:ca:26:75:a9:ac:50:e0:b2:26:5f:
16:94:2b:fb:74:91:1f:75:42:27:98:fe:26:45:f3:b0:10:18:
9b:09:b5:25:0d:6d:75:19:49:39:e9:fc:d0:18:cf:d0:c8:61:
90:fc:9f:1c:33:14:6c:02:26:66:62:f5:78:6c:38:4b:b3:52:
5c:5d:70:79:02:e6:5f:21:28:9e:b6:d6:44:85:bb:b3:c1:67:
09:1f:50:0c:57:aa:cb:a9:04:d2:70:11:06:11:2d:41:33:1e:
b1:fe:3a:e3:ae:03:06:9c:b0:d4:45:a6:20:54:70:6c:60:cf:
4c:28:37:49
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYJ8jS1ONkZtxwjyCI6nb6O0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwODA4MDgyMzIzWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmNiNGM2MzA0ZjgyYmFiNjMxOWEzYWQ5OTBjMmZjNDg5MjdmMmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj1FIk4wuVpDl6TvlV+hfNIRqbwn
xhjfz0kDxQDh+ry7/epU51/+VIyhl0EX30rIk5SPJ3BE+uqniZJ3mlvEAjU5pBk7
9SnnfKECJ/GomBkOQhKDmxGydvcPndjuzqfKSXcaH9wriDojOISCV6NMSD58Y6ej
v6odN9R6OLt67gMFLRkBJPVucxRk8g4GHRXjnTYg8HHqBJNmp1R6e/DBM2DLrCBU
3Sz4LND9gSZNTcCulq3HUkqkm8rfKNNcVgWFiPPJ1oREkYU6ZjGswiC58zPjT6/4
MRYhtks5lDlhDb74xL9gM3XwilSciigN766eYX+oEqfqAYOn7GwLBheJxwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKLLTGME+CurYxmjrZkML8SJJ/KyMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvb3N0TVl3VDRLNnRqR2FPdG1Rd3Z4SWtuOHJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAowWJMAwD
BAGjBaoDBACjBbIDBACjBbQwDAMEAaMFtgMEAaMFvDAMAwQBowXCAwQAowXGMA0G
CSqGSIb3DQEBCwUAA4IBAQB0W8ppo54OK7p8ag8VSoEaWNKQF99KqYMqPTeZpmwq
5U02j3mLupX7atAR6zEi1lnL/sHQpJFGJVa3yky8axbPAuyVxV7TrPZEgUAIgBaq
qSGL5IrnVcVxaX/pL0DWkrkxY173Vy8F+wBQJWNXQXd8A6U2RVngdpUkSZ26DIOF
F4/8vu6x0MomdamsUOCyJl8WlCv7dJEfdUInmP4mRfOwEBibCbUlDW11GUk56fzQ
GM/QyGGQ/J8cMxRsAiZmYvV4bDhLs1JcXXB5AuZfISiettZEhbuzwWcJH1AMV6rL
qQTScBEGES1BMx6x/jrjrgMGnLDURaYgVHBsYM9MKDdJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org