Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q2HrsOD0Ivtw6oKfOSCbXA2FW3U.roa
File: q2HrsOD0Ivtw6oKfOSCbXA2FW3U.roa (raw, json)
Hash identifier: 1F0w/W3YEzKN5OuVEzNMrueqwF98i/ikBqyg6JVRl7k=
Subject key identifier: AB:61:EB:B0:E0:F4:22:FB:70:EA:82:9F:39:20:9B:5C:0D:85:5B:75
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018226E1B831A858CA4C215285881A6CBF5B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q2HrsOD0Ivtw6oKfOSCbXA2FW3U.roa
Signing time: Fri 22 Jul 2022 17:08:23 +0000
ROA not before: Fri 22 Jul 2022 17:08:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:e1:b8:31:a8:58:ca:4c:21:52:85:88:1a:6c:bf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 22 17:08:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab61ebb0e0f422fb70ea829f39209b5c0d855b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:cd:7c:dc:74:6e:99:81:8e:ca:6a:6e:a8:
03:d5:68:c8:3e:70:a9:7b:11:57:1e:6d:78:be:fc:
9b:52:b2:ab:07:ea:35:42:b3:76:54:92:19:be:c3:
9e:de:e4:97:bf:6e:df:63:88:c1:11:ec:48:06:5f:
6a:d6:e8:e0:5e:7d:31:56:12:bc:21:9e:ca:8e:e8:
7d:61:48:6d:18:5e:f6:c7:e9:30:3a:cf:2d:d1:f9:
46:08:b8:21:6b:92:c3:fc:f9:b1:03:d8:b0:0c:9f:
07:2d:f4:c2:1b:95:46:59:6a:25:24:88:17:97:84:
da:4a:53:84:f7:15:77:9f:e1:b4:71:d0:89:34:1d:
fe:50:ab:28:06:0e:dc:c5:d2:b5:ab:d6:04:da:0e:
23:c4:e2:b7:df:53:08:d4:5a:17:b5:69:ef:18:52:
75:91:7d:c0:49:6e:37:e8:16:23:06:66:aa:e5:b7:
8b:8e:51:43:1a:7a:3a:b0:68:0b:00:03:91:df:16:
46:46:33:e9:88:b6:86:56:bf:71:b1:f0:84:be:c6:
89:0d:3a:7b:48:e0:e7:b8:d7:4f:30:62:e7:e2:b0:
a8:4f:94:d8:c8:94:b7:4b:d2:91:2a:61:6a:08:0a:
d2:70:49:74:1d:0d:93:e6:e5:59:a2:25:b9:16:b1:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:EB:B0:E0:F4:22:FB:70:EA:82:9F:39:20:9B:5C:0D:85:5B:75
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q2HrsOD0Ivtw6oKfOSCbXA2FW3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.127.0-163.5.179.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:9b:1e:2b:e5:c7:b4:23:25:84:ca:5f:41:ad:b7:99:7f:b2:
0b:8c:c4:41:a7:fe:1e:43:99:17:16:b4:86:04:a4:ed:34:25:
b2:fc:5f:15:e3:70:49:75:3e:75:49:80:63:0e:54:5e:c9:64:
97:2e:8c:bc:b6:62:f0:da:85:b0:92:38:81:3c:d3:56:3e:62:
e9:3b:cb:61:32:35:0d:42:1e:14:34:41:c2:03:94:1b:8d:71:
fc:4c:29:0e:30:99:ed:f7:36:74:ab:bd:59:f2:94:4f:30:a2:
09:72:12:cc:83:00:35:98:cd:8a:e6:4b:bc:d4:dd:61:80:08:
85:24:1b:5b:d6:b6:bf:7c:2e:3b:b7:93:75:b0:c9:48:a5:0e:
75:38:d3:7d:1e:5f:43:87:6d:fe:49:5e:c8:67:11:d1:d9:26:
15:4c:39:bc:2d:69:fd:bf:76:f3:50:e5:b4:cc:9e:46:0f:4b:
1e:d4:7b:d5:91:9b:41:55:b8:39:1b:c9:09:da:5b:78:b6:50:
24:0e:4e:dd:20:b9:da:80:ee:79:ee:b7:88:d0:e1:cc:89:75:
b7:40:b2:a4:e0:b3:bd:4d:d3:7c:aa:49:f1:0c:72:63:6b:97:
c3:71:52:f9:f7:0f:a0:f0:3f:98:06:72:49:81:c3:db:94:14:
c0:91:b4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org