Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q4JNwJbEk__kmq1O61_2k08cYoM.roa
File: q4JNwJbEk__kmq1O61_2k08cYoM.roa (raw, json)
Hash identifier: GK7Uq9Gc4OOovq9HYz4nAJd3GFGnMQuUA6T25rPBNWE=
Subject key identifier: AB:82:4D:C0:96:C4:93:FF:E4:9A:AD:4E:EB:5F:F6:93:4F:1C:62:83
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184E265216153D07FD143B0D928FAD6BD0F
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q4JNwJbEk__kmq1O61_2k08cYoM.roa
Signing time: Mon 05 Dec 2022 13:06:29 +0000
ROA not before: Mon 05 Dec 2022 13:06:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e2:65:21:61:53:d0:7f:d1:43:b0:d9:28:fa:d6:bd:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 5 13:06:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab824dc096c493ffe49aad4eeb5ff6934f1c6283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ce:0a:7c:57:4e:9c:f0:c5:79:98:d9:d9:d2:
8e:6b:c1:be:cc:f8:6f:07:9e:76:63:25:a1:c1:cd:
d6:08:2b:d0:3a:ca:73:12:db:64:53:83:23:91:36:
9a:fb:c4:86:31:4e:62:2c:a3:f1:62:98:4c:44:d1:
71:98:18:f2:d2:44:a6:69:00:8b:17:a4:00:64:d9:
12:64:ba:24:4d:43:91:a5:13:5b:f0:04:4e:77:79:
ab:b0:0b:79:fe:f1:4b:f3:7b:8c:2b:0c:bc:93:e9:
d3:76:ae:e6:76:53:e8:c5:a9:14:01:4f:12:13:31:
6c:09:47:d3:0a:ee:8e:0c:3d:b5:c5:86:ae:ab:7a:
47:66:dd:91:9e:cf:90:35:2f:ef:55:be:3f:f5:54:
4a:59:58:8c:a4:63:58:7b:fe:a1:b3:01:a2:dc:4c:
79:f8:28:11:4c:5d:6f:30:3c:c5:26:e8:97:97:ec:
fe:15:e6:80:91:45:17:c5:4b:7c:39:3d:49:6a:08:
60:5f:91:2a:43:f8:db:89:10:ad:68:34:be:0c:00:
76:b3:95:87:58:83:1c:6a:d1:a2:b6:ce:56:41:b0:
fd:be:96:c0:91:76:47:33:9f:24:23:af:e5:e3:10:
47:c9:4d:e1:68:b2:07:b7:f8:4f:01:9c:38:9d:42:
15:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:82:4D:C0:96:C4:93:FF:E4:9A:AD:4E:EB:5F:F6:93:4F:1C:62:83
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/q4JNwJbEk__kmq1O61_2k08cYoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.33.0-163.5.34.255
163.5.38.0/23
163.5.91.0/24
163.5.97.0/24
163.5.114.0/24
163.5.124.0/24
163.5.131.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0c:14:80:88:1c:6e:05:00:b7:0f:21:c8:f0:b4:ee:5a:dc:
9d:cc:9b:58:ef:23:74:8b:bd:01:4a:02:b8:c0:14:f8:6c:27:
b1:d0:b8:22:fc:b3:27:7d:a0:38:5b:76:1c:32:2e:df:3c:60:
7f:35:62:9a:f0:8e:a9:48:67:d6:e5:65:5e:d0:55:89:ee:62:
42:46:7b:4c:9f:13:c1:7d:f8:7b:4c:f0:39:f2:b0:30:c5:fa:
8a:6f:57:4f:99:24:f6:bb:03:63:7a:5f:88:4b:50:8c:05:4e:
4b:27:4a:dc:0c:1d:5b:d3:e1:c3:67:06:23:b9:2b:9f:f1:0a:
52:0e:e8:2d:57:cf:98:41:d5:f8:40:b3:a9:13:a7:7d:33:e2:
bf:7a:7d:a7:a5:a4:75:91:57:26:51:31:95:a5:9a:7f:e8:f3:
e8:f0:f9:ac:da:4f:67:f9:f4:d1:77:bc:29:0b:99:89:69:c2:
de:71:97:22:17:c9:b2:17:ed:92:7d:99:78:c6:a8:3e:ac:13:
9c:82:df:08:7a:5a:0d:72:8a:38:83:66:49:39:5a:b1:96:93:
f1:c3:96:a7:c6:ad:88:e6:5c:21:85:0e:5c:08:b9:df:20:c2:
7f:ad:21:6d:6f:80:a4:c9:f1:50:d3:40:87:5e:9d:ca:79:4f:
f9:eb:b6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org