Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qAmzhv4USLJGdlvU6nDyLCTlQfg.roa
File: qAmzhv4USLJGdlvU6nDyLCTlQfg.roa (raw, json)
Hash identifier: GNQIDvRk706scQiWpfKNz2kdlJ3QDgzzOzaMyTyNpWs=
Subject key identifier: A8:09:B3:86:FE:14:48:B2:46:76:5B:D4:EA:70:F2:2C:24:E5:41:F8
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01828C39104A4275DE3D0A32800F77407E18
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qAmzhv4USLJGdlvU6nDyLCTlQfg.roa
Signing time: Thu 11 Aug 2022 09:25:26 +0000
ROA not before: Thu 11 Aug 2022 09:25:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.228.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.190.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.215.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.145.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:8c:39:10:4a:42:75:de:3d:0a:32:80:0f:77:40:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 11 09:25:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a809b386fe1448b246765bd4ea70f22c24e541f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:8d:ac:cb:59:b1:a6:dc:7c:6d:8e:61:13:
8e:f5:d9:35:3d:54:ca:de:6f:da:51:ec:e1:57:95:
49:9e:aa:29:c9:c6:c6:2b:02:d0:8f:0a:f3:c2:e8:
6b:de:63:4b:f0:e9:ea:19:6d:3e:3f:a5:d9:a9:fc:
dd:4e:07:53:c7:7c:62:84:c8:13:95:19:25:e1:df:
ac:40:c6:71:3c:8c:5a:95:03:96:e4:6e:c3:68:61:
ba:a3:05:63:10:96:d1:7f:7c:7e:73:80:1a:b8:34:
3a:f3:93:e0:66:d9:af:37:37:39:3a:0e:bc:d8:55:
17:59:09:56:76:16:02:ce:bc:2c:b7:eb:6b:22:28:
87:ae:34:46:d9:7a:91:59:21:6b:59:f2:12:53:22:
07:16:4b:d3:46:6d:b9:e4:5d:60:5f:33:c4:65:53:
1d:bb:3c:53:62:e1:e2:04:16:1e:4d:36:c6:29:5b:
c2:fb:8d:3d:6c:bb:85:c8:ad:b2:d6:4d:92:7e:27:
db:30:eb:da:3a:be:3c:1e:9e:00:55:34:7b:16:c6:
9e:6f:05:76:0d:06:2b:5e:67:57:de:d5:60:b6:d7:
c9:90:be:7b:33:4a:f6:4e:f8:28:cb:1d:f0:48:81:
87:dc:8f:cc:e8:e2:0f:3e:dd:a0:75:3b:43:ed:d7:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:B3:86:FE:14:48:B2:46:76:5B:D4:EA:70:F2:2C:24:E5:41:F8
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/qAmzhv4USLJGdlvU6nDyLCTlQfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.125.0/24
163.5.127.0-163.5.229.255
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
25:36:38:02:ce:97:00:75:f0:56:47:78:d6:b7:a1:7e:f6:0f:
26:71:af:80:93:e9:69:73:70:f9:01:3d:db:c5:e7:72:69:79:
07:df:a9:d4:2c:cc:5e:49:ac:d9:f1:79:a8:08:aa:5e:30:32:
f7:cf:15:24:95:1d:51:fc:d3:54:b4:3d:65:be:be:7d:26:69:
2b:0c:18:c5:16:b8:c4:49:c7:40:6b:ec:9d:0a:64:bc:90:35:
04:10:9f:e5:6b:1b:ab:33:b9:77:0b:d1:5d:30:29:35:47:cb:
2b:55:cb:c7:ce:67:87:b6:4b:e6:7f:03:fc:6b:a8:52:a7:7f:
b9:3b:bf:4f:99:e6:3f:7e:db:48:d7:95:86:36:a3:a9:00:e9:
d3:af:06:3f:17:97:91:5d:fc:01:4a:43:fd:76:4e:61:0b:8e:
2d:b4:97:54:63:e5:aa:4c:aa:79:4c:b6:61:9b:e9:45:0c:c1:
4e:5e:3c:e5:fe:a9:95:63:ad:b8:14:f0:37:53:d5:af:5f:4d:
ee:c2:eb:2b:b6:a3:5f:7d:22:c6:a2:37:91:5a:6c:82:45:78:
8b:a6:1a:3d:30:29:57:0a:ae:22:70:3a:e5:4d:8e:0f:39:36:
fc:78:4e:ce:8e:64:d4:17:3f:03:e5:bc:3e:35:f9:47:5e:41:
46:fc:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org