Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rKjuBA-Jh47d1TBbVXJ15YFTefc.roa
File: rKjuBA-Jh47d1TBbVXJ15YFTefc.roa (raw, json)
Hash identifier: F54vwssBCQqr0v1+xWhuT88NhAAA792OcdIcymF5s5M=
Subject key identifier: AC:A8:EE:04:0F:89:87:8E:DD:D5:30:5B:55:72:75:E5:81:53:79:F7
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01854478C00228F251517369CE8795DD423E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rKjuBA-Jh47d1TBbVXJ15YFTefc.roa
Signing time: Sat 24 Dec 2022 14:10:42 +0000
ROA not before: Sat 24 Dec 2022 14:10:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.231.0/24 maxlen: 24
163.5.233.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.236.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.221.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.130.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.153.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:44:78:c0:02:28:f2:51:51:73:69:ce:87:95:dd:42:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 24 14:10:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aca8ee040f89878eddd5305b557275e5815379f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:a9:d2:c0:57:a7:38:77:a1:8a:be:c5:ba:
4e:b9:67:7d:27:e5:b0:ae:b1:e2:72:2e:7e:bc:a0:
49:40:64:eb:34:de:25:77:5e:0d:7f:6a:48:80:d7:
96:82:b8:15:a1:98:d7:a1:f9:14:b2:88:87:00:a1:
19:49:83:c5:f0:8c:16:70:fe:e5:ee:a1:ae:0a:78:
c6:6a:e9:02:a7:11:a8:8c:b0:61:a3:95:7b:fb:8e:
a3:f7:d1:a5:be:1e:39:8b:ab:12:37:39:13:d4:3e:
26:bd:a7:fa:e0:02:01:95:1c:9a:4f:27:49:97:5b:
ec:c1:7a:d9:a5:3a:4e:9f:31:ee:8d:6c:1b:19:d5:
5d:e0:7b:8f:3e:38:6c:80:e1:38:2c:2a:55:bd:ab:
61:43:c6:35:04:16:45:5a:b3:c9:45:30:7a:17:0a:
0d:79:52:09:d1:49:a3:9e:d3:64:8b:cb:dd:c3:d3:
c5:30:87:8d:91:12:d7:f2:21:92:39:8d:ec:01:da:
1d:9e:91:7a:cb:e1:3e:7f:2a:7f:70:aa:81:ca:92:
f4:9a:98:72:b0:2f:20:dc:62:03:d3:74:6e:37:35:
02:39:18:78:19:7a:58:dc:df:7e:3f:ed:5c:4e:dd:
1f:2e:4f:da:0f:29:5d:2d:79:bf:20:43:f1:94:ff:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A8:EE:04:0F:89:87:8E:DD:D5:30:5B:55:72:75:E5:81:53:79:F7
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/rKjuBA-Jh47d1TBbVXJ15YFTefc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0-163.5.39.255
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.91.0-163.5.106.255
163.5.108.0-163.5.114.255
163.5.116.0-163.5.120.255
163.5.122.0-163.5.131.255
163.5.134.0/23
163.5.137.0-163.5.142.255
163.5.144.0/24
163.5.146.0-163.5.157.255
163.5.159.0-163.5.189.255
163.5.191.0-163.5.194.255
163.5.199.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.220.0-163.5.222.255
163.5.224.0/19
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
46:33:e1:85:2f:c2:00:df:47:08:47:79:66:54:2a:0f:8d:73:
fa:07:48:fe:ae:99:68:12:cf:1f:b9:c7:60:5d:fe:d3:35:52:
79:4d:6f:ee:e0:92:45:3f:24:ac:9b:79:93:be:22:be:2a:1b:
b5:fe:a8:12:aa:a5:0c:b6:14:4a:96:33:d7:75:ee:e6:b1:4c:
25:6c:b9:18:87:cb:07:1f:24:c1:89:f0:a8:4a:ef:a3:9a:aa:
19:1f:b2:0f:73:a5:2f:92:df:fb:c6:cc:8c:02:fc:68:de:13:
7b:1e:95:51:69:99:ce:ef:8c:8b:0f:2e:21:33:1b:41:4f:d4:
95:ea:80:97:ee:c3:0e:9f:c7:f7:5a:11:60:f7:76:74:30:9b:
e4:3b:20:10:d6:65:bc:b2:20:f5:b0:1f:95:31:28:5e:c7:63:
b9:4d:56:07:fd:e7:0b:e5:ad:45:97:fe:fa:62:0f:6e:43:aa:
cc:c1:97:f9:54:e7:5a:23:a8:08:75:6a:cc:46:cb:b3:ff:c8:
6d:b9:70:55:28:9f:bb:77:fc:f4:5b:2d:ab:d4:55:47:f2:3b:
2e:2a:d5:1e:9b:f3:77:11:f7:30:e2:d5:2e:4f:31:9b:2f:85:
96:3f:01:cc:36:2e:6b:05:d8:43:66:f5:17:fc:28:0f:79:c6:
b8:fa:0f:d7
-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgISAYVEeMACKPJRUXNpzoeV3UI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjI0MTQxMDQyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2E4ZWUwNDBmODk4NzhlZGRkNTMwNWI1NTcyNzVlNTgxNTM3OWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI6p0sBXpzh3oYq+xbpOuWd9J+Ww
rrHici5+vKBJQGTrNN4ld14Nf2pIgNeWgrgVoZjXofkUsoiHAKEZSYPF8IwWcP7l
7qGuCnjGaukCpxGojLBho5V7+46j99Glvh45i6sSNzkT1D4mvaf64AIBlRyaTydJ
l1vswXrZpTpOnzHujWwbGdVd4HuPPjhsgOE4LCpVvathQ8Y1BBZFWrPJRTB6FwoN
eVIJ0UmjntNki8vdw9PFMIeNkRLX8iGSOY3sAdodnpF6y+E+fyp/cKqBypL0mphy
sC8g3GID03RuNzUCORh4GXpY3N9+P+1cTt0fLk/aDyldLXm/IEPxlP/J4wIDAQAB
o4IC6jCCAuYwHQYDVR0OBBYEFKyo7gQPiYeO3dUwW1VydeWBU3n3MB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvcktqdUJBLUpoNDdkMVRCYlZYSjE1WUZUZWZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIH/BggrBgEFBQcBBwEB/wSB7zCB7DCB6QQCAAEwgeIwDAME
AaMFHgMEA6MFIDAMAwQBowVGAwQAowVIMAwDBAGjBUoDBASjBUAwDAMEAKMFWwME
AKMFajAMAwQCowVsAwQAowVyMAwDBAKjBXQDBACjBXgwDAMEAaMFegMEAqMFgAME
AaMFhjAMAwQAowWJAwQAowWOAwQAowWQMAwDBAGjBZIDBAGjBZwwDAMEAKMFnwME
AaMFvDAMAwQAowW/AwQAowXCMAwDBACjBccDBACjBdIDBACjBdUwDAMEA6MF2AME
AKMF2jAMAwQCowXcAwQAowXeAwQFowXgAwQAuf02MA0GCSqGSIb3DQEBCwUAA4IB
AQBGM+GFL8IA30cIR3lmVCoPjXP6B0j+rploEs8fucdgXf7TNVJ5TW/u4JJFPySs
m3mTviK+Khu1/qgSqqUMthRKljPXde7msUwlbLkYh8sHHyTBifCoSu+jmqoZH7IP
c6Uvkt/7xsyMAvxo3hN7HpVRaZnO74yLDy4hMxtBT9SV6oCX7sMOn8f3WhFg93Z0
MJvkOyAQ1mW8siD1sB+VMShex2O5TVYH/ecL5a1Fl/76Yg9uQ6rMwZf5VOdaI6gI
dWrMRsuz/8htuXBVKJ+7d/z0Wy2r1FVH8jsuKtUem/N3Efcw4tUuTzGbL4WWPwHM
Ni5rBdhDZvUX/CgPeca4+g/X
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:22 2023 by rpki-client on console-fra.rpki-client.org