Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t8bIgqFtzYh8Fiwdlzelalu97KE.roa
File: t8bIgqFtzYh8Fiwdlzelalu97KE.roa (raw, json)
Hash identifier: Wud9P8OYoBrfJaTXV+yPdFUt4qgdiW2nPchPCheKYeA=
Subject key identifier: B7:C6:C8:82:A1:6D:CD:88:7C:16:2C:1D:97:37:A5:6A:5B:BD:EC:A1
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018404CD937D8B6E281D489A4F19F2ECC551
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t8bIgqFtzYh8Fiwdlzelalu97KE.roa
Signing time: Sun 23 Oct 2022 12:24:52 +0000
ROA not before: Sun 23 Oct 2022 12:24:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 163.5.95.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.132.0/24 maxlen: 24
163.5.133.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:04:cd:93:7d:8b:6e:28:1d:48:9a:4f:19:f2:ec:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Oct 23 12:24:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7c6c882a16dcd887c162c1d9737a56a5bbdeca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:8d:b7:4e:2b:d8:72:df:43:fe:9b:97:20:
76:42:3c:91:d4:dc:a1:79:2a:c1:a0:2b:a1:be:a4:
fa:4e:fb:da:fb:63:ed:9f:2b:f2:62:1f:76:82:7c:
37:29:b1:04:13:e8:ab:fa:ff:d6:a6:8e:41:d0:f3:
cd:5e:74:b0:83:b6:c8:6a:d4:9f:30:7f:0f:71:47:
48:2a:05:8b:93:e6:72:69:2a:d4:9a:3b:fa:d1:06:
a8:71:2c:2d:70:5c:62:e9:62:96:da:5e:d0:b0:4e:
86:be:cb:fa:48:74:da:eb:dd:1d:f9:be:34:09:12:
8e:40:5e:92:ac:2c:b0:9f:ce:64:31:11:e4:fe:d0:
92:f4:15:c2:fd:eb:c1:2c:72:fc:5f:48:a2:5f:fd:
ab:5a:7f:a7:33:51:9f:b2:9c:1c:9b:f5:f0:fd:6b:
5c:9d:c9:15:95:71:c2:1c:23:48:c3:7d:84:3e:e6:
d1:64:5e:2a:03:98:e7:81:9b:1d:31:72:31:8b:ac:
c2:af:d0:8d:1a:34:da:b7:4e:c1:de:72:0f:dd:02:
6c:90:e0:f6:81:fa:05:e4:df:67:26:42:df:d7:b6:
29:a6:ac:dd:14:0a:b8:b8:4a:85:7e:51:ee:b4:ae:
5c:02:ec:2d:71:70:0d:d8:ee:95:43:37:7c:02:8a:
c3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C6:C8:82:A1:6D:CD:88:7C:16:2C:1D:97:37:A5:6A:5B:BD:EC:A1
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/t8bIgqFtzYh8Fiwdlzelalu97KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.32.0/24
163.5.94.0/23
163.5.113.0/24
163.5.116.0/24
163.5.127.0/24
163.5.132.0/23
163.5.136.0/24
163.5.143.0/24
163.5.184.0/24
163.5.195.0-163.5.197.255
163.5.241.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2e:c2:de:9b:6a:fd:6f:04:71:7e:80:b6:b9:05:06:af:66:
2a:10:7a:f6:fc:09:16:e7:85:a0:b1:28:bb:59:3f:8c:99:3f:
3c:d5:df:f7:2f:f1:08:c6:0f:8c:4a:b6:72:64:e4:d4:6a:15:
b0:41:50:60:48:e5:ba:26:58:14:c8:32:f2:e3:b0:0c:6b:e9:
b0:11:8e:00:f0:ba:0d:8f:6d:17:a9:00:e4:45:92:61:70:77:
73:af:23:73:b5:fc:d6:df:fb:3b:f2:60:35:47:2f:c4:a5:86:
65:84:32:44:14:ce:67:03:8e:47:a3:df:83:34:3e:0e:3e:2d:
e3:a0:5f:93:5e:17:51:73:16:f0:5c:15:57:ba:e6:2d:5d:0b:
92:bc:ca:95:11:b0:3f:52:f2:00:f9:e6:33:52:94:c7:db:85:
0b:27:53:d8:16:c7:bf:19:0d:51:b1:68:30:92:d5:68:31:b4:
90:39:71:c8:00:9c:12:28:38:e4:f5:4d:1a:76:d3:24:83:98:
5a:80:d3:c0:dc:91:54:46:0d:90:2b:11:8c:b1:2e:35:23:e8:
b4:14:3b:33:9d:a0:d9:66:b8:e2:cb:8c:fb:a7:9c:ee:e6:bd:
c1:b2:58:06:19:63:e9:5a:db:cf:6b:05:b3:48:ed:e6:46:f0:
9d:6f:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:11 2023 by rpki-client on console-ams.rpki-client.org