Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tKa_V7TUR82kLk0jQbuRvy6BgkU.roa
File: tKa_V7TUR82kLk0jQbuRvy6BgkU.roa (raw, json)
Hash identifier: x3zUg40TAqHasoZ/jLV3fONWf2Yaw6+iFZ+xXrpsaN4=
Subject key identifier: B4:A6:BF:57:B4:D4:47:CD:A4:2E:4D:23:41:BB:91:BF:2E:81:82:45
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01826D4E4AD37B918F3FEAA7EE58CD5A461B
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tKa_V7TUR82kLk0jQbuRvy6BgkU.roa
Signing time: Fri 05 Aug 2022 09:20:23 +0000
ROA not before: Fri 05 Aug 2022 09:20:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7118
IP address blocks: 163.5.176.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.173.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:4e:4a:d3:7b:91:8f:3f:ea:a7:ee:58:cd:5a:46:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 09:20:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4a6bf57b4d447cda42e4d2341bb91bf2e818245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:59:19:8f:1f:3b:93:aa:db:64:d2:02:50:cd:
ad:63:da:d4:b5:72:8c:b7:b4:eb:54:ff:35:2d:b9:
ad:dc:39:11:64:a6:20:6b:92:73:c3:10:46:17:20:
bd:7a:6e:82:33:af:47:d7:e0:72:82:48:8b:f7:60:
0e:a0:b9:7a:6a:e8:d7:08:85:da:9b:e5:ec:75:ea:
8b:39:cb:9d:c9:52:cf:b9:6f:ba:5a:04:13:5a:18:
92:19:f8:98:6e:57:e9:cb:72:0f:26:84:7c:a7:dd:
d8:48:28:31:97:75:94:58:83:9c:5a:33:b8:4d:18:
3d:11:6e:74:9f:48:02:e6:53:a9:b0:24:66:7f:eb:
46:46:67:79:86:ef:6d:93:42:7c:49:51:19:2e:8c:
69:c6:db:95:8e:bf:9e:55:e7:cd:59:b0:5c:08:68:
5b:00:ce:09:c3:fa:d2:8f:99:70:f4:c2:08:4a:94:
a3:fa:70:01:f3:9b:ed:d6:02:47:77:bf:72:56:e0:
5f:82:17:6c:67:ab:b6:26:22:55:c9:da:cb:e8:fc:
2d:aa:c0:17:ba:ae:33:bd:6c:01:e1:81:8e:d0:e2:
cb:85:c1:9d:86:a6:8f:f9:5c:4d:98:08:0b:60:c8:
19:bc:89:96:fa:74:9b:a6:b2:00:06:ae:20:7b:a9:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:BF:57:B4:D4:47:CD:A4:2E:4D:23:41:BB:91:BF:2E:81:82:45
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/tKa_V7TUR82kLk0jQbuRvy6BgkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.137.0/24
163.5.170.0-163.5.178.255
163.5.180.0/24
163.5.182.0-163.5.189.255
163.5.194.0-163.5.199.255
Signature Algorithm: sha256WithRSAEncryption
52:30:ef:56:94:0b:34:ef:56:56:34:a4:33:a7:a7:8c:28:97:
28:66:9f:4b:6a:ec:23:b7:46:63:be:cb:29:a2:1b:f0:8c:c6:
12:21:95:75:2e:38:a1:2b:5c:eb:0e:18:d9:c3:24:b3:0a:b9:
88:5f:08:9d:2a:43:5e:27:56:39:30:f7:f5:31:e0:30:5d:3d:
7c:c0:67:24:63:77:27:0d:bf:25:75:9a:9d:b1:87:e2:a9:33:
7c:1c:d2:d4:8f:16:1d:7d:28:e5:26:b1:74:19:b6:19:52:ed:
de:5b:56:0f:1f:fe:9f:01:9b:02:c9:1f:af:5d:1c:c2:7e:e0:
28:d5:91:ad:28:26:fc:2c:75:60:be:e7:1e:fd:0f:fb:e0:99:
24:21:88:53:f9:52:97:69:4e:58:e5:8d:ca:0d:01:0d:76:cf:
0e:94:8a:07:16:a6:af:5e:e0:cc:d1:06:d0:07:10:e1:d2:48:
77:91:97:5f:27:7b:36:e6:73:12:8b:b8:43:57:3f:f0:6b:c0:
f8:db:a8:b5:25:fb:91:99:aa:22:5d:90:43:2c:c7:4f:6b:26:
e6:59:02:1b:17:9f:b9:19:95:c1:0c:49:a7:2f:9e:81:bd:99:
e4:6d:7f:8a:73:11:70:17:c1:9b:3c:c0:1b:7b:82:d6:d2:48:
b8:2a:08:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org