Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w7uLVqd7Fg6voFZqoH1YGCQ87lI.roa
File: w7uLVqd7Fg6voFZqoH1YGCQ87lI.roa (raw, json)
Hash identifier: g8B9npg6SLAbZQPPtPAY5HKuTLDaYHQyRxKCcMmanm0=
Subject key identifier: C3:BB:8B:56:A7:7B:16:0E:AF:A0:56:6A:A0:7D:58:18:24:3C:EE:52
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184A434D3D718E4F8A9C56143C8BDA935C5
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w7uLVqd7Fg6voFZqoH1YGCQ87lI.roa
Signing time: Wed 23 Nov 2022 11:17:16 +0000
ROA not before: Wed 23 Nov 2022 11:17:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 163.5.91.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.31.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.37.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.39.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.214.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.124.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.158.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a4:34:d3:d7:18:e4:f8:a9:c5:61:43:c8:bd:a9:35:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Nov 23 11:17:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3bb8b56a77b160eafa0566aa07d5818243cee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:b8:d1:cc:7b:4a:5e:8d:eb:9b:36:c6:73:
1f:34:d0:59:f6:15:dd:16:ed:bd:6d:d4:ba:5e:90:
68:bb:41:59:4e:5e:50:b8:a1:f5:07:a0:df:22:4d:
dc:89:10:b9:09:6e:3e:57:98:17:1e:21:36:20:21:
5e:1e:c1:c2:4c:0f:26:89:7d:76:64:4a:52:99:3b:
7b:ce:52:2b:22:e2:59:26:61:44:0e:cb:ac:3c:80:
e3:2d:fb:60:64:cc:75:aa:40:17:74:4c:a1:9d:1b:
42:17:2b:01:2a:d4:23:e9:f2:0d:53:ff:d5:4e:1c:
be:fa:74:11:02:43:fb:c9:6d:51:ee:7c:f3:d2:54:
71:cb:aa:08:95:c1:fb:2b:01:5d:52:e9:b0:40:31:
4b:60:0b:6d:b0:ee:19:05:28:10:ad:fe:68:8e:f3:
8c:99:2b:a9:ff:c8:76:71:2a:3d:94:1d:2a:70:84:
f8:07:7c:5a:17:d7:1c:1a:c7:fa:8e:31:ac:aa:97:
6a:4c:93:73:54:c2:4e:29:82:6c:87:c4:dc:32:b9:
fc:ec:21:85:b3:65:1f:09:bb:07:76:d0:29:bf:85:
32:b2:31:2d:43:35:91:d7:f7:f5:94:89:d2:26:56:
29:6b:f1:77:d2:77:e7:e0:eb:49:d8:9b:10:52:fe:
93:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BB:8B:56:A7:7B:16:0E:AF:A0:56:6A:A0:7D:58:18:24:3C:EE:52
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/w7uLVqd7Fg6voFZqoH1YGCQ87lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/23
163.5.33.0-163.5.34.255
163.5.37.0-163.5.39.255
163.5.91.0/24
163.5.97.0/24
163.5.99.0/24
163.5.114.0/24
163.5.118.0/24
163.5.124.0/24
163.5.131.0/24
163.5.152.0/24
163.5.158.0/24
163.5.169.0/24
163.5.179.0/24
163.5.214.0/24
163.5.223.0/24
163.5.249.0/24
163.5.254.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ec:c5:9b:83:5e:d0:13:f4:a9:37:0a:45:0e:67:29:67:72:
c5:00:97:42:ed:97:f0:76:a2:06:05:94:7c:37:8a:eb:f2:73:
e7:9e:a8:57:0e:4b:47:fb:55:84:3f:fd:b3:b5:f8:65:aa:c9:
9c:30:a9:03:5a:ce:28:0b:a3:63:75:91:1a:a4:14:1c:2e:d5:
eb:03:98:73:28:ea:b3:4c:92:15:fe:2f:48:12:03:bd:84:57:
66:2c:1d:9a:0a:ec:1c:6c:54:02:f2:58:2d:56:72:a5:65:0e:
bb:56:44:2f:e7:c3:c3:3d:7f:32:e6:30:87:b8:51:2a:32:3b:
39:51:d9:41:cb:20:49:cb:d8:70:c2:ae:48:b0:de:5b:60:e5:
4b:54:60:99:3b:ce:5b:01:6d:8c:2f:ed:f7:31:d0:bc:f5:4f:
95:ac:0d:3d:54:c7:88:5b:96:f6:50:13:0e:e4:49:6a:ae:3e:
2d:0c:59:b5:2e:90:71:f0:06:ee:36:6d:52:cc:61:f4:6f:27:
6f:10:d7:4d:96:b7:92:3e:06:8e:fb:ff:d3:a3:97:03:68:35:
9f:f3:8f:18:ba:c3:ae:a4:4a:3c:cb:3e:3f:e5:3d:f3:09:64:
43:ec:6b:06:2c:e4:51:13:a5:39:b8:85:1b:d9:27:46:78:8e:
90:35:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org