Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xWmPw6n76R1oOuL9c72A-jmE6DA.roa
File: xWmPw6n76R1oOuL9c72A-jmE6DA.roa (raw, json)
Hash identifier: 9natVIrzMFfLk7CNQ5XXbUbjv+pDQZpskaPgkU41W/I=
Subject key identifier: C5:69:8F:C3:A9:FB:E9:1D:68:3A:E2:FD:73:BD:80:FA:39:84:E8:30
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 0184D816932BA3C6040E630B0C41AE6137D2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xWmPw6n76R1oOuL9c72A-jmE6DA.roa
Signing time: Sat 03 Dec 2022 13:04:28 +0000
ROA not before: Sat 03 Dec 2022 13:04:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.118.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d8:16:93:2b:a3:c6:04:0e:63:0b:0c:41:ae:61:37:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 3 13:04:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c5698fc3a9fbe91d683ae2fd73bd80fa3984e830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:63:fe:66:26:f9:8f:e4:32:a7:b7:ee:c8:
67:a0:e5:7b:2d:4c:98:24:e4:37:34:e6:c8:3d:58:
23:c7:d9:18:30:1c:fd:30:67:d3:db:e0:aa:6a:74:
a4:b8:67:2a:81:d0:a1:af:ad:73:25:3f:9e:14:98:
1b:e0:a4:51:02:59:9f:f8:92:22:7b:99:a0:b3:7d:
9d:9c:69:22:4d:35:4b:91:b4:3b:61:7c:cb:db:7d:
eb:f9:30:df:4e:01:14:25:d3:38:14:c0:aa:91:97:
36:f1:59:a9:fc:f6:99:72:d1:02:7f:d9:e6:8f:fa:
78:1b:87:e8:85:a7:bf:f2:a4:e0:ad:a1:4c:df:97:
a0:0d:fb:56:f3:52:8c:87:e3:39:93:a3:25:d6:b7:
0c:76:bb:ac:d8:9f:bc:87:0b:35:36:4c:25:a5:76:
57:b0:d6:ce:15:2c:f7:32:89:55:8c:b3:18:d5:fa:
b1:07:2e:6a:12:e7:7e:31:4c:c9:15:d3:3d:d7:cc:
36:e6:76:73:68:fd:63:57:59:d4:f6:01:a2:e1:9c:
d1:bb:4a:e3:b3:66:0e:14:d0:fe:67:5d:1d:d2:40:
5b:d3:1a:73:5a:3a:57:4a:80:c2:30:98:d4:62:8c:
bd:62:9e:64:18:e4:79:4f:b4:89:b6:a2:46:07:ce:
58:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:69:8F:C3:A9:FB:E9:1D:68:3A:E2:FD:73:BD:80:FA:39:84:E8:30
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/xWmPw6n76R1oOuL9c72A-jmE6DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.118.0/23
163.5.159.0/24
163.5.225.0/24
163.5.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:a7:77:1e:04:be:1d:17:34:cf:0d:eb:c5:ab:ce:c3:5d:96:
66:9b:c3:4f:fe:a0:a2:32:1a:42:63:8e:fb:e8:b0:0f:21:63:
c7:b2:e8:50:cd:41:79:d3:8f:48:38:d3:51:cd:ef:3d:63:83:
03:be:71:55:e5:4e:34:74:ab:d6:4b:7d:51:2f:20:3b:fb:ee:
0a:48:cb:2b:4a:55:ef:d5:86:27:7f:5e:5e:c9:84:18:85:1b:
1f:a2:9a:30:c5:8e:a0:3b:81:71:87:2e:b1:d7:0c:d8:68:eb:
f1:f5:03:40:aa:a4:c3:db:b5:60:d8:8a:0f:ef:e8:5f:69:c8:
e6:74:d6:30:a8:f4:a8:a9:30:bd:4c:f6:b6:f1:46:5a:c4:41:
c7:78:1e:fb:3b:2f:31:01:d8:14:71:5d:5a:1d:89:d1:a5:f6:
7e:fb:c1:55:e7:22:b4:15:e4:25:64:d9:cc:16:28:a7:85:47:
01:b3:82:a9:87:87:cd:ba:a8:2f:b5:b6:c9:b5:61:e0:d3:aa:
48:91:e9:b4:e5:7a:93:fd:a2:a1:54:9a:0a:82:eb:25:ec:02:
ef:26:48:47:e1:ed:c4:66:42:b7:eb:3c:61:d3:f0:c2:2b:ec:
df:bc:65:7b:57:b1:de:7a:4b:5d:d0:44:59:f6:c9:8c:c6:a0:
88:44:c5:e2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYTYFpMro8YEDmMLDEGuYTfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIxMjAzMTMwNDI4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTY5OGZjM2E5ZmJlOTFkNjgzYWUyZmQ3M2JkODBmYTM5ODRlODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrRj/mYm+Y/kMqe37shnoOV7LUyY
JOQ3NObIPVgjx9kYMBz9MGfT2+CqanSkuGcqgdChr61zJT+eFJgb4KRRAlmf+JIi
e5mgs32dnGkiTTVLkbQ7YXzL233r+TDfTgEUJdM4FMCqkZc28Vmp/PaZctECf9nm
j/p4G4fohae/8qTgraFM35egDftW81KMh+M5k6Ml1rcMdrus2J+8hws1NkwlpXZX
sNbOFSz3MolVjLMY1fqxBy5qEud+MUzJFdM918w25nZzaP1jV1nU9gGi4ZzRu0rj
s2YOFND+Z10d0kBb0xpzWjpXSoDCMJjUYoy9Yp5kGOR5T7SJtqJGB85YXQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMVpj8Op++kdaDri/XO9gPo5hOgwMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEveFdtUHc2bjc2UjFvT3VMOWM3MkEtam1FNkRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBowV2AwQA
owWfAwQAowXhAwQAowXlMA0GCSqGSIb3DQEBCwUAA4IBAQBrp3ceBL4dFzTPDevF
q87DXZZmm8NP/qCiMhpCY4776LAPIWPHsuhQzUF5049IONNRze89Y4MDvnFV5U40
dKvWS31RLyA7++4KSMsrSlXv1YYnf15eyYQYhRsfopowxY6gO4Fxhy6x1wzYaOvx
9QNAqqTD27Vg2IoP7+hfacjmdNYwqPSoqTC9TPa28UZaxEHHeB77Oy8xAdgUcV1a
HYnRpfZ++8FV5yK0FeQlZNnMFiinhUcBs4Kph4fNuqgvtbbJtWHg06pIkem05XqT
/aKhVJoKgusl7ALvJkhH4e3EZkK36zxh0/DCK+zfvGV7V7Heektd0ERZ9smMxqCI
RMXi
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:23 2023 by rpki-client on console-fra.rpki-client.org