Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RXeydoBGGf7UFZqyPPzwEe_Jnd4.roa
File: RXeydoBGGf7UFZqyPPzwEe_Jnd4.roa (raw, json)
Hash identifier: g6DmnOjakWfDt71nmYq/Q08y/V1mL/SRSbwmKZZ5lh4=
Subject key identifier: 45:77:B2:76:80:46:19:FE:D4:15:9A:B2:3C:FC:F0:11:EF:C9:9D:DE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018ACD7517063016BD2A0DB07700610E4F73
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RXeydoBGGf7UFZqyPPzwEe_Jnd4.roa
Signing time: Mon 25 Sep 2023 17:48:37 +0000
ROA not before: Mon 25 Sep 2023 17:48:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.231.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.235.0/24 maxlen: 24
163.5.242.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.247.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.115.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.211.0/24 maxlen: 24
163.5.212.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.219.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.220.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.149.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:75:17:06:30:16:bd:2a:0d:b0:77:00:61:0e:4f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Sep 25 17:48:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4577b276804619fed4159ab23cfcf011efc99dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:82:02:6e:3d:89:84:ca:3a:40:16:a2:ca:c7:
a2:c7:1a:80:bc:bd:15:a9:b9:53:0b:a0:9a:fb:73:
82:d7:9a:28:cf:13:8d:ec:8c:29:10:f8:f1:3d:f0:
0c:bc:b5:8f:97:30:04:ce:db:66:d8:37:9b:68:39:
26:2c:e1:4c:43:ae:dc:c0:0e:be:15:e1:9c:d1:91:
89:63:60:54:21:92:ba:0f:4c:4c:7e:dc:dd:81:a3:
69:46:dc:41:bd:19:5b:35:20:9e:90:8b:7c:0a:3a:
74:98:d2:85:1e:da:27:56:b0:4c:40:d8:0e:56:b2:
62:9d:ca:17:04:14:be:75:50:37:1e:c6:c0:c9:40:
2d:44:5e:e6:dc:72:dd:26:86:f7:65:ca:de:4d:67:
06:a1:51:b5:5d:0f:5b:8f:b4:f4:4e:eb:c9:2d:17:
1e:eb:1c:93:a6:16:d1:7b:6c:b1:b0:81:d8:20:86:
0d:df:af:79:cb:1e:04:d0:57:ea:2e:4a:73:f2:80:
78:2b:ea:02:35:b9:d5:8a:d4:c5:36:ef:be:57:e8:
6f:a6:8e:6d:d7:67:1b:3a:8e:bd:2c:c8:09:87:36:
fd:80:4f:c4:09:75:10:38:e9:08:d8:da:3e:a8:9d:
64:5f:b3:c7:89:64:db:28:5f:80:6b:b1:ff:fc:0e:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:77:B2:76:80:46:19:FE:D4:15:9A:B2:3C:FC:F0:11:EF:C9:9D:DE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RXeydoBGGf7UFZqyPPzwEe_Jnd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.30.0/24
163.5.33.0-163.5.36.255
163.5.58.0/24
163.5.62.0/24
163.5.64.0/24
163.5.66.0/24
163.5.71.0/24
163.5.78.0/23
163.5.83.0/24
163.5.86.0/23
163.5.89.0/24
163.5.94.0/23
163.5.97.0/24
163.5.99.0-163.5.100.255
163.5.104.0-163.5.106.255
163.5.110.0-163.5.115.255
163.5.121.0-163.5.123.255
163.5.126.0/24
163.5.128.0/24
163.5.134.0/24
163.5.136.0/23
163.5.139.0/24
163.5.141.0-163.5.143.255
163.5.146.0/24
163.5.148.0/22
163.5.155.0-163.5.156.255
163.5.160.0/24
163.5.162.0/24
163.5.165.0/24
163.5.167.0/24
163.5.170.0-163.5.172.255
163.5.175.0-163.5.179.255
163.5.181.0-163.5.182.255
163.5.186.0/24
163.5.188.0/23
163.5.191.0/24
163.5.195.0/24
163.5.198.0/24
163.5.201.0/24
163.5.203.0-163.5.205.255
163.5.207.0-163.5.208.255
163.5.211.0-163.5.213.255
163.5.216.0-163.5.220.255
163.5.223.0-163.5.224.255
163.5.228.0/24
163.5.231.0/24
163.5.235.0/24
163.5.241.0-163.5.242.255
163.5.244.0/24
163.5.247.0/24
163.5.249.0-163.5.255.255
Signature Algorithm: sha256WithRSAEncryption
0e:38:66:84:2a:85:00:e9:8f:7e:0c:de:4e:d3:af:fc:d6:36:
01:97:96:02:12:1e:f6:13:a9:0f:2c:5f:6c:3b:d1:0a:a5:dd:
f5:cc:21:15:5a:e5:49:9f:df:ad:fd:c6:5c:0f:7c:aa:33:0b:
4d:3e:2e:78:b4:99:71:7f:69:18:8f:fe:2c:32:53:41:fd:c5:
f9:23:84:60:26:5c:92:5d:8e:30:f4:6e:d8:00:4f:87:cc:70:
45:ad:ff:a2:5d:4b:b1:51:ad:2c:58:a1:c7:1b:3b:04:fb:73:
b7:03:1d:8f:de:d3:30:4b:74:d0:8d:0c:6c:cc:fa:18:43:f4:
0c:29:51:ed:0e:c0:37:0b:6c:eb:7a:53:69:c9:62:0f:14:1d:
40:94:b8:e6:d0:4c:72:1b:7c:65:ec:f4:74:0e:e2:26:0d:31:
60:50:36:6f:22:c0:79:6f:db:b1:c4:2c:e3:5d:25:89:3c:30:
f1:ca:32:32:eb:bf:6f:38:68:6f:55:cc:90:dc:fc:b2:0c:c8:
8c:eb:70:2d:96:60:dc:89:2b:8c:0a:bf:65:fb:4c:12:1e:51:
8d:6e:1d:38:ce:b5:de:49:c7:52:bf:b3:1c:6c:ad:a1:f5:e9:
68:12:1a:de:6f:9e:8a:38:1b:24:aa:9c:c1:37:bc:35:b2:a5:
19:46:b3:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 17 06:27:26 2025 by rpki-client