Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lH8Q6-NkYRTtMEySEG-k2h8ilc4.roa
File: lH8Q6-NkYRTtMEySEG-k2h8ilc4.roa (raw, json)
Hash identifier: Rvb7E7bBp2kZARgdmql6/7o4V/RP/D3eavL2RlJN90E=
Subject key identifier: 94:7F:10:EB:E3:64:61:14:ED:30:4C:92:10:6F:A4:DA:1F:22:95:CE
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01873C54AAD077AF8F7ADEA509DE1083208D
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lH8Q6-NkYRTtMEySEG-k2h8ilc4.roa
Signing time: Sat 01 Apr 2023 10:19:54 +0000
ROA not before: Sat 01 Apr 2023 10:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 163.5.232.0/24 maxlen: 24
163.5.228.0/24 maxlen: 24
163.5.230.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.227.0/24 maxlen: 24
163.5.234.0/24 maxlen: 24
163.5.238.0/24 maxlen: 24
163.5.240.0/24 maxlen: 24
163.5.237.0/24 maxlen: 24
163.5.239.0/24 maxlen: 24
163.5.244.0/24 maxlen: 24
163.5.246.0/24 maxlen: 24
163.5.243.0/24 maxlen: 24
163.5.241.0/24 maxlen: 24
163.5.245.0/24 maxlen: 24
163.5.250.0/24 maxlen: 24
163.5.248.0/24 maxlen: 24
163.5.252.0/24 maxlen: 24
163.5.249.0/24 maxlen: 24
163.5.251.0/24 maxlen: 24
163.5.253.0/24 maxlen: 24
163.5.254.0/24 maxlen: 24
163.5.255.0/24 maxlen: 24
163.5.67.0/24 maxlen: 24
163.5.71.0/24 maxlen: 24
163.5.70.0/24 maxlen: 24
163.5.66.0/24 maxlen: 24
163.5.75.0/24 maxlen: 24
163.5.77.0/24 maxlen: 24
163.5.76.0/24 maxlen: 24
163.5.72.0/24 maxlen: 24
163.5.74.0/24 maxlen: 24
163.5.78.0/24 maxlen: 24
163.5.83.0/24 maxlen: 24
163.5.79.0/24 maxlen: 24
163.5.84.0/24 maxlen: 24
163.5.89.0/24 maxlen: 24
163.5.91.0/24 maxlen: 24
163.5.87.0/24 maxlen: 24
163.5.86.0/24 maxlen: 24
163.5.88.0/24 maxlen: 24
163.5.97.0/24 maxlen: 24
163.5.93.0/24 maxlen: 24
163.5.95.0/24 maxlen: 24
163.5.96.0/24 maxlen: 24
163.5.98.0/24 maxlen: 24
163.5.92.0/24 maxlen: 24
163.5.94.0/24 maxlen: 24
163.5.103.0/24 maxlen: 24
163.5.105.0/24 maxlen: 24
163.5.99.0/24 maxlen: 24
163.5.101.0/24 maxlen: 24
163.5.104.0/24 maxlen: 24
163.5.100.0/24 maxlen: 24
163.5.102.0/24 maxlen: 24
163.5.111.0/24 maxlen: 24
163.5.109.0/24 maxlen: 24
163.5.110.0/24 maxlen: 24
163.5.112.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.108.0/24 maxlen: 24
163.5.117.0/24 maxlen: 24
163.5.113.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.114.0/24 maxlen: 24
163.5.116.0/24 maxlen: 24
163.5.30.0/24 maxlen: 24
163.5.29.0/24 maxlen: 24
163.5.38.0/24 maxlen: 24
163.5.34.0/24 maxlen: 24
163.5.36.0/24 maxlen: 24
163.5.32.0/24 maxlen: 24
163.5.33.0/24 maxlen: 24
163.5.35.0/24 maxlen: 24
163.5.58.0/24 maxlen: 24
163.5.61.0/24 maxlen: 24
163.5.63.0/24 maxlen: 24
163.5.59.0/24 maxlen: 24
163.5.64.0/24 maxlen: 24
163.5.62.0/24 maxlen: 24
163.5.60.0/24 maxlen: 24
163.5.176.0/24 maxlen: 24
163.5.178.0/24 maxlen: 24
163.5.174.0/24 maxlen: 24
163.5.179.0/24 maxlen: 24
163.5.177.0/24 maxlen: 24
163.5.175.0/24 maxlen: 24
163.5.180.0/24 maxlen: 24
163.5.182.0/24 maxlen: 24
163.5.186.0/24 maxlen: 24
163.5.184.0/24 maxlen: 24
163.5.181.0/24 maxlen: 24
163.5.183.0/24 maxlen: 24
163.5.185.0/24 maxlen: 24
163.5.188.0/24 maxlen: 24
163.5.192.0/24 maxlen: 24
163.5.187.0/24 maxlen: 24
163.5.189.0/24 maxlen: 24
163.5.191.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.196.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.193.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.202.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.210.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.213.0/24 maxlen: 24
163.5.216.0/24 maxlen: 24
163.5.218.0/24 maxlen: 24
163.5.217.0/24 maxlen: 24
163.5.222.0/24 maxlen: 24
163.5.224.0/24 maxlen: 24
163.5.226.0/24 maxlen: 24
163.5.223.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.125.0/24 maxlen: 24
163.5.123.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.120.0/24 maxlen: 24
163.5.122.0/24 maxlen: 24
163.5.131.0/24 maxlen: 24
163.5.127.0/24 maxlen: 24
163.5.129.0/24 maxlen: 24
163.5.126.0/24 maxlen: 24
163.5.128.0/24 maxlen: 24
163.5.137.0/24 maxlen: 24
163.5.139.0/24 maxlen: 24
163.5.135.0/24 maxlen: 24
163.5.138.0/24 maxlen: 24
163.5.134.0/24 maxlen: 24
163.5.141.0/24 maxlen: 24
163.5.143.0/24 maxlen: 24
163.5.140.0/24 maxlen: 24
163.5.144.0/24 maxlen: 24
163.5.142.0/24 maxlen: 24
163.5.151.0/24 maxlen: 24
163.5.147.0/24 maxlen: 24
163.5.152.0/24 maxlen: 24
163.5.148.0/24 maxlen: 24
163.5.150.0/24 maxlen: 24
163.5.146.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
163.5.154.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.166.0/24 maxlen: 24
163.5.162.0/24 maxlen: 24
163.5.164.0/24 maxlen: 24
163.5.161.0/24 maxlen: 24
163.5.165.0/24 maxlen: 24
163.5.163.0/24 maxlen: 24
163.5.160.0/24 maxlen: 24
163.5.168.0/24 maxlen: 24
163.5.172.0/24 maxlen: 24
163.5.170.0/24 maxlen: 24
163.5.167.0/24 maxlen: 24
163.5.169.0/24 maxlen: 24
163.5.171.0/24 maxlen: 24
185.253.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3c:54:aa:d0:77:af:8f:7a:de:a5:09:de:10:83:20:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Apr 1 10:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=947f10ebe3646114ed304c92106fa4da1f2295ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:ca:92:fa:fd:f6:ab:48:22:83:68:7f:ee:
8c:65:6e:e2:e2:af:3c:3d:d5:1e:6c:df:06:de:10:
32:40:f1:bc:02:4a:e5:7c:b2:30:29:54:4d:d2:4c:
65:21:b7:5d:93:e6:94:72:e8:ea:c3:02:a3:09:18:
a3:90:f5:6c:d7:54:70:6a:21:97:41:2e:f0:77:c0:
ed:53:1e:8c:54:32:60:d4:28:26:fd:e1:df:23:b3:
72:49:41:e3:12:34:cd:c9:82:fe:23:b1:34:fd:db:
fa:76:df:95:86:f3:c9:30:60:41:59:c2:90:4b:9f:
d2:51:15:4b:0e:2a:7c:32:cd:87:20:b1:fe:07:dc:
66:ba:f7:10:7d:28:53:74:3a:fe:f9:76:29:89:f4:
54:0f:94:db:d9:c6:d2:af:ce:40:54:25:16:3b:a0:
05:a3:c9:98:8a:12:d0:2f:de:32:2e:b5:89:e7:eb:
82:9c:b8:5e:da:6b:59:c9:9f:ef:f7:c1:5d:16:a6:
48:12:85:72:44:5f:d6:52:60:54:73:62:3a:4e:76:
98:c5:bb:d0:1d:82:a0:4f:5f:26:9c:a9:aa:a1:dd:
66:0c:7b:86:14:78:8a:9c:19:62:57:d0:dc:83:60:
26:9b:5b:e6:86:56:38:2f:c2:9b:3c:2d:b2:ac:96:
e3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:10:EB:E3:64:61:14:ED:30:4C:92:10:6F:A4:DA:1F:22:95:CE
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/lH8Q6-NkYRTtMEySEG-k2h8ilc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.29.0-163.5.30.255
163.5.32.0-163.5.36.255
163.5.38.0/24
163.5.58.0-163.5.64.255
163.5.66.0/23
163.5.70.0-163.5.72.255
163.5.74.0-163.5.79.255
163.5.83.0-163.5.84.255
163.5.86.0-163.5.89.255
163.5.91.0-163.5.106.255
163.5.108.0-163.5.114.255
163.5.116.0-163.5.120.255
163.5.122.0/23
163.5.125.0-163.5.129.255
163.5.131.0/24
163.5.134.0/23
163.5.137.0-163.5.144.255
163.5.146.0-163.5.148.255
163.5.150.0-163.5.152.255
163.5.154.0-163.5.157.255
163.5.159.0-163.5.172.255
163.5.174.0-163.5.189.255
163.5.191.0-163.5.196.255
163.5.198.0-163.5.210.255
163.5.213.0/24
163.5.216.0-163.5.218.255
163.5.222.0-163.5.230.255
163.5.232.0/24
163.5.234.0/24
163.5.237.0-163.5.241.255
163.5.243.0-163.5.246.255
163.5.248.0/21
185.253.54.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5b:19:32:3a:72:b9:49:38:aa:c2:45:4f:35:d6:ea:40:58:
46:83:86:c3:53:eb:e4:99:91:85:98:c4:07:a5:54:71:5c:74:
9a:5c:a0:37:00:41:57:f8:fd:65:c4:df:e1:3b:9b:14:1f:2a:
55:9e:99:2c:86:39:fa:d4:d9:13:79:11:0c:88:1d:a7:ad:0a:
26:3b:c3:e4:b3:1e:c1:9a:9a:76:02:04:e4:aa:a9:54:ac:ec:
a6:53:dd:5f:25:7c:98:c3:04:e6:a5:28:00:86:78:00:a7:c1:
7f:4f:86:73:1a:84:56:da:f4:d1:dc:90:01:bc:cc:1b:21:19:
e8:c8:fc:b8:38:12:04:42:35:53:51:76:cc:4f:3e:e4:40:a9:
b8:a4:9a:68:a8:52:e3:a7:09:1c:c8:71:44:9f:bc:43:80:95:
e9:f9:a1:f6:bf:34:9c:a1:47:fd:4a:fb:06:50:c6:26:0a:4e:
5a:bb:0e:36:e3:8a:e7:81:21:87:12:3e:28:12:3a:05:63:a3:
0b:6b:fd:94:53:ad:bb:19:9e:ab:9a:59:02:63:00:1e:0e:7f:
ea:5e:37:7c:e4:7e:37:90:15:0a:25:b4:98:c9:29:bd:6e:1d:
98:7e:f2:f4:07:e5:db:29:01:b1:8f:cb:3e:c6:79:37:2d:f7:
29:9d:1b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:32:48 2025 by rpki-client