Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/08Wm4-rBjI1w0JSJKzKukSI8RYA.roa
File: 08Wm4-rBjI1w0JSJKzKukSI8RYA.roa (raw, json)
Hash identifier: dc/fcCBUR7OfX4FMBjm41CblJUGrCI8ng+bu51vFlRI=
Subject key identifier: D3:C5:A6:E3:EA:C1:8C:8D:70:D0:94:89:2B:32:AE:91:22:3C:45:80
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 018525107C430DFBF4809D636AE97582AF4E
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/08Wm4-rBjI1w0JSJKzKukSI8RYA.roa
Signing time: Sun 18 Dec 2022 11:48:35 +0000
ROA not before: Sun 18 Dec 2022 11:48:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211936
IP address blocks: 163.5.215.0/24 maxlen: 24
163.5.106.0/24 maxlen: 24
163.5.118.0/24 maxlen: 24
163.5.225.0/24 maxlen: 24
163.5.121.0/24 maxlen: 24
163.5.119.0/24 maxlen: 24
163.5.229.0/24 maxlen: 24
163.5.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:25:10:7c:43:0d:fb:f4:80:9d:63:6a:e9:75:82:af:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Dec 18 11:48:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3c5a6e3eac18c8d70d094892b32ae91223c4580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:ad:ea:4b:62:94:69:19:2b:cc:c2:c9:86:
dd:8e:00:57:e2:a2:c9:00:f4:b3:8e:4b:ff:9e:00:
ce:23:80:9a:24:3f:be:09:9d:28:96:94:1b:c6:3d:
43:8a:4d:94:29:cc:3b:99:39:97:82:18:0b:a9:20:
48:60:25:0b:ad:21:4e:a5:43:21:67:e9:84:fe:6c:
e5:5e:5c:3d:a5:e4:9d:ce:46:3f:19:9b:e6:c5:9e:
e2:a2:b5:51:32:64:82:d6:29:58:04:ac:5c:56:70:
d7:7f:68:98:ec:19:0e:26:6d:06:7f:83:73:2a:b8:
40:d3:0c:35:a4:0d:20:c1:5a:83:0b:1e:dc:98:f4:
4b:24:8d:83:1b:80:d5:da:68:51:7b:9c:80:e3:64:
d8:a4:60:48:a3:ac:91:5f:91:fa:d5:07:03:31:cf:
bf:1d:53:4c:bc:63:f9:d5:83:0a:a4:86:fd:e3:9c:
ad:bc:7b:3e:69:60:6f:12:76:f0:e5:7d:81:1a:e1:
b0:db:54:04:42:18:ca:d9:a4:d7:de:39:23:fb:39:
e9:f3:97:6c:b5:d4:fa:f8:9b:96:fa:13:4d:c7:ea:
b5:1b:db:49:a5:bd:21:15:ac:26:f9:fe:17:d0:d3:
ea:be:e7:f2:a0:6f:27:52:99:86:91:a0:1b:5c:63:
53:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:A6:E3:EA:C1:8C:8D:70:D0:94:89:2B:32:AE:91:22:3C:45:80
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/08Wm4-rBjI1w0JSJKzKukSI8RYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.106.0/24
163.5.118.0/23
163.5.121.0/24
163.5.159.0/24
163.5.215.0/24
163.5.225.0/24
163.5.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:05:83:29:dd:5d:2c:d5:16:38:06:6d:f2:b2:69:ad:ae:0d:
7f:e0:bc:e0:0f:6d:11:88:c1:ff:91:7f:3c:73:0d:23:b6:b9:
e8:d1:96:a2:bd:2c:8b:cf:1e:f8:e2:3c:bf:82:52:ee:31:34:
7e:52:45:c7:bf:6e:d5:c7:38:6a:21:52:56:e3:c2:82:d2:af:
39:ef:fd:19:ed:62:24:74:00:10:72:57:04:f1:80:5f:6e:b5:
86:86:2e:48:0e:87:f2:c3:2d:d8:cd:64:47:4e:25:d9:5f:2f:
5c:ad:4f:7d:44:e0:98:8a:d2:4f:d6:b1:a4:1d:f5:6f:04:fe:
12:10:54:74:7b:46:47:fd:09:59:1a:c0:d4:dd:77:73:e4:ad:
ec:c9:bd:60:cb:3f:dc:26:e4:d4:1c:f9:aa:af:41:3e:7f:78:
21:3a:89:61:b4:11:f0:83:00:1f:5b:98:6e:a1:d6:a2:15:9e:
27:f9:ff:e7:fc:4f:a7:40:64:4a:47:e8:1b:7b:24:80:3d:ee:
16:9a:32:2d:77:f7:99:c0:6c:7f:42:fe:e8:5c:f5:d3:b6:c6:
3d:15:bf:fe:84:4e:7a:d4:9e:f6:24:1d:fd:e0:16:6e:06:c2:
61:9a:a6:0a:03:31:86:a6:69:e2:bb:4e:be:e3:2e:98:4e:89:
ed:e9:43:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org