Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0BU48i3d4OjkAc2EzNtblqw9AI0.roa
File: 0BU48i3d4OjkAc2EzNtblqw9AI0.roa (raw, json)
Hash identifier: /EiNTAHNTvRu2dqFeW5tOxMlOtuzs0nM/klKlx+ADZo=
Subject key identifier: D0:15:38:F2:2D:DD:E0:E8:E4:01:CD:84:CC:DB:5B:96:AC:3D:00:8D
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01829298C5CBB88B2484F45D193F4ADFF69A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0BU48i3d4OjkAc2EzNtblqw9AI0.roa
Signing time: Fri 12 Aug 2022 15:07:41 +0000
ROA not before: Fri 12 Aug 2022 15:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 163.5.190.0/24 maxlen: 24
163.5.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:98:c5:cb:b8:8b:24:84:f4:5d:19:3f:4a:df:f6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 12 15:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d01538f22ddde0e8e401cd84ccdb5b96ac3d008d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e6:b9:62:3e:69:43:f6:3c:a1:1f:ca:be:a9:
55:e1:0b:d3:b5:8d:fd:bb:04:9f:5d:53:d6:9f:37:
7f:8a:4b:ae:bc:4f:89:60:c3:fd:6f:f3:2b:89:d0:
28:27:11:46:62:09:55:18:85:86:eb:95:bd:57:4f:
78:55:f5:cd:6d:92:0f:76:98:e1:f7:5c:de:10:23:
63:a4:46:5f:06:43:07:6e:57:35:25:4d:d9:aa:1b:
fb:84:58:2a:53:fe:88:9e:4a:cf:b1:f4:2c:2a:c9:
6a:95:b6:09:6b:5f:69:2b:8d:04:14:de:6a:b3:d7:
59:f2:16:a1:0e:4d:a8:30:d3:60:18:04:83:c3:0e:
3c:42:91:b6:1b:9e:de:83:88:c5:ec:22:7c:19:15:
a5:b2:73:89:b3:53:59:cc:bd:76:d4:e1:25:9d:bb:
5f:d4:e6:60:6f:63:1b:8a:8e:42:e2:1b:2a:db:d5:
f8:8a:c0:7c:2b:a4:1a:25:99:08:e7:81:62:ba:00:
2f:64:49:22:9d:e8:ea:6b:76:3b:07:12:80:10:85:
b2:dc:bd:37:60:dd:3f:b3:88:32:0f:f5:e7:8c:52:
bd:97:c5:81:42:9e:7c:50:12:5a:22:c7:7c:1b:a1:
47:c7:05:af:be:cb:d3:0e:2a:bc:55:f1:40:7f:7e:
54:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:15:38:F2:2D:DD:E0:E8:E4:01:CD:84:CC:DB:5B:96:AC:3D:00:8D
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0BU48i3d4OjkAc2EzNtblqw9AI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.136.0/24
163.5.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:73:ec:c9:c6:9d:ba:7c:d5:75:7f:80:1f:ec:50:77:4a:c2:
53:1d:da:b4:26:c2:8a:7b:23:c5:c7:fc:40:1b:f2:8e:20:7f:
07:60:ae:4b:03:4c:6b:9e:e5:32:36:93:73:89:f5:d9:7b:c7:
54:f6:f3:62:33:13:ee:c2:8a:82:e3:fb:f8:b4:ab:3c:fc:75:
84:1b:0f:84:89:21:dc:85:80:58:42:04:d2:d2:13:85:d0:8f:
c8:31:10:af:be:15:c1:2a:09:eb:d3:e4:0d:5f:c2:04:f1:3d:
61:d8:41:b5:3a:26:e9:af:60:0d:95:ff:2d:76:1f:47:40:5e:
26:a4:1f:4c:ea:ac:8d:32:38:94:a9:fe:a3:c5:74:7c:f2:23:
59:24:7e:15:a2:90:88:c9:bc:3e:dc:f6:88:8d:1f:c6:20:12:
31:72:63:4f:94:47:27:a5:13:08:c0:b4:c7:b5:9c:69:ba:bb:
ed:4d:10:59:65:0c:ec:d3:f7:f0:92:c8:16:dc:37:b0:60:35:
0d:96:09:ee:d3:9b:32:08:db:76:38:c1:38:2c:a9:a8:c2:5c:
86:b5:b1:21:60:5c:85:59:24:fd:76:42:06:58:d0:11:a6:24:
97:7e:3d:d1:b1:d8:39:8c:ae:57:10:9d:62:3c:8f:3b:1d:54:
b9:15:09:a7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYKSmMXLuIskhPRdGT9K3/aaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTg1MWI2ZGQ1ZDM2NGVlMTllMGIzODIwMWIzZThkZjI2
MjRiY2IwHhcNMjIwODEyMTUwNzQxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE1MzhmMjJkZGRlMGU4ZTQwMWNkODRjY2RiNWI5NmFjM2QwMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmua5Yj5pQ/Y8oR/KvqlV4QvTtY39
uwSfXVPWnzd/ikuuvE+JYMP9b/MridAoJxFGYglVGIWG65W9V094VfXNbZIPdpjh
91zeECNjpEZfBkMHblc1JU3Zqhv7hFgqU/6InkrPsfQsKslqlbYJa19pK40EFN5q
s9dZ8hahDk2oMNNgGASDww48QpG2G57eg4jF7CJ8GRWlsnOJs1NZzL121OElnbtf
1OZgb2Mbio5C4hsq29X4isB8K6QaJZkI54FiugAvZEkinejqa3Y7BxKAEIWy3L03
YN0/s4gyD/XnjFK9l8WBQp58UBJaIsd8G6FHxwWvvsvTDiq8VfFAf35UTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNAVOPIt3eDo5AHNhMzbW5asPQCNMB8GA1UdIwQY
MBaAFAzoUbbdXTZO4Z4LOCAbPo3yYkvLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMt
OWZlOTQxMDhmZjAxLzEvMEJVNDhpM2Q0T2prQWMyRXpOdGJscXc5QUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kMDJkZmItOTY3My00OWE4LTk3MWMtOWZlOTQxMDhmZjAx
LzEvRE9oUnR0MWROazdobmdzNElCcy1qZkppUzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAowWIAwQA
owW+MA0GCSqGSIb3DQEBCwUAA4IBAQAvc+zJxp26fNV1f4Af7FB3SsJTHdq0JsKK
eyPFx/xAG/KOIH8HYK5LA0xrnuUyNpNzifXZe8dU9vNiMxPuwoqC4/v4tKs8/HWE
Gw+EiSHchYBYQgTS0hOF0I/IMRCvvhXBKgnr0+QNX8IE8T1h2EG1Oibpr2ANlf8t
dh9HQF4mpB9M6qyNMjiUqf6jxXR88iNZJH4VopCIybw+3PaIjR/GIBIxcmNPlEcn
pRMIwLTHtZxpurvtTRBZZQzs0/fwksgW3DewYDUNlgnu05syCNt2OME4LKmowlyG
tbEhYFyFWST9dkIGWNARpiSXfj3Rsdg5jK5XEJ1iPI87HVS5FQmn
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org