Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0NSgJvtUp2w_aKX0Q3y28iPA2ow.roa
File: 0NSgJvtUp2w_aKX0Q3y28iPA2ow.roa (raw, json)
Hash identifier: Dhp52osi7e1/aOvhAIPig3BLLhyhL5d9GbOwNeLA58o=
Subject key identifier: D0:D4:A0:26:FB:54:A7:6C:3F:68:A5:F4:43:7C:B6:F2:23:C0:DA:8C
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 01829296F1229919A8AC6CCD111B979B7E09
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0NSgJvtUp2w_aKX0Q3y28iPA2ow.roa
Signing time: Fri 12 Aug 2022 15:05:41 +0000
ROA not before: Fri 12 Aug 2022 15:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 163.5.196.0/24 maxlen: 24
163.5.195.0/24 maxlen: 24
163.5.198.0/24 maxlen: 24
163.5.197.0/24 maxlen: 24
163.5.199.0/24 maxlen: 24
163.5.194.0/24 maxlen: 24
163.5.201.0/24 maxlen: 24
163.5.200.0/24 maxlen: 24
163.5.203.0/24 maxlen: 24
163.5.205.0/24 maxlen: 24
163.5.204.0/24 maxlen: 24
163.5.206.0/24 maxlen: 24
163.5.209.0/24 maxlen: 24
163.5.208.0/24 maxlen: 24
163.5.207.0/24 maxlen: 24
163.5.156.0/24 maxlen: 24
163.5.155.0/24 maxlen: 24
163.5.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:92:96:f1:22:99:19:a8:ac:6c:cd:11:1b:97:9b:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 12 15:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0d4a026fb54a76c3f68a5f4437cb6f223c0da8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:53:88:cf:ec:59:1c:fa:7c:4c:d5:29:d3:
1b:da:8d:d0:2b:74:25:77:90:c8:a2:a5:0f:e2:c2:
d0:0d:fb:33:bb:95:b0:1e:c6:76:cb:53:8f:0a:3d:
ae:a7:7d:dc:f2:52:9e:43:50:db:e1:58:86:45:f9:
9b:4e:17:40:89:a4:2e:53:f6:7d:c2:fb:df:93:19:
b5:19:c2:ad:53:b3:51:83:9c:db:77:81:00:19:78:
9b:29:3e:84:da:a0:07:10:68:14:8e:a9:3f:c1:ca:
e7:65:73:f6:08:28:17:f1:c7:b5:78:2c:aa:9d:5a:
f6:92:2e:1a:d4:ff:de:a7:10:cc:52:28:2d:9e:cf:
0b:aa:13:64:74:d2:fd:49:89:96:91:7c:dc:ca:a7:
c5:e0:24:44:47:ab:a3:8b:88:47:ff:86:f2:86:87:
a9:cb:8b:3a:01:c2:7a:39:db:63:df:59:9e:27:a3:
e6:1c:74:22:36:48:04:2f:75:66:72:b1:3b:88:cf:
47:c3:da:93:b7:79:d2:d9:1b:b1:94:37:94:a8:fc:
61:b6:67:48:e6:5b:5f:ae:0a:f4:6b:7b:6d:e6:c9:
86:be:72:aa:00:73:16:d7:6e:c6:23:2f:94:95:91:
af:4c:80:d7:a0:f7:a3:58:8b:01:f9:33:21:8e:4a:
ee:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D4:A0:26:FB:54:A7:6C:3F:68:A5:F4:43:7C:B6:F2:23:C0:DA:8C
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/0NSgJvtUp2w_aKX0Q3y28iPA2ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.155.0-163.5.157.255
163.5.194.0-163.5.201.255
163.5.203.0-163.5.209.255
Signature Algorithm: sha256WithRSAEncryption
80:61:4a:b6:71:b3:ff:01:4e:26:83:f9:60:4a:ca:2d:65:fb:
5f:89:3c:91:9a:cc:3e:14:06:fa:68:73:92:d5:d3:a4:19:46:
23:76:8d:84:d5:6c:d5:72:fa:6c:d4:92:d4:54:dd:de:86:bc:
bf:9c:a5:d0:ed:41:d8:2c:de:e8:70:da:c1:08:93:a2:3f:2d:
f2:9b:29:2d:95:a3:83:0c:72:00:d6:8f:1f:06:ea:cf:ee:92:
40:2a:72:a8:5f:82:93:c9:49:b3:e4:4c:c5:cb:91:88:9d:c5:
65:1b:0a:50:5e:c9:24:f8:54:27:11:16:a8:57:fa:98:1f:15:
52:a5:21:b0:83:26:9c:6b:6c:10:92:90:79:33:d1:5d:ee:38:
19:28:91:e7:e3:4f:43:c0:f2:05:66:59:6f:68:fa:4a:87:33:
d0:4b:d8:9e:49:6e:b0:c0:fa:48:2b:06:bc:9f:1c:86:45:82:
57:b3:42:f5:7c:66:ab:1a:20:67:04:63:55:ad:0c:db:38:52:
44:62:d0:3a:fc:f0:ae:4c:5f:8e:32:ee:a7:3f:57:9f:89:0a:
a7:15:25:c2:5c:4c:8f:ad:8c:e4:01:5f:f6:e1:28:13:46:23:
83:70:68:bc:5e:3a:68:2a:0a:06:ed:06:87:f0:38:25:29:e1:
cf:fc:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:08 2023 by rpki-client on console-ams.rpki-client.org